117480 matches found
EUVD-2026-38302
Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...
CVE-2026-49356
Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...
CVE-2026-49356
Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...
CVE-2026-9029
creationtimestamp| type| source ---|---|--- 2026-06-22 16:06:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbdtlnmn2d...
CVE-2026-10601
creationtimestamp| type| source ---|---|--- 2026-06-22 16:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movb7dxt3y2g...
CVE-2024-54178
creationtimestamp| type| source ---|---|--- 2026-06-22 16:01:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movb37j3hi2q...
CVE-2025-2669
creationtimestamp| type| source ---|---|--- 2026-06-22 15:57:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movatrkxaf2t...
CVE-2026-5139
creationtimestamp| type| source ---|---|--- 2026-06-22 15:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movanaj4zd2t...
CVE-2026-42129
creationtimestamp| type| source ---|---|--- 2026-06-22 15:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movahfyvmh2t...
CVE-2026-48970
creationtimestamp| type| source ---|---|--- 2026-06-22 15:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mov6jlwa6l2v...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-33871 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote...
CVE-2026-42129
A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information...
CVE-2026-48966
creationtimestamp| type| source ---|---|--- 2026-06-22 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mov36cdxgj2d...
CVE-2026-7664
Summary: IBM Langflow OSS versions 1.0.0–1.8.4 are affected by an unauthenticated access issue due to improper authorization enforcement on the Streamable MCP transport endpoint, potentially allowing access to protected MCP project resources and execution of MCP operations. Affected products/vers...
EUVD-2026-38245
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise...
EUVD-2026-38244
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host...
CVE-2026-28381
The CVE affects the Grafana Snowflake data source: GET/PUT commands can enable a user with access to read/write files between the local Grafana server and the connected Snowflake host, potentially impacting confidentiality and integrity (per metrics: HIGH/ HIGH). Root cause and exact vulnerable c...
CVE-2026-28381 Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUT
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host...