Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview @nuxt/nitro-server is a Nitro server integration for Nuxt Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the as prop in server island components that forward attacker-controlled values into dynamic...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +15 more potentially affected by CVE-2026-71316 via @nuxt/nitro-server (>=4.4.2, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.2, =3.2.0, =4.4.2-depup.0, =1.4.4, =1.2.1, =1.6.0-rc.3, =1.0.0-alpha.1, =4.3.1-dev.1, =1.0.0, =4.4.2, =0.6.0-rc.1, =0.2.0-alpha.5, =0.3.0-alpha.2 and more Source cves: CVE-2026-71316 Source advisory: SNYK:JS-NUXTNITROSERVER-18565121...

@qingwave/cclens (>=0.1.0, <=0.2.0), nuxt (>=3.21.7, <=3.21.9) potentially affected by CVE-2026-71315 via @nuxt/nitro-server (>=3.21.7, <=3.21.9)

@nuxt/nitro-server NPM version =3.21.7, =0.1.0, =3.21.7, =3.21.9 Source cves: CVE-2026-71315 Source advisory: SNYK:JS-NUXTNITROSERVER-18565126...

@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +13 more potentially affected by CVE-2026-71315 via @nuxt/nitro-server (>=4.4.7, <=4.5.0)

@nuxt/nitro-server NPM version =4.4.7, =3.2.0, =4.5.0-depup.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =4.4.7, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-71315 Source advisory: SNYK:JS-NUXTNITROSERVER-18565126...

Incorrect Authorization

Overview @nuxt/nitro-server is a Nitro server integration for Nuxt Affected versions of this package are vulnerable to Incorrect Authorization in the route rule matching. An attacker can gain unauthorized access to protected pages and sensitive data by crafting requests to mixed-case paths that...

@geode/opengeodeweb-front (>=9.13.1-rc.9, <=10.0.2-rc.4), @qingwave/cclens (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2026-71314 via @nuxt/nitro-server (>=3.20.0, <=3.21.9)

@nuxt/nitro-server NPM version =3.20.0, =9.13.1-rc.9, =0.1.0, =3.20.0, =3.21.9 Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXTNITROSERVER-18565123...

Improper Validation of Specified Quantity in Input

Overview @nuxt/nitro-server is a Nitro server integration for Nuxt Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the v-for in server-side rendering of islands or server components. An attacker can cause the server to allocate excessive...

@bloggrify/bento (>=3.0.0, <=3.1.0), @bloggrify/core (>=3.0.0, <=3.3.0) +19 more potentially affected by CVE-2026-71314 via @nuxt/nitro-server (>=4.2.0, <=4.5.0)

@nuxt/nitro-server NPM version =4.2.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =4.2.2-depup.0, =10.0.2-rc.5, =1.1.11, =1.0.8, =1.6.0-rc.3, =0.4.5, =3.0.0-dev.27, =1.0.0, =4.2.0, =0.5.0, =0.6.0 and more Source cves: CVE-2026-71314 Source advisory: SNYK:JS-NUXTNITROSERVER-18565123...

Important: aws-nitro-enclaves-cli

Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::fromutf8unchecked. OpenSSL doe...

Important: aws-nitro-enclaves-cli

Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::fromutf8unchecked. OpenSSL doe...

Amazon Linux 2 : aws-nitro-enclaves-cli, --advisory ALAS2NITRO-ENCLAVES-2026-115 (ALASNITRO-ENCLAVES-2026-115)

The version of aws-nitro-enclaves-cli installed on the remote host is prior to 1.4.5-0. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-115 advisory. rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79,...

SUSE SLES16: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:22841-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22841-1 advisory. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate...

openSUSE 16: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (openSUSE-SU-2026:21406-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21406-1 advisory. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. -...

Security update for aws-nitro-enclaves-cli (important)

openSUSE security update: security update for aws-nitro-enclaves-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21406-1 Rating: important References: bsc1270492 bsc1270542 bsc1270705 bsc1270747 bsc1270839 bsc1270932 bsc1270952 Cross-References:...

SUSE-SU-2026:22841-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl cra...

OPENSUSE-SU-2026:21406-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl cra...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:3152-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3152-1 advisory. This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password...

Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270542. CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270705. CVE-2026-41681:...

SUSE-SU-2026:3152-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270542. - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270705. -...

Amazon Linux 2023 : aws-nitro-tpm-tools (ALAS2023-2026-1905)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1905 advisory. A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate...