5120 matches found
CVE-2026-9679
Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 §5.4 does not specify any decoding and browsers do not decode either. Applications that parse a...
CVE-2026-9697
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI socks5:// or socks://. The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert, key, rejectUnauthorized, and servernam...
firefox: Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
firefox: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
GHSA-R47G-FVHR-H676 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips...
firefox: Incorrect boundary conditions, integer overflow in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, integer overflow in the Audio/Video component...
GHSA-R7G4-QG5F-QQM2 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips, kibana, unleash...
GHSA-5RVQ-CXJ2-64VF vulnerabilities
Vulnerabilities for packages: airflow-postgres-fips, wazuh-manager, litellm, wazuh-manager-fips, airflow, airflow-core, tritonserver-backend-vllm-cuda-12.9...
GHSA-XCGM-R5H9-7989 vulnerabilities
Vulnerabilities for packages: mlflow, open-webui...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: mlflow, open-webui...
GHSA-G3CQ-J2XW-WF74 vulnerabilities
Vulnerabilities for packages: mlflow, open-webui...
firefox: Memory safety bugs fixed in Firefox ESR 115.36, Firefox ESR 140.11 and Firefox 151
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these...
ROS-20260617-73-0001
The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260617-73-0031
The vulnerability in ImageMagick 7 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260617-73-0045
The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-54280 vulnerabilities
Vulnerabilities for packages: request-1276, authentik, tritonserver-backend-vllm-cuda-12.9, metaflow-service-fips, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, text-generation-inference, tritonserver-backend-vllm-cuda-13.0, awx, open-webui, dask-kubernetes-fips, mlflow-fips, py3-vllm-cuda-13.0, mlflow...
CVE-2026-54276 vulnerabilities
Vulnerabilities for packages: request-1276, authentik, tritonserver-backend-vllm-cuda-12.9, metaflow-service-fips, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, text-generation-inference, tritonserver-backend-vllm-cuda-13.0, awx, open-webui, dask-kubernetes-fips, mlflow-fips, py3-vllm-cuda-13.0, mlflow...
CVE-2026-54278 vulnerabilities
Vulnerabilities for packages: request-1276, authentik, tritonserver-backend-vllm-cuda-12.9, metaflow-service-fips, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, text-generation-inference, tritonserver-backend-vllm-cuda-13.0, awx, open-webui, dask-kubernetes-fips, mlflow-fips, py3-vllm-cuda-13.0, mlflow...