37 matches found
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: parseable, qdrant, nushell, lakekeeper, vector, pnpm, deno, garage, bootc, zed, atuin, workmux...
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: qdrant, pnpm, zed, parseable, deno, nushell, vector, atuin...
CVE-2026-32641
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
EUVD-2026-83265
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641
Parseable , a log analytics platform for high-volume data ingestion, is affected by an unauthenticated denial-of-service vulnerability in versions prior to 3.0.0 . The root cause is an unchecked unwrap() call in src/handlers/http/middleware.rs while parsing the x-amz-firehose-common-attributes he...
CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641: Uncaught Exception
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: pixi, rye, buck2, shadowsocks-rust, tealdeer, zed, wash, linkerd-extension-init, wasmtime, wasm-pack, parseable, deno, nushell, samply, sqlx, xh, oranda, qdrant, linkerd2-proxy, ntpd-rs, zizmor, cargo-audit, lychee, atuin, kdash, uv, sccache, wasmcloud, zola, rustup,...
[SECURITY] Fedora 43 Update: gpsd-3.26.1-7.fc43
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...
CVE-2026-56783
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including...
CVE-2026-56783 Parseable < 2.9.2 - Cleartext Credential Exposure in Notification Target API
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including...
CVE-2026-56783: Insufficiently Protected Credentials
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including...
GHSA-2F9F-GQ7V-9H6M vulnerabilities
Vulnerabilities for packages: parseable, lakekeeper, vector...
CVE-2026-43868 vulnerabilities
Vulnerabilities for packages: parseable, lakekeeper, vector...
CVE-2026-43868 vulnerabilities
Vulnerabilities for packages: vector, parseable...