177191 matches found
CVE-2026-43961
A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...
CVE-2026-76222
GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython...
CVE-2026-76221
GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...
CVE-2026-65610
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: trino, celeborn, thingsboard, management-api-for-apache-cassandra-5.0, tez...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: trino, kserve-modelmesh, thingsboard, wavefront-proxy, wildfly, infinispan, druid, zipkin, opensearch, apicurio-registry, logstash, spark, neo4j, keycloak, apache-activemq-artemis, flyway, akhq, apache-pulsar, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: trino, kserve-modelmesh, thingsboard, wavefront-proxy, wildfly, infinispan, druid, zipkin, opensearch, apicurio-registry, logstash, spark, neo4j, keycloak, apache-activemq-artemis, flyway, akhq, apache-pulsar, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
CVE-2026-71491 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
GHSA-PWGV-4X5Q-6M9F vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
[SECURITY] Fedora 44 Update: python3.14-3.14.7-1.fc44
Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
CVE-2026-74969
Use-after-free in the Layout: Text and Fonts component. This vulnerabi...
CVE-2026-68939
Pyenv provides simple Python version management. Prior to 2.8.0, isve...
CVE-2026-23922
The email media OAuth field Client secret cannot be read after savin...
CVE-2026-15806
The HTTPPasswordMgr class in the urllib.request module, along with its...