5024 matches found
GHSA-HPCC-26XQ-25FV vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, opensearch, spark-fips, apache-hop, strimzi-kafka-operator-fips, spark, camunda, apache-hop-fips, camunda-zeebe, opensearch-fips...
ROOT-APP-NPM-GHSA-3875-8GCX-7V46 GHSA-3875-8gcx-7v46 in @rootio/n8n - Patched by Root
Root has patched GHSA-3875-8gcx-7v46 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...
GHSA-6M8F-W97W-99H7
creationtimestamp| type| source ---|---|--- 2026-07-27 11:51:46+00:00| seen| https://gist.github.com/Correctover/e98078382935c28832271fc5a8e21606...
GHSA-44JH-J22R-33WQ
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:30+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-27 00:01:06+00:00| seen| https://t.me/EchelonEyes/1200 2026-07-28 01:00:05+00:00| published-proof-of-concept| https://t.me/EchelonEyes/1200 2026-07-29 00:00:52+00:00|...
GHSA-2RMR-XW8M-22Q9
creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:19+00:00| seen| https://t.me/EchelonEyes/2145 2026-07-27 00:00:55+00:00| seen| https://t.me/EchelonEyes/2145 2026-07-28 00:00:31+00:00| published-proof-of-concept| https://t.me/EchelonEyes/2145...
GHSA-GPFC-H59V-63CV
creationtimestamp| type| source ---|---|--- 2026-07-25 17:51:14+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrigld2ef32d...
GHSA-3R53-75J5-3G7J
creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...
GHSA-RX9V-2FJR-MHX5 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GHSA-3PJW-73GF-8QR5 vulnerabilities
Vulnerabilities for packages: opensearch-fips, apache-nifi, nacos-docker, sonarqube, opensearch, lmcache-cuda-12.8, flyway, spark, elasticsearch-fips, akhq, wso2is, elasticsearch, jenkins...
GHSA-3WP3-XXJ9-5JQQ
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:49+00:00| seen| https://gist.github.com/alon710/9bcf9d1bd3d7650ebf44f14eff2dc08a...
@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)
react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...
@20206205tech/nestjs-auth (>=1.0.0, <=1.4.1), @20206205tech/nestjs-common (>=0.3.0, <=0.11.4) +726 more potentially affected by CVE-2026-73643 via js-yaml (>=5.0.0, <=5.2.1)
js-yaml NPM version =5.0.0, =1.0.0, =0.3.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.1.0, =16.21.1, =1.9.29, =6.29.8, =3.4.141, =7.1.20, =2.2.62, =1.5.3, =1.5.6 and more Source cves: CVE-2026-73643 Source advisory: OSV:GHSA-PM4M-PH32-GHV5...
@aaravpos/appointment-barber-booking (>=1.0.0, <=4.0.5), @aaravpos/appointment-booking-plugin (>=1.0.1, <=7.0.6) +271 more potentially affected by unknown CVE via react-router (>=7.12.0, <=7.18.1)
react-router NPM version =7.12.0, =1.0.0, =1.0.1, =0.0.9-alpha-20260107202750-16b04dcbaa92c7fc2bbb580dbc1da723c76a5225, =1.3.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.0, =3.2.0-ultramodern.127 and more Source...
Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)
Summary Remote Code Execution RCE in velocityjs v2.1.6 via property-read to the Function constructor. This bypasses the fix for GHSA-j658-c2gf-x6pq "Prototype Pollution in set path assignment" — that advisory blocked constructor/proto/prototype only in the set assignment handler set.cjs, but...
@access-dlsu/leapify (>=0.260531.1, <=0.260608.1), @agent-native/core (>=0.26.5, <=0.157.8) +224 more potentially affected by CVE-2026-67327 via better-auth (>=1.1.3, <=1.6.21)
better-auth NPM version =1.1.3, =0.260531.1, =0.26.5, =0.2.9, =0.3.3, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =2026.324.0-canary.0, =0.0.2, =2026.501.0, =2026.501.0, =0.1.3, =0.3.1 and more Source cves: CVE-2026-67327 Source advisory: OSV:GHSA-QQ9H-G4JM-XGF3...
GHSA-8R6M-32JQ-JX6Q vulnerabilities
Vulnerabilities for packages: kibana, thingsboard-fips, jitsucom-jitsu, langfuse, langfuse-fips, tileserver-gl-fips, tileserver-gl...
GHSA-GCJF-9MGH-3P7G vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, druid, zipkin, tez, wazuh-indexer, kafbat-ui-fips, spark, kafbat-ui, thingsboard, airbyte-server, airbyte-server-fips, flyway, kayenta-fips, knative-kafka-broker-fips, kayenta, elasticsearch-fips, akhq, grpc-java-fips, neo4j, opensearch-fips,...
