134 matches found
zenmap
zenmap sudo apt update sudo apt install gdebi sudo gdebi libffi63.2.1-9amd64.deb sudo gdebi python-gobject-22.28.6-13+b1amd64.deb sudo gdebi python-numpy1.16.2-1amd64.deb sudo gdebi python-cairo1.16.2-1+b1amd64.deb sudo gdebi python-gtk22.24.0-5.1+b1amd64.deb sudo gdebi...
ROOT-APP-NPM-CVE-2026-13697 CVE-2026-13697 in undici - Patched by Root
Root has patched CVE-2026-13697 in the undici package for Root:npm. Multiple fixed versions available...
spring-boot-cve-2022-22965
= Spring Framework 버전 재정의 쇼케이스 이 저장소는 Spring Boot 2.4 기반 애플리케이션에서 Spring Framework 버전을 재정의하는 방법을 보여줍니다. Spring Boot 2.4.x는 https://spring.io/projects/spring-bootsupportOSS 지원이 종료되었으며, 최신 버전은 2.4.13입니다. 이는 https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcementCVE-2022-22965에 취약한...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fixed a potential double-free in drmschedjobaddresvdependencies. When adding dependencies using drmschedjobadddependency, the function consumes the fence reference both in success and failure cases. In the latter case,...
[SECURITY] Fedora 44 Update: apache-ivy-2.6.0-2.fc44
Apache Ivy is a tool for managing recording, tracking, resolving and reporting project dependencies. It is designed as process agnostic and is not tied to any methodology or structure. while available as a standalone tool, Apache Ivy works particularly well with Apache Ant providing a number of...
[SECURITY] Fedora 43 Update: apache-ivy-2.6.0-2.fc43
Apache Ivy is a tool for managing recording, tracking, resolving and reporting project dependencies. It is designed as process agnostic and is not tied to any methodology or structure. while available as a standalone tool, Apache Ivy works particularly well with Apache Ant providing a number of...
CVE-2026-21753 HCL Hive is affected by multiple security vulnerabilities.
HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...
MINI-P9C8-MPJ5-57V8
Bulletin has no description...
ROOT-APP-PYPI-CVE-2026-8643 CVE-2026-8643 in pip - Patched by Root
Root has patched CVE-2026-8643 in the pip package for Root:PyPI. Multiple fixed versions available...
GO-2026-4529 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno, cloudbeat, security-profiles-operator, slsa-verifier, trivy, ratify, cloudbeat-fips, trivy-fips, kyverno-notation-aws, skaffold-fips, zot, trivy-operator, tekton-chains-fips, kyverno-fips, kyverno-notation-aws-fips, skaffold,...
GO-2026-5235 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is no longer just finding vulnerabilities. It ...
[SECURITY] Fedora 44 Update: composer-2.10.2-1.fc44
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
The vulnerability of the dependency management mechanism for HTTP/2 protocols in the libcurl library of the software tool for interacting with servers via cURL allows a attacker to cause a service failure.
The vulnerability of the dependency management mechanism for HTTP/2, as well as the libcurl library used in the cURL client software for interacting with servers, relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to caus...
[SECURITY] Fedora 44 Update: composer-2.10.1-1.fc44
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
CVE-2026-43965
Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::readfromdisc are passed without validation to paths.buildpackagespackage, whi...
CVE-2026-43965
Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::readfromdisc are passed without validation to paths.buildpackagespackage, whi...
EUVD-2026-33926
Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::readfromdisc are passed without validation to paths.buildpackagespackage, whi...
EEF-CVE-2026-43965 Path Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion
Summary Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::read\from\disc are passed without validation to...
CVE-2026-43965
Path traversal vulnerability in Gleam's dependency management allows arbitrary directory deletion via malicious build/packages/packages.toml content. Package keys read from build/packages/packages.toml by LocalPackages::readfromdisc are passed without validation to paths.buildpackagespackage, whi...