10167 matches found
CVE-2026-73412
Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FWG2-594C-JP42 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
CVE-2026-71870 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
CVE-2026-56818 vulnerabilities
Vulnerabilities for packages: hadoop-fips, pinot...
GHSA-539M-9XH6-Q6RR vulnerabilities
Vulnerabilities for packages: awx, jupyter-all-spark-notebook...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: jfrog-cli, gitea-fips, gitaly, grype-fips, kaniko-fips, gomplate-fips, trivy-fips, steampipe, external-secrets-operator-fips, flux-operator-fips, packer-fips, boring-registry, kubescape-server-fips, mapotf, nuclio-controller-fips, gitlab-rails-ce, amazon-ssm-agent,...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: nuclei, tfsec, argo-events, gitlab-runner, rancher-fleet, bom, snyk-cli, gitsign, k9s, kubevela, gptscript, flux-notification-controller, flux-source-controller, gitea, kots, argo-cd, pulumi-kubernetes-operator, guac, argo-workflows, pulumi-language-dotnet,...
CVE-2026-50159 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2026-71437 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2026-71438 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2026-71852
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...
CVE-2026-56850 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-64638
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...
CVE-2026-12074 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
GHSA-6HM5-JGCP-P838 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2026-34191
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...
GHSA-5H86-PH4P-6P7W vulnerabilities
Vulnerabilities for packages: ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.4-elasticsearch, ruby3.2-elasticsearch...