367346 matches found
CLSA-2026-1791821318 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.2-tuxcare.1...
@openinc/parse-server-opendash (>=4.0.0, <=4.2.0) potentially affected by CVE-2026-109301 via parse-server (>=9.6.0-alpha.37, <=9.10.0)
parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.2.0 Source cves: CVE-2026-109301 Source advisory: MEND:CVE-2026-109301...
hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-109288 via open-webui (0.11.0)
open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-109288 Source advisory: MEND:CVE-2026-109288...
hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-109287 via open-webui (0.11.0)
open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-109287 Source advisory: MEND:CVE-2026-109287...
ayy (>=0.1.6, <=0.1.8), crawl4agent (>=0.2.0, <=0.3.5) +21 more potentially affected by CVE-2026-109239 via crawl4ai (>=0.3.731, <=0.9.2)
crawl4ai PYPI version =0.3.731, =0.1.6, =0.2.0, =0.1.0, =0.16.0, =0.3.0, =0.5.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3.1 and more Source cves: CVE-2026-109239 Source advisory: MEND:CVE-2026-109239...
Siemens .NET Client Library for SIMATIC S7 Webserver API path traversal vulnerability
The Siemens .NET Client Library for SIMATIC S7 Webserver API versions prior to 3.3.61 has a path traversal vulnerability. This vulnerability stems from the failure to properly validate the file names received from the remote server during ticket downloads. As a result, path traversal is possible,...
Red Hat Enterprise Linux buffer error vulnerability
Red Hat Enterprise Linux versions 10 and 9 have a buffer error vulnerability. This vulnerability stems from integer underflow in the processing of the getpeername result from the clevis PKCS11 pin library. When an AFUNIX client connects to a data socket without binding an address, it can cause th...
Siemens .NET Client Library for SIMATIC S7 Webserver API information leakage vulnerability
The Siemens .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 has a vulnerability related to information leakage. This vulnerability arises from the improper masking of the PLC recovery password from HTTP error messages. As a result, attackers with access to logs or other...
MAL-2026-17821 Malicious code in @fazzcodestudio/fbot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d04f078ee45b434a2f48ebecea2fc18811a6830ab2e24baccea6e577baa0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ch.galinet.xml:xml-merge (0.2), ch.galinet.xml:xsd-hierarchy (0.2) +222 more potentially affected by CVE-2026-92877 via com.sun.xml.bind:jaxb-osgi (>=4.0.0-m4, <=4.0.9)
com.sun.xml.bind:jaxb-osgi MAVEN version =4.0.0-m4, =3.0.0, =4.0.0-m4, =0.42.0, =2.0.0, =2.0.0, =2.0.0, =1.2.1, =1.2.1, =1.2.1, =4.0.1, =4.0.1, =5.0.3 and more Source cves: CVE-2026-92877 Source advisory: SNYK:JAVA-COMSUNXMLBIND-20883140...
be.jidoka:jdk-keycloak-admin (>=2.3.0, <=2.5.0), build.jenesis:build.jenesis.plugin.xjc (>=0.0.1, <=0.1.0) +713 more potentially affected by CVE-2026-92877 via org.glassfish.jaxb:xsom (>=4.0.0-m4, <=4.0.9)
org.glassfish.jaxb:xsom MAVEN version =4.0.0-m4, =2.3.0, =0.0.1, =1.0, =0.5.10, =8.0.0, =8.0.0, =8.0.0, =1.10.0, =1.10.0-rc2, =1.10.0-rc2, =1.10.0, =1.10.0, =2.0.0 and more Source cves: CVE-2026-92877 Source advisory: SNYK:JAVA-ORGGLASSFISHJAXB-20883136...
CLSA-2026-1791814987 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.0.6-tuxcare.1...
CLSA-2026-1791814922 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.3.10-tuxcare.1...
CLSA-2026-1791814910 TuxCare security update for undici (2 CVEs)
TuxCare rebuilt undici to address 2 CVEs. Fixed in 6.19.5-tuxcare.4...
CLSA-2026-1791814907 TuxCare security update for handlebars (1 CVE)
TuxCare rebuilt handlebars to address 1 CVE. Fixed in 4.5.3-tuxcare.1...
CLSA-2026-1791814903 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 1.17.0-tuxcare.1...
Malware in @library-wide/library-shell
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CLSA-2026-1791809045 sssd: Fix of 2 CVEs
CVE-2026-90462: deny access in sdapaccessppolicystepdone when the LDAP ppolicy user search returns zero entries, instead of returning success and caching an allow decision - CVE-2026-90996: reject an empty request body in the NSS responder request parsers before bodyblen - 1 is read...
ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root
Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...