197883 matches found
GHSA-2VR4-CQ9G-PVRC vulnerabilities
Vulnerabilities for packages: code-server, lerna, pulumi, renovate, prism, npm, sqlpad...
CVE-2026-101910 vulnerabilities
Vulnerabilities for packages: code-server, lerna, pulumi, renovate, prism, npm, sqlpad...
GHSA-RPW4-54J3-4H4Q vulnerabilities
Vulnerabilities for packages: code-server, lerna, pulumi, renovate, prism, npm, sqlpad...
CVE-2026-101913 vulnerabilities
Vulnerabilities for packages: code-server, lerna, pulumi, renovate, prism, npm, sqlpad...
CVE-2026-87859 vulnerabilities
Vulnerabilities for packages: tileserver-gl, json-server...
GHSA-9F6G-J8CH-79G4 vulnerabilities
Vulnerabilities for packages: tileserver-gl, json-server...
CVE-2026-68497 vulnerabilities
Vulnerabilities for packages: ruby3.2-jrjackson, akhq, wavefront-proxy, strimzi-kafka-operator, infinispan, flyway, solr, tez, ruby3.4-jrjackson, apache-tika, druid, strimzi-kafka-oauth, thingsboard, opensearch, neo4j, trino, confluent-kafka, dependency-track, nextflow, wildfly, ruby3.3-jrjackson...
CVE-2026-83557 vulnerabilities
Vulnerabilities for packages: ruby3.2-jrjackson, akhq, wavefront-proxy, strimzi-kafka-operator, infinispan, flyway, solr, tez, ruby3.4-jrjackson, apache-tika, druid, strimzi-kafka-oauth, thingsboard, opensearch, neo4j, trino, confluent-kafka, dependency-track, nextflow, wildfly, ruby3.3-jrjackson...
GHSA-WJGM-6HV5-3CVF vulnerabilities
Vulnerabilities for packages: ruby3.2-jrjackson, akhq, wavefront-proxy, strimzi-kafka-operator, infinispan, flyway, solr, tez, ruby3.4-jrjackson, apache-tika, druid, strimzi-kafka-oauth, thingsboard, opensearch, neo4j, trino, confluent-kafka, dependency-track, nextflow, wildfly, ruby3.3-jrjackson...
GHSA-GX83-3VF8-GH7J vulnerabilities
Vulnerabilities for packages: ruby3.2-jrjackson, akhq, wavefront-proxy, strimzi-kafka-operator, infinispan, flyway, solr, tez, ruby3.4-jrjackson, apache-tika, druid, strimzi-kafka-oauth, thingsboard, opensearch, neo4j, trino, confluent-kafka, dependency-track, nextflow, wildfly, ruby3.3-jrjackson...
CVE-2026-102804
A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwaveinit in the library stbhexwave.h. Performing a manipulation of the argument width/oversample results in integer overflow. Remote exploitation of the attack is...
[SECURITY] Fedora 43 Update: thunderbird-156.0-2.fc43
Mozilla Thunderbird is a standalone mail and newsgroup client...
[SECURITY] Fedora 43 Update: rootlesskit-3.2.0-1.fc43
Linux-native "fake root" for implementing rootless containers...
[SECURITY] Fedora 43 Update: sngrep-1.8.4-4.fc43
sngrep is a tool for displaying SIP calls message flows from terminal. It supports live capture to display realtime SIP packets and can also be used as PCAP viewer...
netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing
A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate...
netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers
A flaw was found in Netty's HttpObjectDecoder. A remote attacker can exploit this by sending a specially crafted HTTP/1.0 request that includes both Transfer-Encoding: chunked and Content-Length headers. While Netty correctly strips the conflicting Content-Length header for HTTP/1.1 messages, thi...
netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory up to 32 MB per block before...
grafana: Stored cross-site scripting in the Geomap panel allows privilege escalation
A flaw was found in Grafana. A user with an Editor role can exploit a stored cross-site scripting XSS vulnerability in the Geomap panel. This occurs because the Geomap panel loads map styles from a URL and inserts the style's attribution field into the page without proper sanitization. By...
grafana: grafana: Authorization bypass via missing destination folder permission check
A flaw was found in Grafana. The application fails to verify creation permissions on destination folders during panel update operations. An authenticated user with edit permissions in one folder can exploit this vulnerability through the library elements API to move a library panel into a folder...