137084 matches found
EUVD-2026-70219
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
GHSA-5JGF-P345-68V8 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Impact fast-uri canonicalizes a host to its ASCII form only when the input carries an explicit scheme. When resolve resolves a scheme-relative reference //host/ against a scheme-bearing base, it still emits the host verbatim even though the effective scheme is known, so re-parsing the resolved UR...
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Impact fast-uri canonicalizes a host to its ASCII form only when the input carries an explicit scheme. When resolve resolves a scheme-relative reference //host/ against a scheme-bearing base, it still emits the host verbatim even though the effective scheme is known, so re-parsing the resolved UR...
CLSA-2026-1788362569 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 26 org.springframework packages to address 1 CVE. Fixed in 6.1.4-tuxcare.3...
CLSA-2026-1788361406 TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1...
CLSA-2026-1788360559 TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1...
GHSA-C59Q-G84Q-2GJ5 pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph
Summary The virtual store linker constructs package installation directories using path.joinmodules, pkgName where pkgName is extracted from lockfile packages keys via dp.parsedepPath.name without validation. A crafted pnpm-lock.yaml with traversal sequences in depPath keys e.g.,...
CLSA-2026-1788357718 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.3...
CLSA-2026-1788355153 TuxCare security update for 3 packages (3 CVEs)
TuxCare rebuilt 3 packages to address 3 CVEs. Fixed in 3.2.0-tuxcare.5...
CLSA-2026-1788349507 TuxCare security update for io.airlift:aircompressor (1 CVE)
TuxCare rebuilt io.airlift:aircompressor to address 1 CVE. Fixed in 0.20-tuxcare.1...
CLSA-2026-1788349374 TuxCare security update for dnsjava:dnsjava (1 CVE)
TuxCare rebuilt dnsjava:dnsjava to address 1 CVE. Fixed in 3.5.2-tuxcare.1...
CLSA-2026-1788349330 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.29-tuxcare.9...
CLSA-2026-1788348414 TuxCare security update for twig/twig (1 CVE)
TuxCare rebuilt twig/twig to address 1 CVE. Fixed in v1.44.8-p2+tuxcare...
CLSA-2026-1788348298 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.14.2-tuxcare.2...
ROOT-OS-DEBIAN-12-CVE-2026-34543 CVE-2026-34543 in openexr - Patched by Root
Root has patched CVE-2026-34543 in the openexr package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1788347890 TuxCare security update for aiohttp (1 CVE)
TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.5.post11+tuxcare...
CLSA-2026-1788345202 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 4.0.2-tuxcare.1...