84 matches found
denser-retriever (>=0.1.1, <=0.1.3), eknowledge (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.10)
langchain-core PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - denser-retriever =0.1.1, =0.1.3, =0.1.0, =2026.1.201651 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...
vulnerability-prioritization-board
Vulnerability Prioritization Board Prioritize vulnerability w...
CVE-2021-47985
Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service...
Security Incentivization: An Empirical Study of How Micropayments Impact Code Security
Security often receives insufficient developer attention because it does not directly generate visible value, leading to underinvestment in practice. We evaluate a countermeasure by team-level incentives tied to measurable security improvements over time. Our semi-automated mechanism aggregates...
PT-2026-39349
HDF5 Library through 1.14.3 may attempt to dereference uninitialized values in h5tools str sprint in tools/lib/h5tools str.c called from h5tools dump simple data in tools/lib/h5tools dump.c...
denser-retriever (>=0.1.1, <=0.1.3), eknowledge (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.2.10)
langchain-core PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - denser-retriever =0.1.1, =0.1.3, =0.1.0, =2026.1.201651 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
poc-opencode-dev-agents
opencode-dev-agents Agentes AI y comandos personalizados pa...
denser-retriever (>=0.1.1, <=0.1.3), eknowledge (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.10)
langchain-core PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - denser-retriever =0.1.1, =0.1.3, =0.1.0, =2026.1.201651 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...
CVE-2025-22173
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
CVE-2025-22173
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
CVE-2025-22173
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
CVE-2025-22173
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
EUVD-2025-35600
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
CVE-2025-22173
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
CVE-2025-22173
CVE-2025-22173 : Jira Align is affected by an authorization flaw that allows a low-privilege user to access certain endpoints and disclose a small amount of sensitive information (e.g., viewing sprint data without required permission). Multiple sources (NVD, Red Hat, CVE records) corroborate an a...
CVE-2025-22173: Improper Authorization
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
PT-2025-43387
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description A low-privilege user can access unexpected API endpoints, potentially disclosing a small amount of sensitive information. Specifically, a user with limited permissions was able to view...
EUVD-2013-2216
Malware in sbrugna...