13178 matches found
SUSE CVE-2026-55443
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...
SUSE CVE-2026-101100
A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...
SUSE CVE-2026-101101
A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...
Origin Validation Error
Overview next is a react framework. Affected versions of this package are vulnerable to Origin Validation Error via the MCP middleware endpoint /next/mcp, where insufficient host validation allows a DNS rebinding attack. An attacker who controls a malicious DNS server can cause a victim's browser...
Gitea Locale DoS
The vulnerability of the Locale function in the modules/web/middleware/locale.go file of the Git repository management system Gitea is related to the improper implementation of flow control. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CLSA-2026-1790884229 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.0-tuxcare.4...
CLSA-2026-1790876768 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 8.1.1-tuxcare.1...
CVE-2026-101101
A flaw was found in ag-ui. A remote authenticated attacker can trigger an uncaught exception during JSON parsing by submitting malformed input to the middleware component. This failure can cause the application to crash unexpectedly, resulting in a Denial of Service DoS. Mitigation Restrict netwo...
middleware-apm (>=0.1.29, <=0.1.37) potentially affected by CVE-2026-102925 via virtualenv (20.0.17)
virtualenv PYPI version 20.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - middleware-apm =0.1.29, =0.1.37 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...
middleware-apm (>=0.1.29, <=0.1.37) potentially affected by CVE-2026-102937 via virtualenv (20.0.17)
virtualenv PYPI version 20.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - middleware-apm =0.1.29, =0.1.37 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...
CLSA-2026-1790866099 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.4-tuxcare.2...
CLSA-2026-1790866070 TuxCare security update for webpack-dev-middleware (1 CVE)
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 6.1.3-tuxcare.1...
ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2026-103267 via ghost (>=0.5.10, <=1.26.2)
ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2026-103267 Source advisory: SNYK:JS-GHOST-21694004...
ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2026-103282 via ghost (>=0.5.10, <=1.26.2)
ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2026-103282 Source advisory: SNYK:JS-GHOST-21694013...
ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2026-103292 via ghost (>=0.5.10, <=1.26.2)
ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2026-103292 Source advisory: SNYK:JS-GHOST-21693995...
Security Bulletin: Multiple vulnerabilities in i18next-http-middleware affect IBM Cloud Pak System
Summary Multiple vulnerabilities in i18next-http-middleware affect IBM Cloud Pak System CVE-2026-41683, CVE-2026-41690, CVE-2026-42353. Vulnerability Details CVEID:CVE-2026-41683 DESCRIPTION: i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify an...
CLEANSTART-2025-LJ89102 avatar middleware in Gitea before 1
Security vulnerability affects the gitea package. The avatar middleware in Gitea before 1...
PT-2026-110285
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.4-tuxcare.2...