CVE-2026-56243

Capgo before 12.128.2 has a security control bypass in the PostgREST/RLS plane: it accepts plaintext API keys via the capgkey header despite enforce_hashed_api_keys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext keys directly to the PostgREST/RLS plane t...

CVE-2026-56225

Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers get/put/delete/post. API keys created with mode=all but restricted to a single app via limitedtoapps are only checked for limitedtoorgs and not for limitedtoapps, so an app-scoped key ca...

CVE-2026-56225 Capgo - Authorization Bypass in API Key Management via App-Limited Keys

Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers get/put/delete/post. API keys created with mode=all but restricted to a single app via limitedtoapps are only checked for limitedtoorgs and not for limitedtoapps, so an app-scoped key ca...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using the “after free” mechanism in the Digital Credentials API in Google Chrome before version 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-9678 vulnerabilities

Vulnerabilities for packages: pelias-api, vitess, renovate, gemini-cli, langfuse, py3-captum, kibana, code-server, langfuse-fips...

GHSA-VMH5-MC38-953G vulnerabilities

Vulnerabilities for packages: pelias-api, vitess, renovate, langfuse, py3-captum, kibana, code-server, langfuse-fips...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: pelias-api, vitess, renovate, langfuse, py3-captum, kibana, code-server, langfuse-fips...

CVE-2026-6734 vulnerabilities

Vulnerabilities for packages: pelias-api, vitess, renovate, py3-captum, kibana, code-server...

GHSA-HM92-R4W5-C3MJ vulnerabilities

Vulnerabilities for packages: pelias-api, vitess, renovate, py3-captum, kibana, code-server...

GHSA-PR7R-676H-XCF6 vulnerabilities

Vulnerabilities for packages: pelias-api, vitess, renovate, gemini-cli, langfuse, py3-captum, kibana, code-server, langfuse-fips...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, grype-db, kubescape, consul-k8s, cluster-api-helm-controller, amazon-ecs-agent-fips, neuvector, neuvector-fips, jfrog-cli, packer, skaffold-fips, datadog-agent, google-osconfig-agent, tigera-operator, buildkitd, ctop, docker,...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, pelias-api, vitess, saf, actions-runner, renovate, gemini-cli, haraka, py3-captum, kibana, code-server, prism...

K000161850: urllib3 vulnerability CVE-2025-66471

Security Advisory Description urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the...