473143 matches found
CLSA-2026-1787920316 TuxCare security update for jquery (7 CVEs)
TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.3-tuxcare.1...
CLSA-2026-1787920143 TuxCare security update for jquery (8 CVEs)
TuxCare rebuilt jquery to address 8 CVEs. Fixed in 1.4.2-tuxcare.1...
CLSA-2026-1787919833 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.14-tuxcare.6...
SUSE-SU-2026:3855-1 Security update for python36
This update for python36 fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bytes bsc1261969. -...
CLSA-2026-1787918303 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.25-tuxcare.7...
CLSA-2026-1787917768 TuxCare security update for org.springframework.hateoas:spring-hateoas (2 CVEs)
TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.0.7-tuxcare.1...
CLSA-2026-1787917450 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.29-tuxcare.8...
CLSA-2026-1787917219 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.30-tuxcare.8...
CLSA-2026-1787916992 TuxCare security update for google/protobuf (1 CVE)
TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.25.9-p1+tuxcare...
CLSA-2026-1787916963 TuxCare security update for tar (5 CVEs)
TuxCare rebuilt tar to address 5 CVEs. Fixed in 6.2.0-tuxcare.2...
CLSA-2026-1787916782 TuxCare security update for jquery (7 CVEs)
TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.1-tuxcare.1...
CLSA-2026-1787916402 TuxCare security update for pacote (1 CVE)
TuxCare rebuilt pacote to address 1 CVE. Fixed in 18.0.6-tuxcare.1...
CLSA-2026-1787915974 TuxCare security update for aiohttp (2 CVEs)
TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.6.post11+tuxcare...
CVE-2026-82240 Budibase before 3.41.3 Privilege Escalation via User Update API
Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...
CVE-2026-82240
Budibase versions before 3.41.3 contain a privilege escalation vulnerability in the public user create and update endpoints. The application fails to validate app-scoped builder role assignments , allowing an authenticated app-scoped builder to submit crafted requests containing builder.apps fiel...
CVE-2026-82240
Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...
CVE-2026-82240 Budibase before 3.41.3 Privilege Escalation via User Update API
Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...
CVE-2026-82240 Budibase before 3.41.3 Privilege Escalation via User Update API
Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...