262336 matches found
CLSA-2026-1774657386 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.19.1-tuxcare.1...
CLSA-2026-1774225203 TuxCare security update for bson (1 CVE)
TuxCare rebuilt bson to address 1 CVE. Fixed in 1.0.9-tuxcare.1...
CLSA-2026-1774225187 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.13.3-tuxcare.1...
CLSA-2026-1773706623 TuxCare security update for requirejs (1 CVE)
TuxCare rebuilt requirejs to address 1 CVE. Fixed in 2.1.22-tuxcare.1...
CLSA-2026-1773101686 TuxCare security update for com.fasterxml.woodstox:woodstox-core (1 CVE)
TuxCare rebuilt com.fasterxml.woodstox:woodstox-core to address 1 CVE. Fixed in 5.3.0-tuxcare.1...
CLSA-2026-1772583201 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.1...
CLSA-2026-1772583203 TuxCare security update for log4js (1 CVE)
TuxCare rebuilt log4js to address 1 CVE. Fixed in 4.5.1-tuxcare.1...
CLSA-2026-1770250386 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post4+tuxcare...
CLSA-2026-1770336550 TuxCare security update for org.bouncycastle (1 CVE)
TuxCare rebuilt 16 org.bouncycastle packages to address 1 CVE. Fixed in 1.76-tuxcare.2...
CLSA-2025-1751328256 TuxCare security update for org.yaml:snakeyaml (1 CVE)
TuxCare rebuilt org.yaml:snakeyaml to address 1 CVE. Fixed in 1.30.tuxcare.1...
CVE-2026-68494 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...
GHSA-8359-H9FX-J6V9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-WJV6-JCFJ-MF9R vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-VX7X-VCC2-C44G vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-6FHJ-CGMM-XFX6 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-60007
creationtimestamp| type| source ---|---|--- 2026-08-04 13:30:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i 2026-08-04 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117037480022382500 2026-08-04 14:06:28+00:00| seen|...
CVE-2026-12049
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:19+00:00| seen| https://t.me/cyberoknews/229 2026-08-05 00:00:35+00:00| seen| https://t.me/cyberoknews/229 2026-08-06 00:00:58+00:00| seen| https://t.me/cyberoknews/229...
CVE-2024-33111
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:17+00:00| seen| https://t.me/pentestnotes/50 2026-08-05 00:00:32+00:00| seen| https://t.me/pentestnotes/50 2026-08-06 00:01:01+00:00| published-proof-of-concept| https://t.me/pentestnotes/50...
WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Thrive Architect versions = 10.9.3.1...
CVE-2026-62927
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method...