30766 matches found
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, openstack-horizon-2025.2-fips, openstack-glance-2025.1, openstack-placement-2025.2-fips, openstack-glance-2026.1-fips, openstack-placement-2025.2, openstack-keystone-2025.1-fips, nvidia-nsight-compute-13.3, vast-csi, openstack-glance-2026.1,...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, openstack-horizon-2025.2-fips, openstack-glance-2025.1, openstack-placement-2025.2-fips, openstack-glance-2026.1-fips, openstack-placement-2025.2, openstack-keystone-2025.1-fips, nvidia-nsight-compute-13.3, vast-csi, openstack-glance-2026.1,...
GHSA-8PPF-4F7H-5PPJ vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, awx, kubeflow-jupyter-web-app, spamcheck, superset, azureml-inference-server-http-fips, datadog-agent-fips, openstack-keystone-2025.2-fips, datadog-agent, openstack-keystone-2025.1-fips...
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, awx, kubeflow-jupyter-web-app, spamcheck, superset, azureml-inference-server-http-fips, datadog-agent-fips, openstack-keystone-2025.2-fips, datadog-agent, openstack-keystone-2025.1-fips...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, awx, kubeflow-jupyter-web-app, spamcheck, superset, azureml-inference-server-http-fips, datadog-agent-fips, openstack-keystone-2025.2-fips, datadog-agent, openstack-keystone-2025.1-fips...
GHSA-4C39-4CCG-62R3 Next.js: Unbounded Server Action payload in Edge runtime
Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime Workarounds If you cannot upgrade, ensure your hosting provider limits the request's body size. 5 MiB should be...
Next.js: Unbounded Server Action payload in Edge runtime
Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime Workarounds If you cannot upgrade, ensure your hosting provider limits the request's body size. 5 MiB should be...
Next.js: Unauthenticated disclosure of internal Server Function endpoints
Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...
GHSA-955P-X3MX-JCVP Next.js: Unauthenticated disclosure of internal Server Function endpoints
Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...
GHSA-6GPP-XCG3-4W24 Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...
NPM: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
NPM: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.2.11...
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...
GHSA-M99W-X7HQ-7VFJ Next.js: Denial of Service in App Router using Server Actions
Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. Workarounds No workaround exists besides upgrading. Applications using Pages Router or not using...
NPM: Next.js: Denial of Service in App Router using Server Actions
NPM: Next.js: Denial of Service in App Router using Server Actions vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...
Next.js: Denial of Service in App Router using Server Actions
Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. Workarounds No workaround exists besides upgrading. Applications using Pages Router or not using...
CVE-2026-59886
creationtimestamp| type| source ---|---|--- 2026-07-22 17:06:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o 2026-07-22 17:06:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m...
CVE-2026-50252
creationtimestamp| type| source ---|---|--- 2026-07-22 14:08:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraiqwpuvy2a...
CVE-2026-46582
creationtimestamp| type| source ---|---|--- 2026-07-22 13:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrai5iob722j...