GHSA-22G5-R2X5-97CX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-1899 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-X426-X7CC-3FPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-48022 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CR32-G25G-VXJJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-WMXR-6J5F-838P vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-40686 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-5QXF-W5V2-M3RG vulnerabilities

Vulnerabilities for packages: exim...

CVE-2021-37136 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-41404 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-55832 vulnerabilities

Vulnerabilities for packages: ascan...

CVE-2026-75628

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

EUVD-2026-63189

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

CVE-2026-75628

The Punk::OAuth2 Perl module (versions before 0.03 ) is vulnerable to an unauthorized off-site redirect following authentication. The root cause lies in the same_origin_path function, which fails to reject backslashes or tabs in the return parameter of the oauth2_login initiation request. Because...

EUVD-2026-62948

In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial by invoking either the enable token or revoke token action, because the action's tokenserial parameter is not masked...