262348 matches found
@andor83/mother-may-i (>=1.0.1, <=1.0.10), @base_/cli (>=1.0.6, <=1.0.29) +77 more potentially affected by CVE-2026-71318 via nuxt (>=3.1.2, <=3.21.8)
nuxt NPM version =3.1.2, =1.0.1, =1.0.6, =1.0.6, =0.9.1, =1.1.1, =1.0.1-alpha1, =1.1.0, =0.1.3, =1.0.0-29304822.f444f03, =4.0.3, =0.1.0, =8.0.0, =0.3.14, =9.8.3-rc.1, =10.0.2-rc.4 and more Source cves: CVE-2026-71318 Source advisory: SNYK:JS-NUXT-18565118...
UBUNTU-CVE-2026-71309
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.40.0 until 1.75.0, rclone serve restic does not correctly reject URL paths beginning with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading parent path and pass...
@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +11 more potentially affected by CVE-2026-71315 via nuxt (>=4.4.7, <=4.5.0)
nuxt NPM version =4.4.7, =3.2.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: CVE-2026-71315 Source advisory: OSV:GHSA-HXVH-4H3W-PRP9...
CVE-2026-71315 Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)
Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match case-folded lookups when router.options.sensitive is false and drop appMiddleware authorization gates. This is caused by an incomplete fix for...
CVE-2026-15430
creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:03+00:00| seen| Telegram/MD75k-cDFtv9LnjecJEQAz4SDttk4ZkvpNpcWsPC7HMdiM 2026-08-05 21:00:03+00:00| seen| Telegram/6p3PAYOSat3nZO9NlFWMr5GgoKupNTDZqtKSi9BnUGK1nd4 2026-08-06 00:00:09+00:00| published-proof-of-concept|...
GHSA-4VR5-P2GC-H23P rclone archive extract allows S3 destination prefix escape via crafted archive paths
Summary rclone archive extract can write extracted files outside the user-selected destination prefix when extracting a crafted archive. A malicious archive entry containing parent path components such as ../ can escape the requested extraction prefix and create or overwrite sibling objects in th...
EUVD-2026-44533
rclone serve restic --private-repos authorization bypass: .. in the URL path lets an authenticated user read, overwrite and delete other users' repositories...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, dask-kubernetes, airflow, open-webui, kserve...
GHSA-MQ44-7P77-Q5H7 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, dask-kubernetes, airflow, open-webui, kserve...
GHSA-GRFX-V4XP-4M33 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X4CW-WG5H-4QX6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M4VJ-4237-7QMX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PV4W-F6R6-3QCW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PWGG-JHVP-WR6H vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W7PH-97WC-Q2JR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G785-HVM3-67HJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PP42-FQP9-76JC vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G3R4-PHHF-PX98 vulnerabilities
Vulnerabilities for packages: chromium...