1487040 matches found
ROOT-APP-MAVEN-CVE-2026-41003 CVE-2026-41003 in org.springframework.security:spring-security-saml2-service-provider - Patched by Root
Root has patched CVE-2026-41003 in the org.springframework.security:spring-security-saml2-service-provider package for Root:Maven. Multiple fixed versions available...
CVE-2026-16794
GitLab EE is affected by a missing authorization flaw in compliance framework management . Under certain conditions, an authenticated user holding the Security Manager role could execute arbitrary CI/CD jobs and access protected variables within group projects. The root cause is improper authoriz...
EUVD-2026-80118
GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...
CVE-2026-16794 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...
CVE-2026-16794 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...
CLSA-2026-1789538853 TuxCare security update for django (3 CVEs)
TuxCare rebuilt django to address 3 CVEs. Fixed in 5.1.post10+tuxcare...
CVE-2026-87860 Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF
The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making...
CVE-2026-87860
The Subscriptions for WooCommerce WordPress plugin, in versions before 2.0.3 , is vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The root cause is the failure to verify a security token on requests used to cancel a subscription. This allows an attacker to trick a logged-in customer into ...
CLSA-2026-1789537996 TuxCare security update for starlette (4 CVEs)
TuxCare rebuilt starlette to address 4 CVEs. Fixed in 0.13.6.post5+tuxcare...
CVE-2026-76018
creationtimestamp| type| source ---|---|--- 2026-09-16 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...
CVE-2026-78132 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-693G-PPP7-3J2H vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-34F9-5V7X-JPW3 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-Q5PG-PRW5-6C62 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-RFVM-PVFP-C8VQ vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-WC93-H4M4-584V vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78124 vulnerabilities
Vulnerabilities for packages: strongswan...
CVE-2026-78130 vulnerabilities
Vulnerabilities for packages: strongswan...