UBUNTU-CVE-2026-51400

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...

Malicious code in beaver-ui-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c303fcf069e3feb6dfa3d2b8ba7b7b2251c89d796bcf9fcd5d05e44849c64a0d Package advertises itself as a React UI toolkit but on require, helpers.js runs init at module load which selects a platform-specific URL, fetches a...

CVE-2026-45538 OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack buffer overflow when siptojson is called in the routing script. Function siptojson modules/sipmsgops/sipmsgops.c copie...

CVE-2026-45538 OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack buffer overflow when siptojson is called in the routing script. Function siptojson modules/sipmsgops/sipmsgops.c copie...

CVE-2026-45538

OpenSIPS prior to 4.0.0 is vulnerable to a stack buffer overflow in sip_to_json() when processing a SIP header name longer than 255 bytes. The function copies header names into a fixed 255-byte stack buffer without bounds checking, even though header names can be ~65,000 bytes. A routing script t...

CVE-2026-14643 vulnerabilities

Vulnerabilities for packages: vitess, code-server, langfuse-fips, kibana, pelias-api, renovate, langfuse...

GHSA-JR45-8VMC-QM54 vulnerabilities

Vulnerabilities for packages: vitess, code-server, langfuse-fips, kibana, pelias-api, renovate, langfuse...

CVE-2026-15157 vulnerabilities

Vulnerabilities for packages: npm, prism, vitess, langfuse, code-server, pulumi...

CVE-2026-16729 vulnerabilities

Vulnerabilities for packages: npm, prism, vitess, langfuse, code-server, pulumi...

GHSA-JR45-8VMC-QM54 vulnerabilities

Vulnerabilities for packages: code-server, vitess, langfuse, renovate...

GHSA-8XCM-R25X-G524 vulnerabilities

Vulnerabilities for packages: npm, prism, vitess, langfuse, code-server, pulumi...

CVE-2026-16728 vulnerabilities

Vulnerabilities for packages: npm, prism, vitess, langfuse, code-server, pulumi...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: npm, prism, vitess, langfuse, code-server, pulumi...

CVE-2026-14643 vulnerabilities

Vulnerabilities for packages: code-server, vitess, langfuse, renovate...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: code-server, vitess, langfuse, renovate...

GHSA-4CWX-7WF7-3272 vulnerabilities

Vulnerabilities for packages: code-server, vitess, langfuse, renovate...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: npm, prism, vitess, langfuse, code-server, pulumi...

CVE-2026-70553

MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file by submitting crafted POST requests to the install endpoint after installation is complete. Attackers can supply a malicious...

CVE-2026-18656

An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user opens the...

CVE-2026-18657

An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user starts Kiro CLI in...