10171 matches found
CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
GHSA-3MFM-83XF-C92R vulnerabilities
Vulnerabilities for packages: nextcloud-server, rancher-api-ui, lerna, py3-jupyterlab, prism, opensearch-dashboards, ts-patch...
CVE-2026-33941 vulnerabilities
Vulnerabilities for packages: nextcloud-server, rancher-api-ui, lerna, py3-jupyterlab, prism, opensearch-dashboards, ts-patch...
GHSA-9CX6-37PM-9JFF vulnerabilities
Vulnerabilities for packages: nextcloud-server, rancher-api-ui, lerna, py3-jupyterlab, prism, opensearch-dashboards, ts-patch...
CVE-2026-33938 vulnerabilities
Vulnerabilities for packages: nextcloud-server, rancher-api-ui, lerna, py3-jupyterlab, prism, opensearch-dashboards, ts-patch...
GHSA-XHPV-HC6G-R9C6 vulnerabilities
Vulnerabilities for packages: nextcloud-server, rancher-api-ui, lerna, py3-jupyterlab, prism, opensearch-dashboards, ts-patch...
CVE-2025-59799 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2025-23217 vulnerabilities
Vulnerabilities for packages: mitmproxy...
CVE-2026-5123
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data1 can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The...
CVE-2026-33658 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails...
CVE-2023-23931 vulnerabilities
Vulnerabilities for packages: mitmproxy...
GHSA-WG33-5H85-7Q5P vulnerabilities
Vulnerabilities for packages: mitmproxy...
CVE-2026-5037
A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...
GHSA-6FMV-XXPF-W3CW vulnerabilities
Vulnerabilities for packages: maven-stage0, gradle-stage0, maven, confluent-kafka, druid, akhq, dependency-track, gradle, kafka...
CVE-2026-34040 vulnerabilities
Vulnerabilities for packages: osv-scanner, nerdctl, rancher, opentelemetry-collector-contrib, opentelemetry-collector, k8sgpt, newrelic-infrastructure-agent, melange, kots, rancher-machine, trivy, datadog-agent, ko, skopeo, spire-server, rancher-agent, trivy-operator, apko, grafana, cluster-api,...
CVE-2026-33671 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, graalvm, node-gyp, code-server, pulumi, rancher-api-ui, vite, kubeflow-pipelines, kibana, tileserver-gl-fips, langfuse, nextcloud-server, kubeflow-katib, vitess, gemini-cli, drupal, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards, saf,...
CVE-2026-33504 vulnerabilities
Vulnerabilities for packages: hydra...
CVE-2026-4704 vulnerabilities
Vulnerabilities for packages: firefox...