16403 matches found
Fedora: Security Advisory (FEDORA-2026-7ffd130a98)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
A Survey of Web Application Security Tutorials
Developers rely on online tutorials to learn web application security, but tutorial quality varies. We reviewed 132 free security tutorials to examine topic coverage, authorship, and technical depth. Our analysis shows that most tutorials come from vendors and emphasize high-level explanations ov...
Malicious code in @mesh-helpers/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7b29c037fd6e505ddbd1506f78292b2b69aef43c5750ef655bb27d5dd9986e The package @mesh-helpers/common was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-2021 Malicious code in @mesh-helpers/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7b29c037fd6e505ddbd1506f78292b2b69aef43c5750ef655bb27d5dd9986e The package @mesh-helpers/common was found to contain malicious code. Source: ossf-package-analysis...
@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by unknown CVE via @pdfme/common (5.5.8)
@pdfme/common NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/common and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: unknown CVE Source advisory: SNYK:JS-PDFMECOMMON-15746945...
@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by unknown CVE via @pdfme/common (5.5.8)
@pdfme/common NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/common and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: unknown CVE Source advisory: GHSA-PGX6-7JCQ-2QFF...
@cesarechazu/directus-extension-generate-pdf (1.0.6) potentially affected by CVE-2026-82866 via @pdfme/common (5.5.8)
@pdfme/common NPM version 5.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on @pdfme/common and may be impacted: - @cesarechazu/directus-extension-generate-pdf 1.0.6 Source cves: CVE-2026-82866 Source advisory: OSV:GHSA-PGX6-7JCQ-2QFF...
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...
GHSA-394X-VWMW-CRM3 AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...
CVE-2026-4505
creationtimestamp| type| source ---|---|--- 2026-03-20 19:16:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4505...
CVE-2026-4226
creationtimestamp| type| source ---|---|--- 2026-03-20 19:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj77qw5fy2w...
EUVD-2026-13598
A vulnerability was found in Yi Technology YI Home Camera 2 2.1.120171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attack...
CVE-2026-23273
In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlancommonnewlink error path valis reported that a race condition still happens after my prior patch. macvlancommonnewlink might have made @dev visible before detecting an error, and its...
CVE-2026-29057 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
PT-2026-83743
Name of the Vulnerable Software and Affected Versions @pdfme/common versions prior to 5.5.10 Description An issue exists in the getB64BasePdf function where it fetches arbitrary URLs using fetch without proper validation when the basePdf variable is a non-data-URI string and window is defined. An...
UBUNTU-CVE-2026-3842
A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpuphysicalmemorymap returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in...
PT-2026-29174
Summary The getB64BasePdf function in @pdfme/common fetches arbitrary URLs via fetch without any validation when basePdf is a non-data-URI string and window is defined. An attacker who can control the basePdf field of a template e.g., through a web application that accepts user-supplied templates...
CGA-3HFJ-WW8C-MH3M
Bulletin has no description...
httpd: Apache HTTP Server: CGI environment variable override
A configuration override flaw has been discovered in the apache HTTP server. Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server...
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid DNS identifiers, causing NAMECONSTRAINTScheckCN to skip validation. However,...