13526 matches found
Photon OS 5.0: Nginx PHSA-2026-5.0-0935
An update of the nginx package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0935. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-69152
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...
CVE-2026-67320
creationtimestamp| type| source ---|---|--- 2026-08-03 16:00:39+00:00| seen| https://www.acn.gov.it/portale/w/disponibile-poc-per-lo-sfruttamento-della-cve-2026-67320-nella-libreria-axios 2026-08-04 01:00:34+00:00| seen|...
ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-68945 via @angular/common (22.0.0)
@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-68945 Source advisory: OSV:GHSA-JHPW-976M-542J...
@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-68945 via @angular/common (>=20.0.0, <=20.3.25)
@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-68945 Source advisory: OSV:GHSA-JHPW-976M-542J...
ngx-mat-input-tel (22.0.0) potentially affected by CVE-2026-68945 via @angular/common (22.0.0)
@angular/common NPM version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/common and may be impacted: - ngx-mat-input-tel 22.0.0 Source cves: CVE-2026-68945 Source advisory: SNYK:JS-ANGULARCOMMON-18550632...
@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.209-alpha) +48 more potentially affected by CVE-2026-68945 via @angular/common (>=21.0.0, <=21.2.17)
@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.2 and more Source cves: CVE-2026-68945 Source advisory: SNYK:JS-ANGULARCOMMON-18550632...
@ammar_sk/shared-lib (0.0.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +33 more potentially affected by CVE-2026-68945 via @angular/common (>=20.0.0, <=20.3.25)
@angular/common NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =8.9.1, =8.9.1, =1.1.89, =0.0.57, =0.7.2, =0.7.3 and more Source cves: CVE-2026-68945 Source advisory: SNYK:JS-ANGULARCOMMON-18550632...
3d-card (0.0.2), 4byte-peru-components (1.0.0) +315 more potentially affected by CVE-2026-68945 via @angular/common (>=19.0.0, <=19.2.25)
@angular/common NPM version =19.0.0, =3.19.0, =0.0.327, =19.0.0, =8.0.0, =3.0.0, =1.0.0, =3.0.3 - @astro-sports-developers/shared 0.0.3 and more Source cves: CVE-2026-68945 Source advisory: OSV:GHSA-JHPW-976M-542J...
@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.209-alpha) +48 more potentially affected by CVE-2026-68945 via @angular/common (>=21.0.0, <=21.2.17)
@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.2 and more Source cves: CVE-2026-68945 Source advisory: OSV:GHSA-JHPW-976M-542J...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gawk: gawk-5.4.1-1.hum1 aarch64, x8664 gawk-all-langpacks-5.4.1-1.hum1 aarch64, x8664 gawk-devel-5.4.1-1.hum1 aarch64, x8664 gawk-doc-5.4.1-1.hum1 noarch gawk-5.4.1-1.hum1.src src Security Fixes:...
app.cash.backfila:client-misk (>=0.1.0, <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1468 more potentially affected by CVE-2026-58059 via org.bouncycastle:bcprov-ext-jdk15on (>=1.47, <=1.70)
org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.47, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...
CVE-2026-6694 Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk
A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics APNG image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow CWE-121, causing the file-png plugin to crash and resulting in a...
Improper Validation of Certificate with Host Mismatch
Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the HostnameUtil class, whose "match CN when no dNSName SAN exists" fallback is gated on Properties.isOverrideSetJSSEHOSTNAMECHECKCNFALLBACK, true, which returns true when the...
Improper Validation of Certificate with Host Mismatch
Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the HostnameUtil class, whose "match CN when no dNSName SAN exists" fallback is gated on Properties.isOverrideSetJSSEHOSTNAMECHECKCNFALLBACK, true, which returns true when the...
Improper Validation of Certificate with Host Mismatch
Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the HostnameUtil class, whose "match CN when no dNSName SAN exists" fallback is gated on Properties.isOverrideSetJSSEHOSTNAMECHECKCNFALLBACK, true, which returns true when the...
Improper Validation of Certificate with Host Mismatch
Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the HostnameUtil class, whose "match CN when no dNSName SAN exists" fallback is gated on Properties.isOverrideSetJSSEHOSTNAMECHECKCNFALLBACK, true, which returns true when the...
Improper Validation of Certificate with Host Mismatch
Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the HostnameUtil class, whose "match CN when no dNSName SAN exists" fallback is gated on Properties.isOverrideSetJSSEHOSTNAMECHECKCNFALLBACK, true, which returns true when the...
DEBIAN-CVE-2026-59638
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24...