6448 matches found
ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root
Root has patched CVE-2026-5795 in the org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...
CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9
CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9. A patched version of the package is available...
CVE-2026-47729 affecting package squid for versions less than 6.13-5
CVE-2026-47729 affecting package squid for versions less than 6.13-5. A patched version of the package is available...
CVE-2026-50012 affecting package squid for versions less than 6.13-5
CVE-2026-50012 affecting package squid for versions less than 6.13-5. A patched version of the package is available...
CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27
CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...
CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap buffer over-read vulnerability in multiple raw image format handles. This vulnerability occurred when processing images with -extract dimension...
Astra Linux – Vulnerability in util-linux
util-linux is a collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check-Time-of-Use vulnerability was identified in the SUID binary /usr/bin/mount from util-linux. When the mount binary sets up loop devices, it validates the source file path with user privileges using fork ...
CVE-2026-3644 affecting package python3 for versions less than 3.12.9-14
CVE-2026-3644 affecting package python3 for versions less than 3.12.9-14. A patched version of the package is available...
EUVD-2026-51396
CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure...
GHSA-HC8V-WWC9-VGXM go-git: Worktree operations may follow symlinks
Impact A symlink traversal issue in go-git could allow worktree operations to modify files outside the intended worktree path. The worktreeFilesystem wrapper rejected dangerous path strings, including paths containing .git, parent-directory components, or control characters. However, it did not...
Mermaid radar diagrams are vulnerable to DoS
Impact Mermaid radar diagrams allow arbitrary large values for ticks, which can cause high CPU usage, freezing the webpage/JavaScript process for long periods of time, until the process is eventually killed due to OOM/running out of memory. Proof-of-concept txt radar-beta axis a, b curve c 1, 1...
CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-58227 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-58227 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-59251 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-59251 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-42792 affecting package erlang for versions less than 26.2.5.21-3
CVE-2026-42792 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...
CVE-2026-69253
Summary of findings (CVE-2026-69253). Flowise allowed in-process vm2 sandbox JavaScript execution for several tools (AgentAsTool, ChatflowTool, ExecuteFlow) with the baseURL injected into generated code, enabling code injection and sandbox escape. The vulnerability arises because baseURL validati...