10207 matches found
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: airflow, mlflow, mycli...
CVE-2026-50645 vulnerabilities
Vulnerabilities for packages: apache-tika-fips, apache-tika, wso2is...
CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
GO-2024-3269 vulnerabilities
Vulnerabilities for packages: gh...
GO-2026-6005 vulnerabilities
Vulnerabilities for packages: gitlab-operator, gitlab-operator-fips, datadog-agent, tigera-operator, datadog-agent-fips, tigera-operator-fips...
GO-2026-6007 vulnerabilities
Vulnerabilities for packages: gitlab-operator, gitlab-operator-fips, datadog-agent, tigera-operator, datadog-agent-fips, tigera-operator-fips...
GO-2026-5597 vulnerabilities
Vulnerabilities for packages: rancher-fleet-fips, gitaly, gitlab-rails-ce, packer-fips, rclone, kyverno, cerbos, grafana, argo-cd, terragrunt, amazon-ssm-agent, argo-cd-fips, flux-fips, kyverno-fips, gitlab-rails-ce-fips, nemo, rancher-fleet, teleport, chainloop-cli-fips, upwind-agent,...
GO-2024-3296 vulnerabilities
Vulnerabilities for packages: gh...
CVE-2026-72898 vulnerabilities
Vulnerabilities for packages: metabase...
Improper Encoding or Escaping of Output
Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via improper escaping in the getEscapeFunction function. An attacker can access sensitive home-directory information and potentially alter the target...
Command Injection
Overview shescape is a simple shell escape library Affected versions of this package are vulnerable to Command Injection in the escape and escapeAll functions when used on Unix systems with the shell explicitly configured to Zsh, or when the default shell is Zsh. An attacker can obtain lists of...
GHSA-4H4R-Q9XG-GFMM vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-73412
Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FWG2-594C-JP42 vulnerabilities
Vulnerabilities for packages: nemo, open-webui, litellm...
CVE-2026-71870 vulnerabilities
Vulnerabilities for packages: nemo, open-webui, litellm...