1183 matches found
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, airflow, httpie, datadog-agent, py3-pipenv, mlflow, pypy-3.10, superset, kubeflow-jupyter-web-app, py3-setuptools, kubeflow-volumes-web-app...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: kubeflow-katib, airflow, httpie, datadog-agent, py3-pipenv, mlflow, pypy-3.10, superset, kubeflow-jupyter-web-app, py3-setuptools, kubeflow-volumes-web-app...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, mitmproxy, airflow, py3-cassandra-medusa, datadog-agent, kubeflow-pipelines, mlflow, k8s-sidecar, superset, kubeflow, kubeflow-jupyter-web-app, kserve, kubeflow-volumes-web-app...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: pypy-3.10, wazuh-manager, openstack-glance-2026.1, kubeflow-jupyter-web-app, datahub-ingestion-fips, openstack-horizon-2026.1-fips, authentik, openstack-glance-2025.1, openstack-glance-2026.1-fips, openstack-keystone-2025.1-fips, py3-pipenv, datahub-ingestion,...
GHSA-8PPF-4F7H-5PPJ vulnerabilities
Vulnerabilities for packages: barman, wazuh-manager, apache-beam-python-3.12-sdk, kubeflow-jupyter-web-app, metaflow-service-fips, datahub-ingestion-fips, openstack-keystone-2025.1-fips, authentik, kubeflow-pipelines-fips, kubeflow-pipelines-visualization-server, datahub-ingestion, superset,...
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: barman, wazuh-manager, apache-beam-python-3.12-sdk, kubeflow-jupyter-web-app, metaflow-service-fips, datahub-ingestion-fips, openstack-keystone-2025.1-fips, authentik, kubeflow-pipelines-fips, kubeflow-pipelines-visualization-server, datahub-ingestion, superset,...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: barman, wazuh-manager, apache-beam-python-3.12-sdk, kubeflow-jupyter-web-app, metaflow-service-fips, datahub-ingestion-fips, openstack-keystone-2025.1-fips, authentik, kubeflow-pipelines-fips, kubeflow-pipelines-visualization-server, datahub-ingestion, superset,...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: pypy-3.10, wazuh-manager, openstack-glance-2026.1, kubeflow-jupyter-web-app, datahub-ingestion-fips, openstack-horizon-2026.1-fips, authentik, openstack-glance-2025.1, openstack-glance-2026.1-fips, openstack-keystone-2025.1-fips, py3-pipenv, datahub-ingestion,...
CVE-2026-9602
Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...
CVE-2026-9602
Mattermost Desktop App vulnerable versions:
CVE-2026-9602 Mattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methods
Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...
CVE-2026-9602
Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...
PT-2026-60738
Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...
vulnerable-web-app
vulnerable-web-app ⚠️ Intentionally vulnerable. A runna...
Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-15115
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...
EUVD-2026-42486
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-15115
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-15115
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...
PT-2026-56634
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.115 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass the same origin policy via a crafted HTML page. The same origin policy is a...