10156 matches found
GHSA-4CWX-7WF7-3272 vulnerabilities
Vulnerabilities for packages: code-server, pelias-api, langfuse-fips, vitess, kibana, renovate, langfuse...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: pulumi, code-server, npm, pelias-api, langfuse-fips, vitess, kibana, prism, renovate, actions-runner, langfuse...
GHSA-8359-H9FX-J6V9 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55403 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-RFR2-MQ9M-X2QX vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-67355 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-MJRX-74JH-7XGW vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-70367
A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...
CVE-2026-68744
A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...
CVE-2022-21680 vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry...
GHSA-M4P7-R5RC-7G4J vulnerabilities
Vulnerabilities for packages: airflow, superset, kserve, mlflow, py3-cassandra-medusa, kubeflow-pipelines...
CVE-2026-59884 vulnerabilities
Vulnerabilities for packages: openstack-keystone-2026.1, superset, wazuh-manager, datahub-ingestion, apache-beam-python-3.12-sdk, kubeflow-pipelines, py3-cassandra-medusa, dbt-bigquery, localstack, lmcache-cuda-12.8, duplicity, openstack-keystone-2025.1, openstack-keystone-2025.2, authentik-fips,...
CVE-2026-67320
axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable interceptor pattern such as ...config or...
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
SUSE CVE-2026-55244
unknown...
CVE-2026-53669 vulnerabilities
Vulnerabilities for packages: keycloak, vitess...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: mlflow...