3298 matches found
CVE-2025-43859 h11 accepts some malformed Chunked-Encoding bodies
h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires...
GO-2025-3643 Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks
Mattermost Playbooks fails to validate the uniqueness and quantity of task actions in github.com/mattermost/mattermost-plugin-playbooks. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
PT-2025-17789 · Unknown · Able Player
Name of the Vulnerable Software and Affected Versions: Able Player versions n/a through 1.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS attacks. This can lead to the execution of malicious scripts within the...
MAL-2025-3414 Malicious code in sas-pseudol10n4js (npm)
--- -= Per source details. Do not edit below this line.=-...
GO-2025-3637 Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS in github.com/minio/operator
Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS in github.com/minio/operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...
CVE-2025-26413
creationtimestamp| type| source ---|---|--- 2025-04-22 07:21:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lnf5fbk2n52h 2025-04-22 08:02:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lnf7nhiw7x27 2025-04-22 08:03:52+00:00| seen|...
CGA-WJXM-MXVR-CVV2
Bulletin has no description...
CGA-FRWW-CQ8Q-FH6Q
Bulletin has no description...
BELL-CVE-2025-37860
Bulletin has no description...
CGA-8RVR-F8W4-MJH7
Bulletin has no description...
BELL-CVE-2025-30693
Bulletin has no description...
BELL-CVE-2025-23133
Bulletin has no description...
BELL-CVE-2025-22088
Bulletin has no description...
BELL-CVE-2025-22070
Bulletin has no description...
BELL-CVE-2025-22121
Bulletin has no description...
BELL-CVE-2025-23131
Bulletin has no description...
BELL-CVE-2025-22113
Bulletin has no description...
BELL-CVE-2025-22105
Bulletin has no description...