12282 matches found
ANT-2026-0JJXMV3G · supabase/auth · privilege-escalation
privilege-escalation medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-0JJXMV3G: Passkey registration requires no step-up authentication The POST...
CVE-2026-42164: Exposure of Sensitive Information to an Unauthorized Actor
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section...
CVE-2026-19927 OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery
A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...
CVE-2026-72007 pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata1: ERR050531: VPUNOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a...
EUVD-2026-59106
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata1: ERR050531: VPUNOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a...
CVE-2026-72007: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata1: ERR050531: VPUNOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a...
PT-2026-72557
In the Linux kernel, the following vulnerability has been resolved: minix: avoid overflow in bitmap block count calculation minix check superblock uses minix blocks needed to verify that the on-disk imap and zmap block counts are large enough for the advertised inode and zone counts. The helper...
CVE-2026-19835 Webkul Bagisto Customer Item Deletion Endpoint access control
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...
GO-2023-2048 vulnerabilities
Vulnerabilities for packages: k3s, ctop, up...
GO-2024-2554 vulnerabilities
Vulnerabilities for packages: flux-source-controller, k9s, zot, chartmuseum, k8sgpt, kots, zarf, helm-push, cilium-cli, eksctl, helm-operator, kubescape, kubevela, flux-helm-controller, up, trivy...
GO-2024-2575 vulnerabilities
Vulnerabilities for packages: flux-source-controller, k9s, zot, chartmuseum, k8sgpt, kots, zarf, helm-push, cilium-cli, eksctl, helm-operator, kubescape, kubevela, flux-helm-controller, up, trivy...
GO-2023-1701 vulnerabilities
Vulnerabilities for packages: apko, ko, melange, helm, bom, ctop, up...
GO-2023-1700 vulnerabilities
Vulnerabilities for packages: apko, ko, melange, helm, bom, ctop, up...
GO-2023-1699 vulnerabilities
Vulnerabilities for packages: apko, ko, melange, helm, bom, ctop, up...
GO-2023-2048 vulnerabilities
Vulnerabilities for packages: k3s, up, ctop...
GO-2024-2554 vulnerabilities
Vulnerabilities for packages: k9s, trivy, kots, flux-helm-controller, helm-push, eksctl, flux-source-controller, kubevela, cilium-cli, kubescape, helm-operator, up, zarf, chartmuseum, k8sgpt, zot...
GO-2024-2575 vulnerabilities
Vulnerabilities for packages: k9s, trivy, kots, flux-helm-controller, helm-push, eksctl, flux-source-controller, kubevela, cilium-cli, kubescape, helm-operator, up, zarf, chartmuseum, k8sgpt, zot...
GO-2023-2412 vulnerabilities
Vulnerabilities for packages: trivy, skaffold, cilium-cli, kubescape, zot, fuse-overlayfs-snapshotter, k3d, gitness, ctop, grype, flux-helm-controller, helm, eksctl, flux-source-controller, kaniko, newrelic-infrastructure-agent, buildkitd, up, k8sgpt, melange, kots, helm-push, kubevela...