10213 matches found
GHSA-R7M5-CCWW-9J78 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RF8J-GP6C-595Q vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C9X3-CMJ9-8PXM vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
CVE-2026-46628
Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. This issue is fixed in version 3.26.0...
CVE-2026-45045 vulnerabilities
Vulnerabilities for packages: gatus...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-45133
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...
CVE-2026-45756
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...
CVE-2026-0864 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-11972 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
GHSA-WQXF-PJXH-HH4H vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, sqlpad, wazuh-dashboard, gitlab-rails-ce, saf, prism, opensearch-dashboards, homepage, opensearch-dashboards-fips, gitlab-rails-ce-fips, kubeflow-centraldashboard, npm, graalvm, kibana, wazuh-dashboard-fips, jupyter-base-notebook, code-server,...
CVE-2026-59874 vulnerabilities
Vulnerabilities for packages: sqlpad, wazuh-dashboard, gitlab-rails-ce, saf, prism, opensearch-dashboards, homepage, opensearch-dashboards-fips, gitlab-rails-ce-fips, kubeflow-centraldashboard, npm, graalvm, kibana, wazuh-dashboard-fips, jupyter-base-notebook, code-server, pulumi, actions-runner,...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, sqlpad, wazuh-dashboard, gitlab-rails-ce, saf, prism, opensearch-dashboards, opensearch-dashboards-fips, gitlab-rails-ce-fips, kubeflow-centraldashboard, npm, graalvm, kibana, wazuh-dashboard-fips, jupyter-base-notebook, code-server, pulumi,...
CVE-2025-15661 vulnerabilities
Vulnerabilities for packages: libssh2...