12 matches found
ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2026-59890 via setuptools (76.0.0)
setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...
abinitostudio (>=1.0.1, <=1.0.8), autosubmit (3.14.0) +35 more potentially affected by CVE-2026-44405 via paramiko (2.7.1)
paramiko PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - abinitostudio =1.0.1, =1.1.0.0rc3, =0.7.0, =0.2.0, =0.0.1, =2.0.4, =0.8.0, =0.2.0, =0.0.1, =1.0.0a1, =1.0.2, =1.0.3 and more Source cves:...
BIT-AUTHENTIK-2026-42849 authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
CVE-2026-42849
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
CVE-2026-42849
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
CVE-2026-42849 authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
CVE-2026-42849 authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
CVE-2026-42849 authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
EUVD-2026-34026
authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, due to the implementation of stages in the SFE Simple Flow Executor in order to make the interface more compatible with legacy browsers, it was possible to use an XSS exploit in the AutosubmitStage. This issu...
abinitostudio (>=1.0.1, <=1.0.8), autosubmit (3.14.0) +35 more potentially affected by CVE-2026-44405 via paramiko (2.7.1)
paramiko PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - abinitostudio =1.0.1, =1.1.0.0rc3, =0.7.0, =0.2.0, =0.0.1, =2.0.4, =0.8.0, =0.2.0, =0.0.1, =1.0.0a1, =1.0.2, =1.0.3 and more Source cves:...
ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2025-47273 via setuptools (76.0.0)
setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...
XSS in Webmin 1.540 + exploit for privilege escalation
Information -------------------- Name : XSS vulnerability in Webmin Software : All versions prior to and including 1.540 are affected. Vendor Hompeage : http://www.webmin.com Vulnerability Type : Cross-Site Scripting Severity : Medium Researcher : Javier Bassi javierbassi at gmail dot com...