13341 matches found
CVE-2026-55833 Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded maxHeaderSize and marked the frame truncated in...
CVE-2026-55833
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded maxHeaderSize and marked the frame truncated in...
CVE-2026-55833
Netty (network application framework) contains a vulnerability in SPDY header decoding. Prior to versions 4.1.136.Final and 4.2.16.Final, the zlib-compressed header blocks may continue inflating after the header parser exceeds maxHeaderSize, allowing a remote peer to send a small compressed HEADE...
CVE-2026-55831 Netty SPDY SETTINGS frame count materializes unbounded settings map
Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in...
EUVD-2026-42360
Composer: Path traversal in package bin field lets dependencies chmod arbitrary host files...
EUVD-2026-42301
js-yaml: YAML merge-key chains can force quadratic CPU consumption...
BIT-ARGO-CD-2026-45737 Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotation because HideSecretDatatarget, live, ... does...
CVE-2026-44229
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 and 6.0.0 and above, prior to both 5.0.10 and 6.0.3 contain a Cross-Site Scripting XSS vulnerability where uploaded content is served inline rather than as an attachment. An authenticated user who can upload...
CVE-2026-57308 Apache Syncope: SQL injection vulnerability in Audit Events search
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort parameters. This issue affects Apache Syncope: fr...
CVE-2026-46410
FileBrowser Quantum exposes sensitive share information (source and path) to unauthenticated users. Affected versions are prior to 1.3.2-stable and 1.4.1-beta. The issue is fixed in 1.3.2-stable and 1.4.1-beta. No public workarounds are documented in the provided sources. Remediation: upgrade to ...
ROOT-APP-NPM-CVE-2025-27789 CVE-2025-27789 in @rootio/babel__helpers - Patched by Root
Root has patched CVE-2025-27789 in the @rootio/babelhelpers package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-71176 CVE-2025-71176 in rootio-pytest - Patched by Root
Root has patched CVE-2025-71176 in the rootio-pytest package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-0235 CVE-2022-0235 in @rootio/node-fetch - Patched by Root
Root has patched CVE-2022-0235 in the @rootio/node-fetch package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-1527 CVE-2026-1527 in @rootio/undici - Patched by Root
Root has patched CVE-2026-1527 in the @rootio/undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-22036 CVE-2026-22036 in @rootio/undici - Patched by Root
Root has patched CVE-2026-22036 in the @rootio/undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-46604 CVE-2023-46604 in io.root.org.apache.activemq:activemq-client - Patched by Root
Root has patched CVE-2023-46604 in the io.root.org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-49476 CVE-2026-49476 in rootio-soupsieve - Patched by Root
Root has patched CVE-2026-49476 in the rootio-soupsieve package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-49477 CVE-2026-49477 in rootio-soupsieve - Patched by Root
Root has patched CVE-2026-49477 in the rootio-soupsieve package for Root:PyPI. Multiple fixed versions available...