10127 matches found
CVE-2026-2473 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2026-22802
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...
GHSA-GQ3J-XVXP-8HRF vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-7P94-766C-HGJP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...
CVE-2026-2447 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-27588
Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP host request matcher is documented as case-insensitive, but when configured with a large host list 100 entries it becomes case-sensitive due to an optimized matching path. An attacker can bypass...
CVE-2026-27587
Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP path request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences %xx it compares against the request's escaped path without lowercasing. An...
CVE-2025-68154 vulnerabilities
Vulnerabilities for packages: gemini-cli, kibana...
GHSA-WPHJ-FX3Q-84CH vulnerabilities
Vulnerabilities for packages: gemini-cli, kibana...
CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22
CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22. A patched version of the package is available...
GHSA-QVHC-9V3J-5RFW vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21218 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21435 vulnerabilities
Vulnerabilities for packages: ipfs-cluster-fips, spegel-fips, k3s, ipfs-cluster, spegel, kubo, rke2-runtime...
CVE-2026-27199
Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...
GHSA-69X3-G4R3-P962 vulnerabilities
Vulnerabilities for packages: step-ca, step, step-issuer, caddy...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: ontop-fips, kayenta, thingsboard, nacos-docker, kayenta-fips, ontop, nacos...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: ontop-fips, kayenta, thingsboard, nacos-docker, kayenta-fips, ontop, nacos...
CVE-2026-24688 vulnerabilities
Vulnerabilities for packages: open-webui...