124537 matches found
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-2507)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickli...
GHSA-9RC6-8CJV-RCVX Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection
Description The getRedirectURL function in oauth2.go:22-29 constructs the OAuth2 callback URL by concatenating the request's Host header with a fixed path, with zero validation of the Host header: go func getRedirectURLc gin.Context string scheme := "http://" referer := c.Request.Referer if...
Insufficiently Protected Credentials
Overview pnpm is a Fast, disk space efficient package manager Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the config and auth-header flow, which binds unscoped user-level npm authToken credentials to whatever default registry a repository-local .npm...
ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass
Summary ExAws.SNS.verifymessage/1 fetches the signing certificate from the SigningCertURL field of the incoming SNS message without validating that the URL uses HTTPS or that its host is an AWS-owned SNS certificate domain. An unauthenticated attacker who can POST to any endpoint that calls...
GHSA-8JGF-23Q5-X7XX ex_aws_sns: Trusted-attacker `SigningCertURL` permits complete SNS signature bypass
Summary ExAws.SNS.verifymessage/1 fetches the signing certificate from the SigningCertURL field of the incoming SNS message without validating that the URL uses HTTPS or that its host is an AWS-owned SNS certificate domain. An unauthenticated attacker who can POST to any endpoint that calls...
CVE-2026-45807
creationtimestamp| type| source ---|---|--- 2026-06-26 22:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ziubtsx2c 2026-06-27 20:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcarecjsf2g 2026-06-29 14:48:32+00:00| seen|...
CVE-2024-23581
creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ywxayrf2x 2026-06-29 14:40:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpsovehl2w 2026-06-29 14:40:43+00:00| seen|...
CVE-2026-45807
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.43 and 1.3.19, several Kestra API endpoints accept a kestra:// URI from the client and pass it through StorageInterface.parentTraversalGuard before reading the underlying file from the local storage backend. The guard onl...
CVE-2026-53576
creationtimestamp| type| source ---|---|--- 2026-06-26 22:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xlajhsm2c 2026-06-27 20:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcar4z6g52m 2026-06-29 19:25:26+00:00| seen|...
Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes
Summary CVE-2026-47067 is an atom table exhaustion vulnerability CWE-770 in hackney's URL parser src/hackneyurl.erl. hackneyurl:parseurl/1 converts every URL scheme it encounters into a BEAM atom via binarytoatom/2. Because BEAM atoms are never garbage-collected and the atom table has a hard limi...
EUVD-2026-31691
Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes...
GHSA-J9WQ-VXXC-94WF Hackney has CR/LF injection in query parameter
Summary hackneyurl:makeurl/3 passes the URL query component directly into the HTTP/1.1 request target without percent-encoding \r or \n. RFC 3986 §3.4 requires characters outside the query grammar to be percent-encoded, but no validation or escaping occurs. An attacker who controls any portion of...
Hackney has SSRF allowlist bypass in hackney_url:normalize/2 via percent-encoded host
Summary hackneyurl:normalize/2 URL-decodes the host component of a parsed URL, but the caller's SSRF allowlist runs before normalization using OTP's uristring:parse/1 and inet:parseaddress/1, neither of which decodes percent-escapes in hostnames. A URL like http://%31%32%37%2E%30%2E%30%2E%31/...
CVE-2026-46604
creationtimestamp| type| source ---|---|--- 2026-06-26 21:50:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wh7n3cg2m 2026-06-29 14:45:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq3cj5ah2o...
Cargo can be coerced to share credentials between registries
The Rust Security Response Team was notified that Cargo incorrectly normalized the URLs of third-party registries using the sparse index protocol1. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a...
EUVD-2026-31654
Cargo can be coerced to share credentials between registries...
MAL-2026-6539 Malicious code in db-query-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4928f7d380b79104d997e7666603726873158508c38d2c75a90c7529dd196be3 The package presents itself as a database query helper but index.js defines a method queryDBConnect that base64-decodes a hardcoded URL pointing to...
CVE-2026-50137
Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id app... and an S3-source datasource id ds... can call this endpoint with no auth and obtain a 15-minute pre-signed PUT URL minted on the victim's IAM identity. The endpoin...
Server-side Request Forgery (SSRF)
Overview @cardano402/mcp-server is a MCP server that exposes paid HTTP endpoints as MCP tools, paying via the x402 Cardano scheme. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through improper validation of catalog.server.url and insecure HTTP transport...
GHSA-RP72-5V5Q-2446 @cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url
Summary @cardano402/mcp-server versions = 0.1.1 ship three security gaps that can lead to unauthorized fund movement when the package is used as designed an MCP server exposing Cardano payment tools to an Impact 1. No spending limits on signed payments An LLM or prompt-injected LLM calling tools...