112825 matches found
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
CLSA-2026-1779213441 python3.11: Fix of 11 CVEs
CVE-2026-4224: avoid unbound C recursion in convcontentmodel in pyexpat - CVE-2026-3644: reject control characters in http.cookies.Morsel.update - CVE-2026-0672: reject control characters in http.cookies.Morsel - CVE-2025-8291: check consistency of zip64 end of central directory record -...
CVE-2026-43634
creationtimestamp| type| source ---|---|--- 2026-05-19 17:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7xbcixbu2e 2026-05-20 00:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmalyh2pwc2k...
CVE-2026-2586
creationtimestamp| type| source ---|---|--- 2026-05-19 17:48:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm7x7isn7i2q 2026-05-20 01:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdmmvoi2n 2026-05-21 14:37:07+00:00| seen|...
CVE-2026-44159
creationtimestamp| type| source ---|---|--- 2026-05-19 17:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7wye2wgz2t 2026-05-20 01:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdezgul2s...
CVE-2026-33637
Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Versions 2.0.0 through 2.14.1 still allow protocol-relative host override when the request target is passed as a URI object rather than a String to Faraday::Connectionbuildexclusiveurl. This...
CVE-2026-41919
creationtimestamp| type| source ---|---|--- 2026-05-19 17:41:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7wrnouyr24 2026-05-31 11:01:36+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn5g27u6d32g...
CVE-2026-8968
creationtimestamp| type| source ---|---|--- 2026-05-19 17:20:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7vmus2yd2v 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520 2026-05-20 02:00:41+00:00| seen|...
CVE-2026-47358
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates v...
Malicious code in prettier-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a3bdd18c28c0c045aaed2a3e5725b3b38cb45bc9c16d0b795c4334caed17a5 Package name prettier-sdk impersonates the top-tier prettier package 50M weekly downloads, copying its README verbatim and forging metadata repositor...
CVE-2026-47323
creationtimestamp| type| source ---|---|--- 2026-05-19 16:51:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7tylplja2s 2026-05-27 07:19:43+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mmsxqwetty2s 2026-06-01 11:03:09+00:00| seen|...
CVE-2026-45740
creationtimestamp| type| source ---|---|--- 2026-05-19 16:40:49+00:00| seen| https://gist.github.com/alon710/4e72f2de4fd57f71c04d127b90b84200...
golang: net/url: Memory exhaustion in query parameter parsing in net/url
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...
Important: Red Hat Security Advisory: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: yggdrasil security update
An update for yggdrasil is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
CVE-2026-37281
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...
CVE-2026-30118
scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery SSRF in the scalarurl query parameter of the Scalar Proxy endpoint. This vulnerability allows unauthenticated attackers to force the backend server to send HTTP requests to attacker-controlled URLs, leading to...
CVE-2026-30117
scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalarurl query parameter of the Scalar Proxy endpoint. This vulnerability allows attackers to execute arbitrary code via uploading a crafted SVG file...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...