9804 matches found
GHSA-R6FH-64MW-837M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C9X3-CMJ9-8PXM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9RVX-CH9V-838R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8CJF-6CCP-MXF7 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6P2R-GG8G-33F2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
CVE-2026-46628
Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. This issue is fixed in version 3.26.0...
CVE-2026-45045 vulnerabilities
Vulnerabilities for packages: gatus...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-45133
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...
CVE-2026-45756
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...
GHSA-WQXF-PJXH-HH4H vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-0864 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-11972 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59874 vulnerabilities
Vulnerabilities for packages: homepage, code-server, kibana, kubeflow-centraldashboard, graalvm, actions-runner, saf, gitlab-rails-ce, wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips, npm, prism, lerna, sqlpad, pulumi, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: code-server, kibana, kubeflow-centraldashboard, graalvm, actions-runner, saf, gitlab-rails-ce, wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips, npm, prism, lerna, sqlpad, pulumi, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: homepage, code-server, kibana, kubeflow-centraldashboard, graalvm, actions-runner, saf, gitlab-rails-ce, wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips, npm, prism, lerna, sqlpad, pulumi, opensearch-dashboards-fips, gitlab-rails-ce-fips...