2248 matches found
CVE-2026-103754
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CVE-2026-103754
A flaw in ansible-runner 's unstream_dir() function allows for path traversal and symlink escape during the extraction of a streamed zip archive. The vulnerability exists because the function fails to validate symbolic link targets and applies chmod() and utime() to unsanitized filesystem paths d...
CVE-2026-103754
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CVE-2026-103754
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CLEANSTART-2025-WF62094 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3
Security vulnerability affects the gitlab-runner package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3...
CVE-2026-102278 vulnerabilities
Vulnerabilities for packages: authentik, wazuh-dashboard, opentelemetry-auto-instrumentations-node, authentik-fips, lambda-nodejs, nextcloud-server, pelias-api, jupyter-base-notebook, rancher-api-ui, foxx-cli, langfuse-fips, unleash-fips, npm, commitizen, verdaccio, commercial-gitlab-rails-ee,...
GHSA-J6R3-76F7-8JCV vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, librechat, langfuse-fips, npm, commercial-gitlab-rails-ee, unleash-proxy, commercial-gitlab-rails-ee-fips, graalvm, kibana, prism, lerna, tileserver-gl-fips, renovate, unleash, opensearch-dashboards, homepage, actions-runner, code-server,...
CVE-2026-101911 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, librechat, langfuse-fips, npm, commercial-gitlab-rails-ee, unleash-proxy, commercial-gitlab-rails-ee-fips, graalvm, kibana, prism, lerna, tileserver-gl-fips, renovate, unleash, opensearch-dashboards, homepage, actions-runner, code-server,...
CVE-2026-101912 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, librechat, langfuse-fips, npm, commercial-gitlab-rails-ee, unleash-proxy, commercial-gitlab-rails-ee-fips, graalvm, kibana, prism, lerna, tileserver-gl-fips, renovate, unleash, opensearch-dashboards, homepage, actions-runner, code-server,...
CVE-2026-102277 vulnerabilities
Vulnerabilities for packages: authentik, wazuh-dashboard, opentelemetry-auto-instrumentations-node, authentik-fips, lambda-nodejs, nextcloud-server, pelias-api, jupyter-base-notebook, rancher-api-ui, foxx-cli, langfuse-fips, unleash-fips, npm, commitizen, verdaccio, commercial-gitlab-rails-ee,...
CVE-2026-18540 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, npm, commercial-gitlab-rails-ee-fips, prism, kibana, lerna, renovate, commercial-gitlab-rails-ee, homepage...
GHSA-Q2HR-2G5M-VWHR vulnerabilities
Vulnerabilities for packages: authentik, wazuh-dashboard, opentelemetry-auto-instrumentations-node, authentik-fips, lambda-nodejs, nextcloud-server, pelias-api, jupyter-base-notebook, rancher-api-ui, foxx-cli, langfuse-fips, unleash-fips, npm, commitizen, verdaccio, commercial-gitlab-rails-ee,...
GHSA-QHR7-859C-M2P7 vulnerabilities
Vulnerabilities for packages: authentik, wazuh-dashboard, opentelemetry-auto-instrumentations-node, authentik-fips, lambda-nodejs, nextcloud-server, pelias-api, jupyter-base-notebook, rancher-api-ui, foxx-cli, langfuse-fips, unleash-fips, npm, commitizen, verdaccio, commercial-gitlab-rails-ee,...
GHSA-R53P-7PC4-XJ5R vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, npm, commercial-gitlab-rails-ee-fips, prism, kibana, lerna, renovate, commercial-gitlab-rails-ee, homepage...
GHSA-H3MG-XC3C-68PW vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, librechat, langfuse-fips, npm, commercial-gitlab-rails-ee, unleash-proxy, commercial-gitlab-rails-ee-fips, graalvm, kibana, prism, lerna, tileserver-gl-fips, renovate, unleash, opensearch-dashboards, homepage, actions-runner, code-server,...
GHSA-RFGV-XXQX-MFG5 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, npm, commercial-gitlab-rails-ee-fips, prism, kibana, lerna, renovate, commercial-gitlab-rails-ee, homepage...
CVE-2026-19534 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, npm, commercial-gitlab-rails-ee-fips, prism, kibana, lerna, renovate, commercial-gitlab-rails-ee, homepage...
PT-2026-103842
A flaw was found in ansible-runner. The unstream dir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CVE-2026-103754: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102930 via virtualenv (20.30.0)
virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-X...