333 matches found
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061
Scriban before 7.2.2 has an access-modifier bypass in TypedObjectAccessor, allowing template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters and mass-assign public-setter properties, permanently alt...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
EUVD-2026-59947
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061: Improper Access Control
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
PT-2026-73148
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14071 Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: spark-operator, jobset-fips, stakater-reloader-fips, crossplane-provider-aws-cloudtrail-fips, jfrog-cli, crossplane-provider-aws-codecommit, mongodb-kubernetes-operator-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-timestreamwrite-fips, keda-fips,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: jobset-fips, crossplane-provider-aws-codecommit, aws-otel-collector-fips, crossplane-provider-aws-sns-fips, logstash-exporter, crossplane-provider-keycloak-fips, prometheus-node-exporter, vendir-fips, crossplane-provider-aws-appmesh, crossplane-provider-aws-wafv2,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: spark-operator, jobset-fips, stakater-reloader-fips, crossplane-provider-aws-cloudtrail-fips, jfrog-cli, crossplane-provider-aws-codecommit, mongodb-kubernetes-operator-fips, crossplane-provider-aws-sns-fips, crossplane-provider-aws-timestreamwrite-fips, keda-fips,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: jobset-fips, crossplane-provider-aws-codecommit, aws-otel-collector-fips, crossplane-provider-aws-sns-fips, logstash-exporter, crossplane-provider-keycloak-fips, prometheus-node-exporter, vendir-fips, crossplane-provider-aws-appmesh, crossplane-provider-aws-wafv2,...
CLEANSTART-2026-KM76344 Security fixes in volume-modifier-for-k8s 0.9.5-r2
Package volume-modifier-for-k8s version 0.9.5-r2 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...
CLEANSTART-2026-EE75554 Security fixes in volume-modifier-for-k8s-fips 0.9.5-r2
Package volume-modifier-for-k8s-fips version 0.9.5-r2 fixes 1 vulnerabilities: CVE-2026-27145...
EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2026-3164)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows ...
EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2026-3006)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within...