318 matches found
owasp-aibom
This repository does not have a README...
CVE-2025-13780
CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...
cyclonedx-cli
/ / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add Add...
[SECURITY] Fedora 45 Update: jackson-bom-2.21.8-1.fc45
A "bill of materials" POM for Jackson dependencies...
pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key JWK parser fails to normalize Unicode byte-order marks BOM. In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to...
pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key JWK parser fails to normalize Unicode byte-order marks BOM. In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to...
pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key JWK parser fails to normalize Unicode byte-order marks BOM. In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to...
bom-view
BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...
pgadmin4-9.10-CVE-2025-13780
pgadmin4 9.11 Meta-Command Filter Command Execution Summary The PLAIN restore meta-command filter introduced in pgAdmin as part of the fix for Issue 9320 does not detect meta-commands when a SQL file begins with a UTF-8 Byte Order Mark EF BB BF or other special sequences. The implemented filter...
[SECURITY] Fedora 44 Update: jackson-bom-2.18.12-1.fc44
A "bill of materials" POM for Jackson dependencies...
Fedora 44 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-b7ad391dd5)
The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7ad391dd5 advisory. Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to...
agent-bom
AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. For AppSec teams and developers who run Claude Code, Cursor, Codex or any MCP client: see which agents, MCP servers, tools and packages are installed, which are vulnerable, and what each one can reach. Local...
CVE-2026-124315
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted getbomitems and getbomdiff methods that skip BOM read permission checks. Any authenticated user, including portal or no-role users, can call getbomitems with a BOM name to...
CVE-2026-124315 Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted getbomitems and getbomdiff methods that skip BOM read permission checks. Any authenticated user, including portal or no-role users, can call getbomitems with a BOM name to...
CVE-2026-124315 Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted getbomitems and getbomdiff methods that skip BOM read permission checks. Any authenticated user, including portal or no-role users, can call getbomitems with a BOM name to...
EUVD-2026-119269
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted getbomitems and getbomdiff methods that skip BOM read permission checks. Any authenticated user, including portal or no-role users, can call getbomitems with a BOM name to...
CVE-2026-124315
Frappe ERPNext versions before 15.121.4 and 16.x before 16.36.0 are susceptible to a missing authorization vulnerability (CWE-862) in the get_bom_items and get_bom_diff methods. These methods are currently whitelisted, causing them to skip necessary BOM read permission checks. This allows any aut...
CVE-2026-124315 Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted getbomitems and getbomdiff methods that skip BOM read permission checks. Any authenticated user, including portal or no-role users, can call getbomitems with a BOM name to...
GO-2026-6865 vulnerabilities
Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...
CVE-2026-116591 vulnerabilities
Vulnerabilities for packages: crossplane, eksctl, kubeflow-pipelines, datadog-agent, k3s, distribution, newrelic-fluent-bit-output, timoni, neuvector-scanner, flux, wal-g, scorecard, tfsec, nri-kafka, terragrunt, percona-server-mongodb-operator, slsa-verifier, witness, kaniko, skaffold, velero,...