10208 matches found
GHSA-Q53C-4PRM-W95Q Shescape: Home-directory disclosure in assignment context on Unix with Dash
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Dash, or true when the default shell is Dash, using the escape and escapeAll APIs in assignments prefixed to a command. An attacker may be able to obtain the location of the home directory and, depending on h...
GHSA-6V4M-FW66-8R4X Shescape: Path disclosure on Unix with Zsh
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST exacerbate the problem. In certain case, an attacker can leverage home directory...
GHSA-45RX-2JWX-CXFR vulnerabilities
Vulnerabilities for packages: langfuse-fips, cadence-web, gemini-cli, langfuse, librechat, kibana...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-64645 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-64209
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...
CVE-2026-59898 vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, metabase, wavefront-proxy, airbyte-server, spark-kubernetes-operator-fips, apache-activemq-artemis, nuxeo, floci, apache-pulsar-fips, reposilite, opensearch, elasticsearch, tez, kayenta-fips, conductor, localstack, keycloak, apache-hop, pinot,...
CVE-2026-55831 vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, metabase, wavefront-proxy, airbyte-server, spark-kubernetes-operator-fips, apache-activemq-artemis, nuxeo, floci, apache-pulsar-fips, reposilite, opensearch, elasticsearch, tez, kayenta-fips, conductor, localstack, keycloak, apache-hop, pinot,...
CVE-2026-56820 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, cassandra, thingsboard, tez...
CVE-2026-56821 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, cassandra, thingsboard, tez...
GHSA-272M-GCWP-MPWG vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, cassandra, thingsboard, tez...
CVE-2026-56822 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, cassandra, thingsboard, tez...
CVE-2026-55833 vulnerabilities
Vulnerabilities for packages: opensearch, kserve-modelmesh, trino, infinispan, keycloak, apicurio-registry, cloudwatch-exporter, thingsboard, druid, neo4j, spark, zipkin, tez, akhq, flyway, wavefront-proxy, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, apache-pulsar,...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
SUSE CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...