@enbi/auth (>=0.1.0, <=0.11.0), @enbi/cli (>=0.1.0, <=0.11.0) +2 more potentially affected by CVE-2026-67327 via better-auth (>=1.7.0-beta.0, <=1.7.0-beta.9)

better-auth NPM version =1.7.0-beta.0, =0.1.0, =0.1.0, =0.1.0, =1.7.0-beta.0, =1.7.0-beta.9 Source cves: CVE-2026-67327 Source advisory: MEND:CVE-2026-67327...

fence v0.1.65

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

algorin-cli (>=0.0.1, <=0.21.0) potentially affected by CVE-2026-68770 via sentence-transformers (2.5.0)

sentence-transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - algorin-cli =0.0.1, =0.21.0 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, kafbat-ui-fips, zipkin, apache-nifi-registry, jenkins, camunda-zeebe, camunda, apache-activemq-fips...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, kafbat-ui-fips, zipkin, apache-nifi-registry, jenkins, camunda-zeebe, camunda, apache-activemq-fips...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, kafbat-ui-fips, zipkin, apache-nifi-registry, jenkins, camunda-zeebe, camunda, apache-activemq-fips...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, kafbat-ui-fips, zipkin, apache-nifi-registry, jenkins, camunda-zeebe, camunda, apache-activemq-fips...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, kafbat-ui-fips, zipkin, apache-nifi-registry, jenkins, camunda-zeebe, camunda, apache-activemq-fips...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, kafbat-ui-fips, zipkin, apache-nifi-registry, jenkins, camunda-zeebe, camunda, apache-activemq-fips...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552

The CVE-2026-25552 entry concerns Ghost CLI before 1.30.1, where an IP spoofing vulnerability allows unauthenticated remote attackers to bypass rate-limiting on self-hosted Ghost instances. The underlying issue is misusing the X-Forwarded-For header in combination with a misconfigured Nginx setup...

EUVD-2026-51595

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

CVE-2026-25552

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...