10170 matches found
SUSE CVE-2026-53540
Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parseform did not validate the Content-Length header before using it to bound its chunked read of the request body. A negative Content-Length turned the bounded read into a read-until-EOF, so the entire body was loaded...
SUSE CVE-2026-54282
Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...
CVE-2026-50190
Unknown description...
CVE-2026-12322 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-XP8H-82PC-F6JM vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-VMF3-W455-68VH vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, pnpm-stage0, sqlpad, gitlab-rails-ce, npm, wazuh-dashboard-fips, graalvm, homepage, thingsboard-fips, gemini-cli, actions-runner, py3-captum, code-server, lerna, renovate, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips,...
GHSA-R7G4-QG5F-QQM2 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-4X5R-PXFX-6JF8 vulnerabilities
Vulnerabilities for packages: airflow, langfuse, ts-patch, vitess, kubeflow-katib...
CVE-2026-12321 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-7210 vulnerabilities
Vulnerabilities for packages: python...
GHSA-993G-76C3-P5M4 vulnerabilities
Vulnerabilities for packages: ggshield, kserve, superset, datadog-agent...
SUSE CVE-2026-50133
Hugo is a static site generator. Prior to 0.162.0, Hugo accepts content files in several markup formats. Files mapped to the text/html media type typically .html files under /content, or pages produced by a content adapter that sets content.mediaType = "text/html" had their body emitted verbatim...
SUSE CVE-2026-50269
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to inject additional headers or similar. In the unlikely situation that an application is passing...
GHSA-5XF4-F2FQ-F69J vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2019-10773 vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-MPWJ-FCR6-X34C vulnerabilities
Vulnerabilities for packages: yarn...
CVE-2021-4435 vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-6V5V-WF23-FMFQ vulnerabilities
Vulnerabilities for packages: vitess, semaphore, kibana, renovate...