1912 matches found
Incomplete Cleanup
Overview Affected versions of this package are vulnerable to Incomplete Cleanup in the diskStorage function. An attacker can exhaust disk space by repeatedly initiating and aborting multipart uploads, causing orphaned partial files to accumulate on disk. Remediation A fix was pushed into the mast...
Leak in WASIp1 `fd_renumber` implementation
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3p27-qvp9-27qf For more information see the GitHub-hosted security advisory...
CVE-2026-46607
creationtimestamp| type| source ---|---|--- 2026-06-13 13:43:13+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-9837-48hr-q32j...
CVE-2026-46608
creationtimestamp| type| source ---|---|--- 2026-06-13 13:42:55+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-87qc-fj39-wccr...
GHSA-6JV9-X5W9-2CCM vulnerabilities
Vulnerabilities for packages: tez, celeborn, thingsboard, management-api-for-apache-cassandra-5.0...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack inadequate validation of symlink targets in the file access process. An attacker can access or modify files outside of the intended user scope by creating or leveraging symbolic links that point to locations beyond the...
CVE-2026-46672
creationtimestamp| type| source ---|---|--- 2026-06-12 20:16:24+00:00| published-proof-of-concept| https://github.com/actualbudget/actual/security/advisories/GHSA-7gh7-258j-4mpq...
Missing Authorization
Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to Missing Authorization via the buildSchema controller. An attacker can modify schema metadata and automation trigger output schema by sending unauthenticated requests to the affected endpoint,...
GHSA-7X6F-897Q-8H7J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-855R-9WVC-25GH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-68C4-77CF-437J vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-33760
creationtimestamp| type| source ---|---|--- 2026-06-11 19:53:35+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9c59-2mvc-vfr8 2026-07-01 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpld4xhnma2e...
GHSA-3VRV-754Q-MQ3J vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-54015
creationtimestamp| type| source ---|---|--- 2026-06-11 19:05:34+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4r4w-2wgp-w7cj...
CVE-2026-54013
creationtimestamp| type| source ---|---|--- 2026-06-11 19:02:12+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-v2qm-5wxj-qhj7...
CVE-2026-54010
creationtimestamp| type| source ---|---|--- 2026-06-11 18:57:21+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vrhc-3fr6-pc3c 2026-07-18 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwsjmkf4t2m...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the MVG decoder when processing a crafted file due to a missing depth or visited-set check. An attacker can cause a denial of service by supplying a specially crafted MVG file that triggers a stack overflow...
CVE-2026-50023
creationtimestamp| type| source ---|---|--- 2026-06-09 23:27:47+00:00| published-proof-of-concept| https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-c6mh-fpjc-4pr3 2026-07-16 16:25:06+00:00| seen| https://bsky.app/profile/gamer191.bsky.social/post/3mqrnkyqtkc27 2026-07-16 16:25:06+00:00|...
