27 matches found
GHSA-RXHG-VCWW-2MPW
creationtimestamp| type| source ---|---|--- 2026-08-21 15:31:46+00:00| seen| https://gist.github.com/alon710/e119e0e3dc0dc9f08b09963cc2e8d5fb...
CLEANSTART-2026-QB53329 Security fixes in local-static-provisioner-fips 2.7.0-r1
Package local-static-provisioner-fips version 2.7.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2025-52881, ghsa-cgrx-mc8f-2prm...
CLEANSTART-2026-AP22557 Security fixes in external-secrets-fips 2.7.0-r1
Package external-secrets-fips version 2.7.0-r1 fixes 5 vulnerabilities: CVE-2026-2303, ghsa-cp6g-7hqx-qxhp, ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g, ghsa-mpwr-8vm7-h73f...
CLEANSTART-2026-YF94250 Security fixes in k8ssandra-client-fips 0.5.0-r7
Package k8ssandra-client-fips version 0.5.0-r7 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)
Summary Remote Code Execution RCE in velocityjs v2.1.6 via property-read to the Function constructor. This bypasses the fix for GHSA-j658-c2gf-x6pq "Prototype Pollution in set path assignment" — that advisory blocked constructor/proto/prototype only in the set assignment handler set.cjs, but...
ROOT-APP-NPM-GHSA-5C6J-R48X-RMVQ GHSA-5c6j-r48x-rmvq in @rootio/serialize-javascript - Patched by Root
Root has patched GHSA-5c6j-r48x-rmvq in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: cert-manager, rancher-machine, gomplate, kine, chisel, flux-image-automation-controller, pulumi-kubernetes-operator, rootlesskit, docker-machine-driver-harvester, fscrypt, argo-cd, pulumi-language-dotnet, gitlab-runner, datadog-agent, wolfictl, docker-cli-buildx,...
Vim < 9.2.0597 Code Execution (GHSA-65p9-mwwx-7468)
The version of Vim installed on the remote host is prior to 9.2.0597. It is, therefore, affected by a vulnerability as referenced in the GHSA-65p9-mwwx-7468 advisory. - Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec as part of...
CLEANSTART-2026-EA72772 Security fixes for CVE-2024-7598, CVE-2025-13281, CVE-2025-1767, CVE-2025-47911, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, ghsa-4x4m-3c2p-qppc, ghsa-r6j8-c6r2-37rr applied in versions: 2.12.6-r0, 2.12.6-r1
Multiple security vulnerabilities affect the ip-masq-agent package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-R95X-QFJJ-FJJ2 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2026-45310
creationtimestamp| type| source ---|---|--- 2026-05-09 04:05:43+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-96ff-gc8g-wpvg...
GHSA-FW7P-63QQ-7HPR filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity
Point.MultiScalarMult failed to initialize its receiver. If the method was called on an initialized point that is not the identity point, MultiScalarMult produced an incorrect result. If the method was called on an uninitialized point, the behavior was undefined. In particular, if the receiver wa...
SQLite 3.49.1 < 3.50.3 Integer Overflow (GHSA-v2c8-vqqp-hv3g)
The version of SQLite installed on the remote host is prior to 3.50.3. It is, therefore, affected by a integer overflow vulnerability as referenced in GHSA-v2c8-vqqp-hv3g advisory. - An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array...
GHSA-2PG8-H2J6-28XM vulnerabilities
Vulnerabilities for packages: python...
GHSA-5QJR-CJ9F-PHRX vulnerabilities
Vulnerabilities for packages: python...
GHSA-QPX2-Q28H-GGCF vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-73W8-4H43-H886 vulnerabilities
Vulnerabilities for packages: mysql...
GHSA-39P8-4C2V-FRQ6 vulnerabilities
Vulnerabilities for packages: mysql...