10213 matches found
CVE-2026-24116 vulnerabilities
Vulnerabilities for packages: wasmcloud, yara-x, zed, zellij, wizer...
GHSA-XP28-3FV9-33C6 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2025-59466 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-52XJ-VX8W-46QJ vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2024-27982 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2024-22019 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-1484
A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...
CVE-2026-1467
A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF Carriage Return Line Feed Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit this by providing ...
CVE-2026-24131
A flaw was found in pnpm, a package manager. When pnpm processes the directories.bin field of a package, it fails to properly validate the path, allowing a malicious npm package to specify a crafted path. This directory traversal vulnerability enables the package to escape its intended directory...
CVE-2025-69418
Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes of a message may be exposed...
CVE-2026-24131 pnpm has Path Traversal via arbitrary file permission modification
pnpm is a package manager. Prior to version 10.28.2, when pnpm processes a package's directories.bin field, it uses path.join without validating the result stays within the package root. A malicious npm package can specify "directories": "bin": "../../../../tmp" to escape the package directory,...
CVE-2025-9820
A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the applicatio...
GHSA-WV3H-X6C4-R867 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips...
CVE-2026-23960 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, argo-workflows-fips...
CVE-2025-69204 vulnerabilities
Vulnerabilities for packages: imagemagick...
pnpm security vulnerabilities
PNPM is a package manager developed by the open-source project Pnpm. Versions of Pnpm prior to 10.28.2 had security vulnerabilities. These vulnerabilities stemmed from the lack of path validation when processing the directories.bin field of packages. This allowed malicious npm packages to modify...
CVE-2026-24049 vulnerabilities
Vulnerabilities for packages: airflow, datadog-agent, emissary, kubeflow-jupyter-web-app, pypy-3.10, kubeflow-katib, pypy-3.11, superset, py3-setuptools, open-webui, mlflow, kserve, py3-virtualenv, semgrep, py3-cassandra-medusa, aws-cli, dask-kubernetes, pip-zipapp...
GHSA-8RRH-RW8J-W5FX vulnerabilities
Vulnerabilities for packages: authentik-fips, open-webui, nemo-rl-cuda-13.0, mlflow, pip-zipapp, kserve, semgrep, authentik, ansible-operator, apache-beam-python-3.11-sdk, ghidra, py3-virtualenv, nemo, datadog-agent-fips, awx, duplicity, py3.9-setuptools, request-1276, localstack,...