4283 matches found
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: cerbos-fips, pulumi-kubernetes-operator, grafana-alloy-fips, external-secrets-operator, rancher-fleet, cloudbeat, grafana-fips, kubescape-server, apko-fips, gitlab-runner, terragrunt, chainctl-fips, mapotf-fips, argocd-image-updater, k9s, gitlab-runner-fips, packer,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: cerbos-fips, pulumi-kubernetes-operator, grafana-alloy-fips, external-secrets-operator, rancher-fleet, cloudbeat, grafana-fips, kubescape-server, apko-fips, gitlab-runner, terragrunt, chainctl-fips, mapotf-fips, argocd-image-updater, k9s, gitlab-runner-fips, packer,...
PT-2026-45087
An uncontrolled resource consumption memory leak flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a...
PT-2026-45085
There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder allocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...
PT-2026-45084
An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability...
Malicious code in @mc-xp/mc-monolith-js-src-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2006e65ebcb876e87abed337730b23f079632086ac5af42f731dd65e20dbc56f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cross-site Scripting (XSS)
Overview @haxtheweb/iframe-loader is an Adds a loading indicator for iframes. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper sanitization of elements that allow javascript: URIs in the src attribute. An attacker can execute arbitrary JavaScript in the...
CVE-2026-8743: Improper Authorization
A vulnerability was found in Open5GS up to 2.7.6. This impacts the function ranuefindbyamfuengapid of the file src/amf/context.c of the component AMF/MME. Performing a manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit has been made public...
CVE-2026-8741: Concurrent Execution using Shared Resource with Improper Synchronization
A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqxpersistentsessionds.erl of the component QoS 2 PUBLISH Packet Handler. Such manipulation leads to race condition. The attack may be performed from remote. A high complexity level is...
CVE-2026-8725: Server-Side Request Forgery (SSRF)
A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has be...
CVE-2026-8769: Uncontrolled Resource Consumption
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The...
CVE-2026-7182
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf. This issue was fixed in version 1.1.1...
CVE-2026-7182: Improper Limitation of a Pathname to a Restricted Directory
Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could include local files from the server and display them in the generated pdf. This issue was fixed in version 1.1.1...
PT-2026-41297
Name of the Vulnerable Software and Affected Versions DHTMLX Diagram versions prior to 1.1.1 Description The export module is susceptible to Path Traversal in the src attribute because of insufficient HTML sanitization. An unauthenticated attacker can craft a malicious HTML payload to read...
WS-2017-3778
FILE CVS in versions FILE417 to FILE531 is vulnerable to use-of-uninitialized-value in mcopy, related to src/softmagic.c...
WS-2020-0393
Oniguruma in versions 6.9.5rc1 to 6.9.5 is vulnerable to Stack-buffer-overflow in onigencunicodegetcasefoldcodesbystr, related to src/unicode.c...
WS-2020-0392
Harfbuzz in versions 1.4.2 to 2.6.4 is vulnerable to Heap-buffer-overflow in OT::SegmentMaps::map, related to src/hb-ot-var-avar-table.hh...
WS-2021-0187
systemd in versions v228 to v247 is vulnerable to Heap-double-free in mfree, related to src/basic/alloc-util.h...