232829 matches found
GHSA-W466-C33R-3GJP pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes
Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expected fixed behavior, then use the detailed exploit narrative below only if you want to replay the original path. - Advisory: CAND-PNPM-063 / GHSA-w466-c33r-3gjp - Advisory URL:...
EUVD-2026-39483
pnpm: Repository-controlled configDependencies can select a pacquet native install engine...
pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle
Summary Keep build approval for opaque dependency sources byte-exact for GHSA-5wx6-mg75-v57r / CAND-PNPM-123. Merged upstream commit bf1b731ee6 fixed the original name-only approval bypass by making build policy consume the resolved dependency identity. One collision remained: the generic...
EUVD-2026-39488
pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity Field...
GHSA-Q6XX-5VR8-P898 Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check
Summary In nezha v1.14.13–v1.14.14 and v2.0.0–v2.0.9, the WebSocket endpoints GET /ws/terminal/:id and GET /ws/file/:id authenticate the caller only by the presence of a valid stream UUID, with no ownership check tying that UUID to the user who created the stream. Any authenticated dashboard user...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: nerdctl, flux, k9s-fips, rancher-agent, skaffold-fips, trivy, etcd-fips, argocd-image-updater-fips, external-secrets-operator, frankenphp-8.5, argocd-image-updater, argo-cd, knative-serving-fips, containerd, frankenphp-8.3, prometheus-elasticsearch-exporter,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: kyverno, cluster-api-azure-controller, fulcio, atlantis, osv-scanner, gptscript, pulumi-language-java, scorecard, step, gatus, caddy, vault-benchmark, crossplane-provider-azure-authorization, aactl, kubernetes-dashboard, argo-cd, opentofu, k8sgpt, k9s, apko, glab,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: kyverno, cluster-api-azure-controller, fulcio, atlantis, osv-scanner, gptscript, pulumi-language-java, scorecard, step, crossplane-provider-aws-elasticache, gatus, caddy, vault-benchmark, crossplane-provider-azure-authorization, aactl, kubernetes-dashboard, argo-cd,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: kyverno, spire-server, zot, skaffold, osv-scanner, cloud-provider-aws, k3s, prometheus, kubernetes, zarf, telegraf, external-dns, minio, flux-source-controller, chisel, kaf, snyk-cli, cert-manager, kine, trivy-operator, aactl, kubernetes-dashboard, trivy, flux, istio...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: kyverno, osv-scanner, gptscript, pulumi-language-java, scorecard, step, caddy, aactl, kubernetes-dashboard, argo-cd, opentofu, k9s, apko, cilium-cli, argocd-image-updater, step-kms-plugin, go-discover, opentelemetry-collector, gomplate, step-issuer, spire-server,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: kyverno, spire-server, zot, skaffold, osv-scanner, cloud-provider-aws, k3s, prometheus, kubernetes, zarf, telegraf, external-dns, minio, flux-source-controller, chisel, kaf, snyk-cli, cert-manager, kine, trivy-operator, aactl, kubernetes-dashboard, trivy, flux, istio...
GHSA-JPPX-RXG9-JMRX vulnerabilities
Vulnerabilities for packages: kyverno, spire-server, docker-cli-buildx, zot, cloud-provider-aws, k3s, prometheus, kubernetes, telegraf, external-dns, minio, snyk-cli, kaf, podman, kine, buildah, aactl, kubernetes-dashboard, flux, istio, gitlab-kas, rancher, cilium-cli, external-secrets-operator,...
DEBIAN-CVE-2026-53309
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...
UBUNTU-CVE-2026-53290
In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drmdevput called before stream disable in close In xeeustallstreamclose, drmdevput is called before the stream is disabled and its resources are freed. If this drops the last reference, the device structures...
CVE-2026-53309
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...
EUVD-2026-39844
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...
CVE-2026-53309
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...
CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...
CVE-2026-53309 ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...
CVE-2026-53309
In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison The local-vs-remote region comparison loop uses '=' instead of '', causing it to read one entry past the valid range of qrregions. The other loops in the same functio...