30827 matches found
CVE-2026-58501 Zeep SSRF because Settings.forbid_external is not enforced
Zeep is a Python SOAP client. From 4.0.0 before 4.3.3, Settings.forbidexternal is defined but not enforced when parsing WSDL or XSD documents, allowing transitive xsd:import, xsd:include, wsdl:import, and lxml entity or DTD references to fetch attacker-chosen HTTP or HTTPS URLs. This issue is fix...
CVE-2026-59897
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...
PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
A server-side request forgery SSRF vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by this issue is minimize...
Cisco Advance Notification for Publication of July 15, 2026, Security Advisories
On July 15, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco RoomOS Security Hardening Release: July 2026...
EUVD-2026-42298
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
CVE-2026-59702 repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack
repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers t...
CVE-2026-53149 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-4PQW-3H25-QRQ3 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-F3Q5-7M6P-4QXQ vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-HFRJ-R4V7-3997 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-QHPR-79XW-32M8 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2026-53168 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2026-53181 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2026-53212 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
CVE-2026-53228 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-38RG-2RJC-3RMJ vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-3J78-PF43-6MVQ vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...
GHSA-5Q2P-7748-G6QP vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...