131808 matches found
CVE-2026-44617 Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of...
EUVD-2026-51162
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of...
CVE-2026-44617 Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867
LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filter escaping, leaving special filter characters insufficiently escaped. This is an incomplete fix of...
CVE-2026-44616 Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction
LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticated attacker to inject LDAP filter syntax through the user-search endpoint and potentially expose directory...
EUVD-2026-50473
Flyto2 Core: Arbitrary file write via image.download and other file-writing modules...
EUVD-2026-50489
MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding Host/Origin protection...
EUVD-2026-50565
OliveTin: StartActionAndWait Endpoints Bypass logs Permission and Return Action Output...
ROOT-APP-NPM-GHSA-CMWH-PVXP-8882 GHSA-cmwh-pvxp-8882 in @rootio/dompurify - Patched by Root
Root has patched GHSA-cmwh-pvxp-8882 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in @rootio/dompurify - Patched by Root
Root has patched CVE-2026-49978 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.26. Security issues fixed: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-10822: key record using PRIVATEDNS algorithm may lead to unexpected exit bsc1271983. CVE-2026-11331: potential wildcard...
ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in @rootio/webpack-dev-server - Patched by Root
Root has patched CVE-2026-6402 in the @rootio/webpack-dev-server package for Root:npm. Multiple fixed versions available...
RHSA-2026:48606 Red Hat Security Advisory: hplip security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47739 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47722 Red Hat Security Advisory: grafana security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47721 Red Hat Security Advisory: grafana-pcp security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47719 Red Hat Security Advisory: golang security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47716 Red Hat Security Advisory: grafana-pcp security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:47714 Red Hat Security Advisory: grafana security, bug fix, and enhancement update
Bulletin has no description...