5641 matches found
CVE-2025-6019
This repository does not have a README...
cve-2025-48384-hook
This repository does not have a README...
CVE-2018-1335
This repository does not have a README...
ez-pyload (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via pyload-ng (0.5.0b3.dev101)
pyload-ng PYPI version 0.5.0b3.dev101 is affected by a known vulnerability. The following packages have a transitive dependency on pyload-ng and may be impacted: - ez-pyload =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-9Q47-3CM2-2RP8...
ez-pyload (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via pyload-ng (0.5.0b3.dev101)
pyload-ng PYPI version 0.5.0b3.dev101 is affected by a known vulnerability. The following packages have a transitive dependency on pyload-ng and may be impacted: - ez-pyload =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-889W-M37P-88M5...
@n8n/n8n-nodes-langchain (2.42.0), n8n (2.42.0) potentially affected by unknown CVE via n8n-nodes-base (2.42.0)
n8n-nodes-base NPM version 2.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.42.0 - n8n 2.42.0 Source cves: unknown CVE Source advisory: MEND:WS-2026-0091...
@asermax/tachikoma (>=3.67.0, <=3.81.0), @dgtalbug/iris (>=0.3.0-rc.0, <=0.4.0) +35 more potentially affected by unknown CVE via markdown-it (15.0.0)
markdown-it NPM version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it and may be impacted: - @asermax/tachikoma =3.67.0, =0.3.0-rc.0, =0.0.12, =0.0.5, =0.16.4, =0.11.4, =0.11.6 and more Source cves: unknown CVE Source advisory:...
@asermax/tachikoma (>=3.67.0, <=3.81.0), @dgtalbug/iris (>=0.3.0-rc.0, <=0.4.0) +35 more potentially affected by unknown CVE via markdown-it (15.0.0)
markdown-it NPM version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it and may be impacted: - @asermax/tachikoma =3.67.0, =0.3.0-rc.0, =0.0.12, =0.0.5, =0.16.4, =0.11.4, =0.11.6 and more Source cves: unknown CVE Source advisory:...
CVE-2026-73639
Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in readdirect8. With a tRNS chunk, readdirect8 adds an alpha channel to the image it creates but still sizes the row buffer from the original channel count...
CVE-2026-48977
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...
CVE-2026-48785
Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path such as /data/safe-but-unsafe. A local...
CVE-2026-25832
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group...
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
express-helmet (1.0.1), gloggo (>=1.1.2, <=1.1.4) +2 more potentially affected by unknown CVE via file-type-detector (1.1.1)
file-type-detector NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on file-type-detector and may be impacted: - express-helmet 1.0.1 - gloggo =1.1.2, =2.3.2, =2.3.4 - helmify 1.2.1 Source cves: unknown CVE Source advisory:...
CVE-2026-81738
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries...
UBUNTU-CVE-2026-71223
Unknown description...
CVE-2026-71223
Unknown description...
SUSE CVE-2026-84383
libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...
SUSE CVE-2026-84384
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli path has no outpu...
SUSE CVE-2026-84444
libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITHUNCOMPRESSEDCODEC is enabled, heifcontextaddimagetile accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image...