7826 matches found
PT-2026-76814
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/organization.ts allows a user with member:create permission to invite an account with the owner role, while...
ath12k ce driver Heap Buffer Overflow
The vulnerability of the ath12kcefreepipes function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability...
CVE-2026-73659
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and...
CVE-2026-58433
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
CVE-2026-58429
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...
CVE-2026-58417
REST API exposes organization membership of private organizations to public...
CVE-2026-58433
The Git repository management system Gitea contains a vulnerability in its team-repository linking endpoint . This flaw allows an attacker to bypass the RepoAdminChangeTeamAccess organization setting, which is designed to restrict repository administrators from modifying team access. Exploiting t...
CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
EUVD-2026-58160
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
EUVD-2026-58157
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...
CVE-2026-58429
The Git repository management system Gitea is vulnerable to an access control deficiency in its Organization and Permission Endpoints (specifically /api/v1/user/orgs and /api/v1/users/{username}/orgs/{org}/permissions). This vulnerability allows for a Personal access tokens scope bypass , which c...
CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...
CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...
CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints...
CVE-2026-58427 Private org member list leaked via /members API endpoint — incomplete fix for PR #38145
Private org member list leaked via /members API endpoint — incomplete fix for PR 38145...
CVE-2026-58417 REST API exposes organization membership of private organizations to public
REST API exposes organization membership of private organizations to public...