177305 matches found
gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer()
A flaw was found in GitPython. This vulnerability allows attackers to inject newline characters into the section parameter of the configwriter function, leading to the injection of arbitrary section headers into the .git/config file. By forging a core section with a malicious hooksPath, an attack...
sqlite: sqlite: Arbitrary code execution via use-after-free in JSON parsing
A flaw was found in sqlite. This use-after-free vulnerability in the JSON parsing logic allows remote attackers to craft malicious JSON payloads. This can trigger memory deallocation followed by illegal memory access, potentially leading to arbitrary code execution, sensitive information leakage,...
sqlite: sqlite: Arbitrary code execution via malicious SQL statement
A flaw was found in sqlite. A remote attacker can exploit a use-after-free vulnerability in the ORDER BY clause parsing routine by crafting a malicious SQL statement. This can lead to an application crash, sensitive information disclosure, and in some cases, arbitrary code execution, allowing the...
GHSA-MH99-V99M-4GVG vulnerabilities
Vulnerabilities for packages: thingsboard, unleash-fips, gemini-cli, argo-workflows, authentik-fips, ts-patch, saf, langfuse, graalvm, gitlab-rails-ce-fips, unleash-proxy, thingsboard-fips, opensearch-dashboards, authentik, lerna, vitess, langfuse-fips, redisinsight, opensearch-dashboards-fips,...
CVE-2026-14257 vulnerabilities
Vulnerabilities for packages: thingsboard, unleash-fips, gemini-cli, argo-workflows, authentik-fips, ts-patch, saf, langfuse, graalvm, gitlab-rails-ce-fips, unleash-proxy, thingsboard-fips, opensearch-dashboards, authentik, lerna, vitess, langfuse-fips, redisinsight, opensearch-dashboards-fips,...
GHSA-V74W-7MR3-4QG3 vulnerabilities
Vulnerabilities for packages: apache-hop, hadoop-fips, thingsboard, apache-hop-fips, tez, seata, management-api-for-apache-cassandra-5.0...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion, jupyter-all-spark-notebook, opal, mlflow-fips, datahub-ingestion-fips, mlflow...
GHSA-FJR4-X663-MWXC vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion, jupyter-all-spark-notebook, opal, mlflow-fips, datahub-ingestion-fips, mlflow...
GHSA-3RP5-JJMW-4WV2 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion, jupyter-all-spark-notebook, opal, mlflow-fips, datahub-ingestion-fips, mlflow...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion, jupyter-all-spark-notebook, opal, mlflow-fips, datahub-ingestion-fips, mlflow...
GHSA-R9MR-M37C-5FR3 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion, jupyter-all-spark-notebook, opal, mlflow-fips, datahub-ingestion-fips, mlflow...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, spegel, spegel-fips, ipfs-cluster, kubo, ipfs-cluster-fips, k3s...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, spegel, spegel-fips, ipfs-cluster, kubo, ipfs-cluster-fips, k3s...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: gemini-cli, saf, graalvm, opensearch-dashboards, lerna, opensearch-dashboards-fips, code-server, prism, gitlab-rails-ce, sqlpad, haraka, pulumi, renovate, npm, actions-runner, kubeflow-centraldashboard, kibana, node-gyp, wazuh-dashboard-fips, wazuh-dashboard...
GHSA-JPCW-4WR7-C3VQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-aws-efs, crossplane-provider-aws-lightsail-fips, crossplane-provider-aws-ecrpublic-fips, crossplane-provider-aws-sfn, crossplane-provider-aws-cur-fips, crossplane-provider-aws-imagebuilder-fips,...
GHSA-R277-6W6Q-XMQW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-athena, crossplane-provider-aws-efs, crossplane-provider-aws-lightsail-fips, crossplane-provider-aws-ecrpublic-fips, crossplane-provider-aws-sfn, crossplane-provider-aws-cur-fips, crossplane-provider-aws-imagebuilder-fips,...
GHSA-V74W-7MR3-4QG3 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: lerna, saf, kubeflow-centraldashboard, node-gyp, npm, prism, pulumi, code-server, opensearch-dashboards, renovate, sqlpad...