10213 matches found
CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
GHSA-9CX6-37PM-9JFF vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, jupyter-base-notebook, lerna, ts-patch, rancher-api-ui, opensearch-dashboards, prism...
CVE-2026-33938 vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, jupyter-base-notebook, lerna, ts-patch, rancher-api-ui, opensearch-dashboards, prism...
CVE-2026-33941 vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, jupyter-base-notebook, lerna, ts-patch, rancher-api-ui, opensearch-dashboards, prism...
GHSA-3MFM-83XF-C92R vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, jupyter-base-notebook, lerna, ts-patch, rancher-api-ui, opensearch-dashboards, prism...
GHSA-XHPV-HC6G-R9C6 vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, jupyter-base-notebook, lerna, ts-patch, rancher-api-ui, opensearch-dashboards, prism...
CVE-2025-59799 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2025-23217 vulnerabilities
Vulnerabilities for packages: mitmproxy...
CVE-2026-5123
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data1 can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The...
CVE-2026-33658 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails...
CVE-2023-23931 vulnerabilities
Vulnerabilities for packages: mitmproxy...
GHSA-WG33-5H85-7Q5P vulnerabilities
Vulnerabilities for packages: mitmproxy...
CVE-2026-5037
A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...
GHSA-6FMV-XXPF-W3CW vulnerabilities
Vulnerabilities for packages: confluent-kafka, gradle-stage0, akhq, druid, maven-stage0, gradle, maven, kafka, dependency-track...
CVE-2026-34040 vulnerabilities
Vulnerabilities for packages: buf, nerdctl, trivy-operator, kpt, opentelemetry-collector, zot, aws-otel-collector, skopeo, zarf, gatekeeper, spire-server, cri-tools, osv-scanner, docker-credential-gcr, splunk-otel-collector, amazon-cloudwatch-agent, undock, envoy-gateway, rancher-agent, rancher,...
CVE-2026-33671 vulnerabilities
Vulnerabilities for packages: renovate, opensearch-dashboards, vitess, npm, kubeflow-pipelines, bash-language-server, tileserver-gl, gitlab-rails-ce-fips, gitlab-rails-ce, rancher-api-ui, pulumi, wazuh-dashboard-fips, vite, semaphore, actions-runner, opensearch-dashboards-fips, kubeflow-katib,...
CVE-2026-33504 vulnerabilities
Vulnerabilities for packages: hydra...
CVE-2026-4711 vulnerabilities
Vulnerabilities for packages: firefox...