831250 matches found
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks
Impact Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and deny lists, including resource names. PreDelete and PostDelete hooks...
GHSA-23VG-4CJM-66Q5 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
Summary openapi3filter.ValidationHandler.Middleware validates requests with kin-openapi's legacy router, which selects an OpenAPI operation from the decoded URL.Path. The method is documented as implementing gorilla/mux.MiddlewareFunc, but a downstream gorilla/mux router configured with...
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion
Summary openapi3filter.ValidationHandler.Middleware validates requests with kin-openapi's legacy router, which selects an OpenAPI operation from the decoded URL.Path. The method is documented as implementing gorilla/mux.MiddlewareFunc, but a downstream gorilla/mux router configured with...
EUVD-2026-101529
Appium: Symlink based Zip Slip in @appium/support ZIP extraction...
GHSA-QFXX-C367-67F8 Appium: Symlink based Zip Slip in @appium/support ZIP extraction
Summary CVE-2026-30973 GHSA-rfx7-4xw3-gh4m was a plain path traversal in the entry name. The containment check built an Error object without throwing it, so an entry literally named something like ../evil.txt was written outside the destination. That issue was fixed in @appium/support 7.0.6 by...
Appium: Symlink based Zip Slip in @appium/support ZIP extraction
Summary CVE-2026-30973 GHSA-rfx7-4xw3-gh4m was a plain path traversal in the entry name. The containment check built an Error object without throwing it, so an entry literally named something like ../evil.txt was written outside the destination. That issue was fixed in @appium/support 7.0.6 by...
GHSA-CR65-55V9-XHVV Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`
Summary diohttp2adapter follows HTTP Location redirects without stripping sensitive request headers when the redirect target is a different origin. An attacker who can cause any origin server to return a cross-origin 302 redirect receives the victim's Authorization, Cookie, and Proxy-Authorizatio...
EUVD-2026-98921
Dio: Cross-origin redirect leaks sensitive request headers in diohttp2adapter...
Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`
Summary diohttp2adapter follows HTTP Location redirects without stripping sensitive request headers when the redirect target is a different origin. An attacker who can cause any origin server to return a cross-origin 302 redirect receives the victim's Authorization, Cookie, and Proxy-Authorizatio...
GHSA-H4R5-MXV5-8MJC kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
Summary openapi3filter decodes deepObject-style query parameters by looping over every key in the request's query string. Inside that loop it recompiles a loop-invariant regular expression on every iteration. The pattern depends only on the spec-defined parameter name, not on the loop variable, s...
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
Summary openapi3filter decodes deepObject-style query parameters by looping over every key in the request's query string. Inside that loop it recompiles a loop-invariant regular expression on every iteration. The pattern depends only on the spec-defined parameter name, not on the loop variable, s...
security checks
🔍 Miner Hunter Crypto-miner detection, removal, and hardening toolkit for Linux servers. Built from real-world incident response — detects miners that hide from ps, top, htop, and btop using rootkit techniques. 📦 Installation git clone https://gitlab.com/abdom.seada/security-checks.git cd...
CVE-2026-109924
A flaw was found in undici. A malicious server can trigger a Denial of Service DoS by exhausting application memory. When an application connects to an untrusted Server-Sent Events SSE feed, the EventSource parser does not properly limit retained internal state when processing fragmented lines or...
CVE-2026-109841
A flaw was found in undici. The HTTP client improperly handles case sensitivity when verifying Subresource Integrity SRI algorithm tokens. When an application specifies an uppercase or mixed-case algorithm name, undici treats the token as unrecognized and skips verification instead of enforcing i...
EUVD-2026-101603
Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service...
GHSA-QJ98-GP63-54XJ Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service
Summary Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable. The exposed routes include: - /state - /assign - /removeNode - /moveTablet An unauthenticated request to /removeNode?id=1&group=0 on a single-node standalone deployment breaks th...
Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service
Summary Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable. The exposed routes include: - /state - /assign - /removeNode - /moveTablet An unauthenticated request to /removeNode?id=1&group=0 on a single-node standalone deployment breaks th...
CVE-2026-104198
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...
GHSA-24CC-9352-H2PG tinytag: Infinite loop when parsing certain M4A files containing invalid atoms
Impact An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag. Patches The issue has been fixed in tinytag 2.3.0, by reusing the primary atom parsing code path th...
tinytag: Infinite loop when parsing certain M4A files containing invalid atoms
Impact An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag. Patches The issue has been fixed in tinytag 2.3.0, by reusing the primary atom parsing code path th...