321 matches found
PT-2026-78838
Name of the Vulnerable Software and Affected Versions OpenStack Aodh versions prior to 22.0.1 OpenStack Watcher versions 4.0.0 and later Description In OpenStack Aodh, the alarm list API fails to properly enforce project scoping when the all projects query parameter is set to false. The system...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: flux-operator-fips, flux-source-watcher, flux-source-controller, flux-notification-controller, victoriametrics-cluster-fips, dkron, victorialogs, librechat, steampipe, localstack, metacontroller, nova-fips, aws-ebs-csi-driver-fips, podinfo, terragrunt,...
CVE-2026-45809
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
CVE-2026-45809 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
CVE-2026-45809
OpenSIPS denial-of-service in watcherinfo XML generation (CVE-2026-45809). Affected: OpenSIPS before 3.6.6 and 4.0.0-rc1. Root cause: copying the stored watcher URI into a fixed-size stack buffer during presence.winfo watcherinfo XML generation when an oversized watcher entry is created by a long...
CVE-2026-45809 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
CVE-2026-45809 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
PT-2026-63312
Name of the Vulnerable Software and Affected Versions Gitea versions 1.25.4 through 2026-05-16 Description When a public repository is changed to private via the REST API, watch records are not properly cleared. This occurs because the updateRepository function, which is utilized by the PATCH...
BoxLite has a Timeout Bypass Vulnerability
Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...
GHSA-XJHV-PP2R-6F82 BoxLite has a Timeout Bypass Vulnerability
Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...
Malicious Package
Overview @service-suppliers/select-supplier-watcher-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38be804fe779ace5ea3a6a56214beebe7ceabaa5f765b46a0f7888ed2da4fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @service-suppliers/fetch-suppliers-watcher-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview @service-suppliers/fetch-initial-suppliers-watcher-saga is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between...
MAL-2026-4436 Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3829c1a8be4ed51ad5c9d714d223cb037f7d76df868b73e63c69c6c60ff8dbf3 On npm install, scripts/postinstall.js fetches a platform-specific script from https://oob.moika.tech/payload/linux|mac|win, writes it to the OS temp...
[SECURITY] Fedora 42 Update: awatcher-0.3.3-2.fc42
A window activity and idle watcher...
[SECURITY] Fedora 43 Update: awatcher-0.3.3-2.fc43
A window activity and idle watcher...
[SECURITY] Fedora 44 Update: awatcher-0.3.3-2.fc44
A window activity and idle watcher...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, kyverno-fips, jaeger-fips, cluster-autoscaler, terraform, mattermost, beats, knative-operator-fips, azurefile-csi, cloud-provider-aws-fips, gitlab-kas, argo-workflows, gitaly-fips, argo-cd-fips, ingress-nginx-controller-fips,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, oras-fips, flux-source-controller, tailscale, malcontent, apko, metacontroller, aws-privateca-issuer-fips, rabbitmq-messaging-topology-operator, grafana-operator-fips, karma-fips, dgraph, pluto, atlas, flux-helm-controller, supercronic, dapr-fips...