1912 matches found
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the selector lexer process. An attacker can cause a panic and potentially disrupt service availability by providing a quoted string with a trailing backslash. Remediation There is no fixed version...
GHSA-V2J6-3Q6Q-GM3G vulnerabilities
Vulnerabilities for packages: expat...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the unauthenticated router-key and mcp-init-host paths. An attacker can gain unauthorized access or bypass authentication controls by sending crafted requests to these endpoints. Remediation Upgrade...
External Control of File Name or Path
Overview Affected versions of this package are vulnerable to External Control of File Name or Path in the database import process. An attacker can overwrite arbitrary files on the host by manipulating Xray configuration values stored in the database, potentially leading to code execution and...
CVE-2026-53541
creationtimestamp| type| source ---|---|--- 2026-06-24 18:35:02+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-prj9-97mp-mwh2...
PT-2026-53648
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4ch3-9j33-3pmj For more information see the GitHub-hosted security advisory...
CGA-4M99-CC4H-5MGR
Bulletin has no description...
GHSA-4XGF-CPJX-PC3J vulnerabilities
Vulnerabilities for packages: airflow, prefect-fips, vllm-cuda-13.2, tritonserver-backend-vllm-cuda-12.9, semgrep, airflow-core, prefect, azureml-inference-server-http, vllm-openai-cuda-13.0, tritonserver-backend-vllm-cuda-13.0, mcp-atlassian, open-webui, litellm,...
GHSA-V3F4-W7R7-V3HM
creationtimestamp| type| source ---|---|--- 2026-06-22 05:11:16+00:00| seen| https://gist.github.com/alon710/c55617deed0f6aa3ac7d480b01fa4253...
CVE-2026-44179
creationtimestamp| type| source ---|---|--- 2026-06-21 19:03:12+00:00| published-proof-of-concept| https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx...
UNIX Symbolic Link (Symlink) Following
Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the CRI checkpoint restore plugin due to improper validation of symlinked paths. An attacker can access arbitrary files on the host by crafting a malicious checkpoint image and leveraging the...
Improper Handling of Case Sensitivity
Overview @microsoft/kiota-http-fetchlibrary is an implementation using the Fetch API to make requests. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity via the executeWithRedirect redirect handling in redirectHandlerOptions.ts. An attacker can capture...
CVE-2026-55691
creationtimestamp| type| source ---|---|--- 2026-06-19 18:22:24+00:00| published-proof-of-concept| https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-7h5p-637f-jfr7...
CVE-2026-55446
creationtimestamp| type| source ---|---|--- 2026-06-19 13:09:48+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-qwqc-p3q8-wcg9...
CVE-2026-55770
creationtimestamp| type| source ---|---|--- 2026-06-19 11:28:09+00:00| published-proof-of-concept| https://github.com/openbao/openbao/security/advisories/GHSA-6mwx-4547-5vc9...
CVE-2026-55195
creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:20+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-gjrg-mpp7-g774 2026-07-08 22:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66cvk66i27...
CVE-2026-55206
creationtimestamp| type| source ---|---|--- 2026-06-19 09:32:10+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-h4gh-22qq-72r7 2026-07-08 22:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq66rc3cyn2i...
CVE-2026-23879
creationtimestamp| type| source ---|---|--- 2026-06-19 09:31:59+00:00| published-proof-of-concept| https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7 2026-06-24 22:16:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp2wxlnzkj2d 2026-06-24 23:14:35+00:00|...