Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the POST /api/n9e/datasource/list route, which lacks proper authorization checks. An attacker can obtain sensitive credentials, such as database passwords, HTTP bearer tokens, and mTLS client keys, by sending...

CVE-2026-48315

creationtimestamp| type| source ---|---|--- 2026-06-30 17:00:58+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji4gsd5h2y 2026-07-01 09:45:19+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01...

CVE-2026-8944

creationtimestamp| type| source ---|---|--- 2026-06-30 16:17:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjfo6om6p2i 2026-09-29 12:47:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

CVE-2026-57079

creationtimestamp| type| source ---|---|--- 2026-06-30 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjezu3btb2s...

CVE-2026-58167

Nightingale n9e before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client keys, to any authenticated low-privilege Standard role user through POST /api/n9e/datasource/list. The route is...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the --listen process due to inefficient HTTP body processing using repeated string concatenation, which results in quadratic time complexity. An attacker can cause excessive CPU usage and monopolize...

CVE-2025-15660

creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpjajjku442c 2026-07-01 02:50:50+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0819...

CVE-2026-53433

A flaw was found in fzf, a command-line fuzzy finder. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a crafted POST request with many small segments to the --listen mode. The inefficient HTTP body processing, which uses repeated string concatenation, leads...

CVE-2026-14161

creationtimestamp| type| source ---|---|--- 2026-06-30 14:12:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpj6oxbel72t 2026-07-01 02:34:08+00:00| seen| https://www.twcert.org.tw/en/cp-139-11012-63761-2.html...

CVE-2026-58374

creationtimestamp| type| source ---|---|--- 2026-06-30 14:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj67lqvub23 2026-07-06 12:03:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mpy2c74dl62h...

CVE-2026-53432

creationtimestamp| type| source ---|---|--- 2026-06-30 13:59:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5y5zdxj2j 2026-07-01 02:37:34+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53432 2026-07-03 12:14:51+00:00| seen|...

CVE-2026-8655

creationtimestamp| type| source ---|---|--- 2026-06-30 13:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5rn3s4x2w 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

DEBIAN-CVE-2026-53433

fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...

UBUNTU-CVE-2026-53433

fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...

CVE-2026-53433 Denial of Service in fzf

fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...

CVE-2026-53433

fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...

CVE-2026-53433

fzf is vulnerable to a Denial of Service DoS due to inefficient HTTP body processing in the --listen mode due to inefficient HTTP body processing using repeated string concatenation, resulting in quadratic time complexity On². A crafted POST request with many small segments can trigger excessive...

CVE-2026-13558

creationtimestamp| type| source ---|---|--- 2026-06-30 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mpiw5w4cb32f...

CVE-2026-57631

creationtimestamp| type| source ---|---|--- 2026-06-30 11:17:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiuvkq3wg2u...

CVE-2026-56808

creationtimestamp| type| source ---|---|--- 2026-06-30 10:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpitg3sgyo2w 2026-07-01 02:35:46+00:00| seen| https://jvn.jp/en/jp/JVN28979424 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY...