22835 matches found
CVE-2026-70474 Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up credentials by id alone with no workspaceId filter. The authorize, callback, and refresh handlers query the Credential table...
github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers
A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service DoS condition where the affected server or clien...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.7 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.2-0.2.hum1 aarch64, x8664 prometheus3.13-3.13.2-0.2.hum1.src src Security Fixes: prometheus3.13: CVE-2026-69153...
EUVD-2026-52751
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise's HTTP security module httpSecurity.ts did not normalize IPv4-mapped IPv6 addresses such as ::ffff:127.0.0.1 and ::ffff:169.254.169.254 before checking them against the deny list...
CLSA-2026-1785727932 TuxCare security update for org.apache.logging.log4j (3 CVEs)
TuxCare rebuilt 33 org.apache.logging.log4j packages to address 3 CVEs. Fixed in 2.17.2-tuxcare.2...
CLSA-2026-1785204346 TuxCare security update for webpack-dev-server (3 CVEs)
TuxCare rebuilt webpack-dev-server to address 3 CVEs. Fixed in 2.7.1-tuxcare.4...
CLSA-2026-1785204347 TuxCare security update for karma (3 CVEs)
TuxCare rebuilt karma to address 3 CVEs. Fixed in 1.5.0-tuxcare.1...
CLSA-2026-1785380498 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.2...
CLSA-2026-1784943105 TuxCare security update for estree-util-value-to-estree (3 CVEs)
TuxCare rebuilt estree-util-value-to-estree to address 3 CVEs. Fixed in 1.3.0-tuxcare.1...
CLSA-2026-1784943410 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 0.26.1-tuxcare.2...
CLSA-2026-1784943208 TuxCare security update for 2 packages (3 CVEs)
TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 0.2.6-tuxcare.1...
CLSA-2026-1784856221 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 3.3.3-tuxcare.2...
CLSA-2026-1784856218 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.7-tuxcare.4...
CLSA-2026-1784856398 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 0.21.1-tuxcare.2...
CLSA-2026-1784856428 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.5-tuxcare.3...
CLSA-2026-1784856410 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 0.19.2-tuxcare.2...
CLSA-2026-1784856367 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 0.15.3-tuxcare.4...