ROOT-APP-NPM-CVE-2026-64646 CVE-2026-64646 in next - Patched by Root

Root has patched CVE-2026-64646 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-64643 CVE-2026-64643 in next - Patched by Root

Root has patched CVE-2026-64643 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-91165: Improper Neutralization of Input During Web Page Generation

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.27.6, the responsemode=formpost SSO return path in warpgate-protocol-http/src/api/ssoproviderlist.rs uses serdejson::tostring inside ReturnToSsoPostResponse without neutralizing a script-closing sequence. The...

ROOT-APP-NPM-CVE-2026-64642 CVE-2026-64642 in next - Patched by Root

Root has patched CVE-2026-64642 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-32421 CVE-2025-32421 in next - Patched by Root

Root has patched CVE-2025-32421 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root

Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-39693 CVE-2024-39693 in next - Patched by Root

Root has patched CVE-2024-39693 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-34350 CVE-2024-34350 in next - Patched by Root

Root has patched CVE-2024-34350 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-48068 CVE-2025-48068 in next - Patched by Root

Root has patched CVE-2025-48068 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-23646 CVE-2022-23646 in next - Patched by Root

Root has patched CVE-2022-23646 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-87742

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

NPM: Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

NPM: Tina: Broken Access Control letting any TinaCloud user authorize against any self-hosted site vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions = 15.0.0...

CVE-2026-87742

A flaw in quarkus-websockets-next allows a remote attacker to trigger a Denial of Service by streaming messages over a single connection faster than the application can process them. The root cause is unbounded message buffering combined with a lack of read backpressure , which rapidly exhausts h...

CVE-2026-87742 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

EUVD-2026-81675

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

CVE-2026-87742 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

CVE-2026-87742

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

ROOT-APP-NPM-AIKIDO-2026-10759 AIKIDO-2026-10759 in next - Patched by Root

Root has patched AIKIDO-2026-10759 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-87742: Allocation of Resources Without Limits or Throttling

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified 7 vulnerabilities in various Oracle Enterprise Manager products, including Oracle Enterprise Manager Base Platform, Oracle Enterprise Manager for Fusion Middleware, and Oracle Enterprise Manager for Oracle Database. The security updates are not applicable to client-only...