52799 matches found
ROOT-OS-DEBIAN-11-CVE-2026-32776 CVE-2026-32776 in expat - Patched by Root
Root has patched CVE-2026-32776 in the expat package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-50219 CVE-2026-50219 in expat - Patched by Root
Root has patched CVE-2026-50219 in the expat package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-59780
Apache CloudStack 's LDAP authentication plugin exposes sensitive LDAP provider configuration details through the listLdapConfigurations API, which is accessible by default to all standard user roles. This affects versions 4.2.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 . An attacker with ...
CVE-2026-70654 libvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM images can trigger a max/min error in vipssourcereadtomemory in libvips/iofuncs/source.c. The...
CVE-2026-72817 affecting package gh for versions less than 2.97.0-1
CVE-2026-72817 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...
EUVD-2026-41150
Wagtail: Reflected XSS in dynamic image URL generator view...
EUVD-2026-41146
Wagtail: Denial of service via unbounded filter specs in the image preview...
CVE-2026-53584 libgit2: Submodule path traversal
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affect...
EUVD-2026-44804
NocoBase backup restore schema name allows command injection...
CVE-2026-63379 Libevent: HTTP Header smuggling
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and merges them into request headers. The fix introduces evhttpparseheadersimpl and a temporary trailer header list. An unauthenticated remote...
CVE-2026-73253 Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...
CVE-2026-73259
CVE-2026-73259 is a reflected cross-site scripting (XSS) vulnerability in Mongoose , an embedded web server and network library, affecting versions prior to 7.22 . The flaw resides in the mg_http_serve_dir() and listdir() functions in src/http.c, which insert a percent-decoded request URI into th...
CVE-2026-73258
Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mghttpnextmultipart in src/http.c. The loops comparing sb and sb + 1, and sh2 and sh2 + 1, use an incorrect AND condition and stop...
ROOT-OS-DEBIAN-11-CVE-2025-5318 CVE-2025-5318 in libssh - Patched by Root
Root has patched CVE-2025-5318 in the libssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-5372 CVE-2025-5372 in libssh - Patched by Root
Root has patched CVE-2025-5372 in the libssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in libheif - Patched by Root
Root has patched CVE-2025-68431 in the libheif package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root
Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7598 CVE-2026-7598 in libssh2 - Patched by Root
Root has patched CVE-2026-7598 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...