Lucene search
+L

2647 matches found

OSV
OSV
added 2026/09/04 12:00 a.m.2 views

OPENSUSE-SU-2026:11689-1 php-composer2-2.10.3-2.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-2.1 package on the GA media of openSUSE Tumbleweed...

7.7CVSS5.8AI score0.00409EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/03 11:22 a.m.7 views

EUVD-2026-70405

n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail v1 and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object carrying a path or href property, causing t...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 11:22 a.m.13 views

CVE-2026-85170

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 are vulnerable to local file read and SSRF through the Gmail (v1) and Brevo nodes. The root cause is that these nodes pass message content to the mail composer without verifying it is a string. An authenticated user able to run a workflow can sup...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/03 11:17 a.m.9 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: composer: composer-2.10.3-1.hum1 noarch composer-2.10.3-1.hum1.src src...

7.7CVSS5.9AI score0.00409EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/09/03 11:17 a.m.10 views

composer: Composer: Arbitrary code execution via malicious Perforce source URL

A flaw was found in Composer. A malicious dependency package from a custom Composer repository or an untrusted composer.lock file could exploit a vulnerability in how Composer handles Perforce source URLs. By setting source.type to perforce and source.url to an rsh: or jsh: P4PORT value, an...

7.7CVSS6.3AI score0.00409EPSS
SaveExploits1References9
OSV
OSV
added 2026/09/03 10:14 a.m.10 views

RHSA-2026:62803 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.1CVSS7AI score0.00798EPSS
SaveExploits0References61
OSV
OSV
added 2026/09/03 10:14 a.m.8 views

RHSA-2026:62753 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.1CVSS7AI score0.00798EPSS
SaveExploits0References61
OSV
OSV
added 2026/09/03 10:14 a.m.9 views

RHSA-2026:62754 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.1CVSS7AI score0.00798EPSS
SaveExploits0References61
RedHat Linux
RedHat Linux
added 2026/09/03 9:30 a.m.9 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.6CVSS6.7AI score0.00692EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.12 views

RHEL 9 : osbuild-composer (RHSA-2026:62803)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62803 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-84361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an...

7.7CVSS5.5AI score0.00409EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/09/02 7:24 p.m.7 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/09/02 5:13 p.m.9 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/09/02 5:12 p.m.8 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/09/02 7:19 a.m.10 views

CVE-2026-84361

A flaw was found in Composer. A malicious dependency package from a custom Composer repository or an untrusted composer.lock file could exploit a vulnerability in how Composer handles Perforce source URLs. By setting source.type to perforce and source.url to an rsh: or jsh: P4PORT value, an...

7.7CVSS6.3AI score0.00409EPSS
SaveExploits1References8
GithubExploit
GithubExploit
added 2026/09/02 5:07 a.m.27 views

Exploit for CVE-2026-84361

CVE-2026-84361: Composer’s P4PORT command execution PoC Engl...

7.7CVSS6AI score0.00409EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.13 views

RHEL 9 : osbuild-composer (RHSA-2026:62753)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62753 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References18
OSV
OSV
added 2026/09/02 12:00 a.m.6 views

UBUNTU-CVE-2026-84361

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

7.7CVSS5.9AI score0.00409EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2026/09/02 12:00 a.m.8 views

CVE-2026-84361

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

7.7CVSS5.9AI score0.00409EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.11 views

RHEL 9 : osbuild-composer (RHSA-2026:62754)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62754 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

7.5CVSS7.3AI score0.00798EPSS
SaveExploits0References18
Rows per page
Query Builder