pwnkit

pwnkit Usage Tested on Arch Linux and Ubuntu 18.04 git clone https://github.com/c3l3si4n/pwnkit; make ./pwnkit...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

GHSA-VHHQ-M2GM-RWC9 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...

Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...

CLEANSTART-2026-KX40162 Gradle is a build tool with a focus on build automation

Security vulnerability affects the gradle8 package. Gradle is a build tool with a focus on build automation...

angular-cli-symlink-asset-escape-poc

Angular CLI symlink asset escape Minimal reproduction for @a...

SUSE CVE-2026-89259

Hugo is a static site generator. From v0.161.0, Hugo executes Node tools under Node's permission model, but TailwindCSS - included in the default security.exec.allow list - requires a highly permissive configuration --allow-addons, --allow-child-process, --allow-worker. As a result, the...

GHSA-M2PW-22CJ-JQ4V

creationtimestamp| type| source ---|---|--- 2026-08-10 21:27:13+00:00| seen| https://bsky.app/profile/scala-lang.org/post/3msr24brbfc2h...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @abelfubu/schematics (0.1.1) +302 more potentially affected by CVE-2026-71476 via nx (>=20.8.0, <=22.7.6)

nx NPM version =20.8.0, =0.0.47, =0.0.1, =8.1.1, =11.0.0, =0.1.1, =0.0.1, =2.23.0, =0.0.231, =0.0.231, =0.3.53, =0.3.61 - @capsuletech/cli 0.1.0 and more Source cves: CVE-2026-71476 Source advisory: SNYK:JS-NX-18593778...

SUSE CVE-2026-42574

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same o...

ROOT-APP-MAVEN-CVE-2026-47838 CVE-2026-47838 in io.root.org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2026-47838 in the io.root.org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.56) +23 more potentially affected by CVE-2026-54661 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54661 Source advisory: OSV:GHSA-38C3-WV3C-V3XJ...

PT-2026-60699

Name of the Vulnerable Software and Affected Versions Jawn versions prior to 1.7.0 Description Jawn parse methods allow arbitrarily deep JSON array and object nesting without a depth limit. A remote attacker can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted,...

co.cask.re:dre-core (>=1.0.1, <=1.1.2), co.cask.re:dre-plugins (>=1.0.1, <=1.1.2) +53 more potentially affected by CVE-2026-13502 via org.antlr:antlr4-maven-plugin (>=4.1, <=4.13.2)

org.antlr:antlr4-maven-plugin MAVEN version =4.1, =1.0.1, =1.0.1, =1.0, =0.1, =1.5.2, =1.4.8, =1.6.5 and more Source cves: CVE-2026-13502 Source advisory: SNYK:JAVA-ORGANTLR-17753946...

@10xsai/cloudflare-router-nx-plugin (1.0.0), @abelfubu/schematics (0.1.1) +666 more potentially affected by CVE-2026-54753 via nx (>=17.0.4, <=22.7.1)

nx NPM version =17.0.4, =2.2.1, =0.0.1, =0.1.5, =0.0.3, =0.0.47, =0.0.1, =17.0.2-alpha.2, =17.0.2-alpha.2, =8.1.1, =9.0.2 and more Source cves: CVE-2026-54753 Source advisory: SNYK:JS-NX-17660796...

ch.tutteli.spek:ch.tutteli.spek.gradle.plugin (>=0.4.0, <=0.5.0), ch.tutteli:tutteli-gradle-spek (>=0.4.0, <=0.5.0) +11 more potentially affected by CVE-2026-53914 via org.jetbrains.kotlin:kotlin-gradle-plugin (1.2.30)

org.jetbrains.kotlin:kotlin-gradle-plugin MAVEN version 1.2.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-gradle-plugin and may be impacted: - ch.tutteli.spek:ch.tutteli.spek.gradle.plugin =0.4.0, =0.4.0, =0.15.7,...

androidx.navigation.safeargs.kotlin:androidx.navigation.safeargs.kotlin.gradle.plugin (>=2.5.0-rc01, <=2.5.3), androidx.navigation.safeargs:androidx.navigation.safeargs.gradle.plugin (>=2.5.0-rc01, <=2.5.3) +146 more potentially affected by CVE-2026-53914 via org.jetbrains.kotlin:kotlin-gradle-plugin (1.6.21)

org.jetbrains.kotlin:kotlin-gradle-plugin MAVEN version 1.6.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jetbrains.kotlin:kotlin-gradle-plugin and may be impacted: -...

@ajna-inc/npmvc (>=0.1.0, <=0.3.4), @cra-ready/cli (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-55849 via @cyclonedx/cyclonedx-npm (>=3.1.0, <=4.2.1)

@cyclonedx/cyclonedx-npm NPM version =3.1.0, =0.1.0, =0.1.0, =1.0.8, =1.1.3 - @raj-dev/guardrail 1.0.0 Source cves: CVE-2026-55849 Source advisory: OSV:GHSA-V75R-VX73-82PJ...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +18 more potentially affected by CVE-2026-54299 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54299 Source advisory: OSV:GHSA-2PVR-WF23-7PC7...