24159 matches found
CVE-2026-34573 Parse Server: GraphQL complexity validator exponential fragment traversal DoS
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.68 and 9.7.0-alpha.12, the GraphQL query complexity validator can be exploited to cause a denial-of-service by sending a crafted query with binary fan-out fragment spreads...
CVE-2026-34363 Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribers
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.65 and 9.7.0-alpha.9, when multiple clients subscribe to the same class via LiveQuery, the event handlers process each subscriber concurrently using shared mutable objects...
GHSA-G2F6-PWVX-R275
creationtimestamp| type| source ---|---|--- 2026-03-31 13:19:01+00:00| seen| Telegram/jSTFa01DEWFRhQKHtf4fP3tqxxyDE1Jfuh4yALHVDvczs38...
CVE-2026-34937
creationtimestamp| type| source ---|---|--- 2026-03-31 11:14:22+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w37c-qqfp-c67f 2026-04-04 00:27:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimxzyujko2t 2026-04-04...
CVE-2026-3106
creationtimestamp| type| source ---|---|--- 2026-03-31 10:48:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midyuykuoa24 2026-03-31 11:17:40+00:00| seen| Telegram/-8jI6AiqCmQgWrggXH9YLwpKKzzq7by02yxwbxJ-KYwNVwI...
CVE-2026-5186
creationtimestamp| type| source ---|---|--- 2026-03-31 10:22:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midxggnifh2n...
GHSA-C4R5-FXQW-VH93
creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...
GHSA-P322-V6VW-VRQ9
creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...
GHSA-QH6H-P6C9-FF54
creationtimestamp| type| source ---|---|--- 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...
GHSA-43FC-JF86-J433
creationtimestamp| type| source ---|---|--- 2026-03-31 03:36:57+00:00| seen| https://gist.github.com/nathan815/a203abbe4dc9e08de6d9c9cf04900d0f 2026-03-31 04:27:44+00:00| seen| https://gist.github.com/nathan815/3b2baf96f65648664c6b5bb0a19da82c 2026-04-21 11:51:12+00:00| seen|...
CVE-2025-32957
creationtimestamp| type| source ---|---|--- 2026-03-31 01:17:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micyy2rkto2j 2026-03-31 01:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micz5zuvuo2h 2026-03-31 03:10:50+00:00| seen|...
CVE-2026-33977
creationtimestamp| type| source ---|---|--- 2026-03-31 00:30:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micwd33frk2i...
PT-2026-37384
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the Linux kernel where the ep free function in eventpoll.c may release the epi-ep eventpoll structure while it is still being accessed by another...
aws-c-event-stream 安全漏洞
aws-c-event-stream is a C language implementation library for the event stream protocol, open-sourced by Amazon Web Services - Labs. Versions of aws-c-event-stream prior to 0.6.0 contain security vulnerabilities. These vulnerabilities stem from out-of-bounds writing in the stream decoder componen...
CVE-2026-32794
creationtimestamp| type| source ---|---|--- 2026-03-30 22:26:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3micpglbkr62m 2026-03-31 00:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micunskdpe27...
CVE-2026-4257
creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3b722d27 2026-03-30 23:20:36+00:00| seen| Telegram/aYCyNSm85uFE8xgl3G3j-Sn1NnPkfaU1HaAlO581ff2GeJQ 2026-03-31 00:00:42+00:00| seen|...
GHSA-M983-V2FF-WQ65 LiveQuery protected field leak via shared mutable state across concurrent subscribers
Impact When multiple clients subscribe to the same class via LiveQuery, the event handlers process each subscriber concurrently using shared mutable objects. The sensitive data filter modifies these shared objects in-place, so when one subscriber's filter removes a protected field, subsequent...
CVE-2026-3775
creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224 2026-04-01 02:24:47+00:00| seen|...
CVE-2026-4425
creationtimestamp| type| source ---|---|--- 2026-03-30 16:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2pnbenz2g 2026-04-02 11:57:35+00:00| seen| https://bsky.app/profile/thecybermind.co/post/3mij5nyg3mq2e...