60013 matches found
CVE-2026-56243 Capgo - Hashed API Key Enforcement Bypass via PostgREST/RLS Plane
Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforcehashedapikeys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext API keys directly to th...
EUVD-2026-38430
Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforcehashedapikeys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext API keys directly to th...
CVE-2026-56243
Capgo before 12.128.2 has a security control bypass in the PostgREST/RLS plane: it accepts plaintext API keys via the capgkey header despite enforce_hashed_api_keys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext keys directly to the PostgREST/RLS plane t...
CVE-2026-56225
Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers get/put/delete/post. API keys created with mode=all but restricted to a single app via limitedtoapps are only checked for limitedtoorgs and not for limitedtoapps, so an app-scoped key ca...
CVE-2026-56225 Capgo - Authorization Bypass in API Key Management via App-Limited Keys
Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers get/put/delete/post. API keys created with mode=all but restricted to a single app via limitedtoapps are only checked for limitedtoorgs and not for limitedtoapps, so an app-scoped key ca...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Using the “after free” mechanism in the Digital Credentials API in Google Chrome before version 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
CVE-2026-9678 vulnerabilities
Vulnerabilities for packages: py3-captum, langfuse, code-server, langfuse-fips, pelias-api, gemini-cli, renovate, vitess, kibana...
GHSA-VMH5-MC38-953G vulnerabilities
Vulnerabilities for packages: py3-captum, langfuse, code-server, langfuse-fips, pelias-api, renovate, vitess, kibana...
CVE-2026-9697 vulnerabilities
Vulnerabilities for packages: py3-captum, langfuse, code-server, langfuse-fips, pelias-api, renovate, vitess, kibana...
GHSA-PR7R-676H-XCF6 vulnerabilities
Vulnerabilities for packages: py3-captum, langfuse, code-server, langfuse-fips, pelias-api, gemini-cli, renovate, vitess, kibana...
GHSA-HM92-R4W5-C3MJ vulnerabilities
Vulnerabilities for packages: py3-captum, code-server, pelias-api, renovate, vitess, kibana...
CVE-2026-6734 vulnerabilities
Vulnerabilities for packages: py3-captum, code-server, pelias-api, renovate, vitess, kibana...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: k9s-fips, spegel, trivy-operator, kube-arangodb, kubescape-server-fips, docker-fips, consul-k8s, kaniko-fips, kgateway, neuvector, gitlab-rails-ce-fips, kubescape-server, rancher, zarf-fips, syft-fips, packer-fips, chartmuseum, docker-cli-buildx, spegel-fips, eksctl,...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: py3-captum, code-server, node-gyp, pelias-api, gemini-cli, renovate, vitess, actions-runner, kibana, haraka, npm, saf, prism...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: py3-captum, code-server, node-gyp, pelias-api, gemini-cli, renovate, vitess, actions-runner, kibana, haraka, npm, saf, prism...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: py3-captum, code-server, node-gyp, pelias-api, gemini-cli, renovate, vitess, actions-runner, kibana, haraka, npm, saf, prism...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: py3-captum, code-server, node-gyp, pelias-api, gemini-cli, renovate, vitess, actions-runner, kibana, haraka, npm, saf, prism...