31469 matches found
CVE-2026-73846
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73846
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73846 CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73846
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73846 CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73846 CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73846
The CVE describes a vulnerability in CKAN MCP Server prior to version 0.4.112 where canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters. This causes different logical parameter sets used by buildCacheKey to coll...
CVE-2026-45725
A flaw was found in compliance-trestle. The library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher does not properly sanitize path traversal sequences ../ when constructing local cache file paths from URLs. A remote attacker can exploit this by referencing a malicious URL in an...
bind security update
An update is available for bind. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...
RLSA-2026:54510 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
WordPress W3 Total Cache plugin <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability
Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability discovered by daroo in WordPress Plugin W3 Total Cache versions = 2.10.3...
GO-2026-4630 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, k8sgateway, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, eks-distro-fips...
GO-2026-5164 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, k8sgateway, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, eks-distro-fips...
GO-2026-5667 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, k8sgateway, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, eks-distro-fips...
GO-2025-3743 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, juicefs, eks-distro, eks-distro-fips...
GO-2026-4635 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, eks-distro...
GO-2026-4969 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, k8sgateway, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, eks-distro-fips...
GO-2026-5417 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, k8sgateway, juicefs, kubernetes-dns-node-cache, eks-distro, kubernetes-dns-node-cache-fips, eks-distro-fips...