CVE-2026-101911 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl-fips, homepage, unleash, unleash-proxy, renovate, langfuse-fips, actions-runner, sqlpad, lerna, prism, code-server, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, graalvm, commercial-gitlab-rails-ee, langfuse, npm,...

GHSA-H3MG-XC3C-68PW vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl-fips, homepage, unleash, unleash-proxy, renovate, langfuse-fips, actions-runner, sqlpad, lerna, prism, code-server, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, graalvm, commercial-gitlab-rails-ee, langfuse, npm,...

GHSA-J6R3-76F7-8JCV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl-fips, homepage, unleash, unleash-proxy, renovate, langfuse-fips, actions-runner, sqlpad, lerna, prism, code-server, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, graalvm, commercial-gitlab-rails-ee, langfuse, npm,...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: lambda-nodejs, gitlab-rails-ce, wazuh-dashboard, tileserver-gl-fips, jupyter-base-notebook, authentik, nextcloud-server, unleash, unleash-proxy, verdaccio, authentik-fips, renovate, pelias-api, langfuse-fips, opentelemetry-auto-instrumentations-node, rancher-api-ui,...

GHSA-QHR7-859C-M2P7 vulnerabilities

Vulnerabilities for packages: lambda-nodejs, gitlab-rails-ce, wazuh-dashboard, tileserver-gl-fips, jupyter-base-notebook, authentik, nextcloud-server, unleash, unleash-proxy, verdaccio, authentik-fips, renovate, pelias-api, langfuse-fips, opentelemetry-auto-instrumentations-node, rancher-api-ui,...

CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: lambda-nodejs, gitlab-rails-ce, wazuh-dashboard, tileserver-gl-fips, jupyter-base-notebook, authentik, nextcloud-server, unleash, unleash-proxy, verdaccio, authentik-fips, renovate, pelias-api, langfuse-fips, opentelemetry-auto-instrumentations-node, rancher-api-ui,...

GHSA-R53P-7PC4-XJ5R vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, actions-runner, prism, code-server, npm, commercial-gitlab-rails-ee-fips, renovate, kibana, homepage...

GHSA-RFGV-XXQX-MFG5 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, actions-runner, prism, code-server, npm, commercial-gitlab-rails-ee-fips, renovate, kibana, homepage...

CVE-2026-101912 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, tileserver-gl-fips, homepage, unleash, unleash-proxy, renovate, langfuse-fips, actions-runner, sqlpad, lerna, prism, code-server, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, librechat, graalvm, commercial-gitlab-rails-ee, langfuse, npm,...

CVE-2026-18540 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, actions-runner, prism, code-server, npm, commercial-gitlab-rails-ee-fips, renovate, kibana, homepage...

CVE-2026-103260: Missing Authorization

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advan...

PT-2026-105608

ZITADEL: Actions V1 sandbox escape: host file read via require in github.com/zitadel/zitadel...

MAL-2026-17319 Malicious code in bfox-build-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...

Malicious code in bfox-build-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

EUVD-2026-89540

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrikertr.py and endpoint.py. Authenticated users can inject single quotes into...

CVE-2026-103056

AiSOC versions 7.2.0 before 12.0.0 are vulnerable to a command injection vulnerability within the actions service. The flaw exists because the application builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Auth...