10213 matches found
GHSA-C9X3-CMJ9-8PXM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R7M5-CCWW-9J78 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RF8J-GP6C-595Q vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
CVE-2026-46628
Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. This issue is fixed in version 3.26.0...
CVE-2026-45045 vulnerabilities
Vulnerabilities for packages: gatus...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-45133
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...
CVE-2026-45756
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...
CVE-2026-0864 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
GHSA-WQXF-PJXH-HH4H vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-11972 vulnerabilities
Vulnerabilities for packages: python...
GHSA-G345-7JG6-M22P vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59871 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, gitlab-rails-ce-fips, prism, jupyter-base-notebook, gitlab-rails-ce, lerna, tensorflow-gpu-jupyter, pulumi, wazuh-dashboard-fips, homepage, graalvm, saf, actions-runner, wazuh-dashboard, kibana, sqlpad, code-server, npm,...
CVE-2026-59874 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, gitlab-rails-ce-fips, prism, jupyter-base-notebook, gitlab-rails-ce, lerna, pulumi, wazuh-dashboard-fips, homepage, graalvm, saf, actions-runner, wazuh-dashboard, kibana, sqlpad, code-server, npm, opensearch-dashboards,...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, gitlab-rails-ce-fips, prism, jupyter-base-notebook, gitlab-rails-ce, lerna, tensorflow-gpu-jupyter, pulumi, wazuh-dashboard-fips, graalvm, saf, actions-runner, wazuh-dashboard, kibana, sqlpad, code-server, npm, opensearch-dashboards,...
CVE-2025-15661 vulnerabilities
Vulnerabilities for packages: libssh2...