247 matches found
GHSA-5M9W-9F93-MCJ8 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17824 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17989 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17679 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17662 vulnerabilities
Vulnerabilities for packages: chromium...
SUSE CVE-2026-48031
go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...
CVE-2026-58040
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
GHSA-WJQ8-X4QM-6MMH vulnerabilities
Vulnerabilities for packages: eco-python-curl...
SUSE CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
Medium: golang-github-cpuguy83-md2man
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
CVE-2026-4360 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-14394 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13778 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13847 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X6W2-JPMX-X267 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7W49-3H8X-HW3C vulnerabilities
Vulnerabilities for packages: chromium...