org.webjars.npm:github-com-auth0-angular-auth0 (3.0.0), org.webjars.npm:github-com-skiddoo-angular-lock (2.0.3) potentially affected by CVE-2026-107371 via org.webjars.npm:auth0-js (9.28.0)

org.webjars.npm:auth0-js MAVEN version 9.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:auth0-js and may be impacted: - org.webjars.npm:github-com-auth0-angular-auth0 3.0.0 - org.webjars.npm:github-com-skiddoo-angular-lock 2.0.3...

GO-2026-5772 Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon

Algernon: handler.lua discovery walks parent directories above the server root in github.com/xyproto/algernon...

PT-2026-52512

Name of the Vulnerable Software and Affected Versions pnpm versions prior to 10.33.4 pnpm versions prior to 11.0.7 Description A flaw exists where the package manager does not store the hash of dependencies sourced from codeload.github.com in the lockfile. Consequently, a compromised server or...

CVE-2026-37572

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:10+00:00| seen| https://gist.github.com/sgInnora/5aa1682c359a4f4ced53fc2408936e82...

GO-2026-4829 NATS Server panic via malicious compression on leafnode port in github.com/nats-io/nats-server

NATS Server panic via malicious compression on leafnode port in github.com/nats-io/nats-server...

GO-2025-4088 sqls-server/sqls is vulnerable to command injection in the config command in github.com/sqls-server/sqls

sqls-server/sqls is vulnerable to command injection in the config command in github.com/sqls-server/sqls...

org.webjars.npm:github-com-xdan-datetimepicker (2.5.20), org.webjars.npm:jquery-datetimepicker (>=2.5.4, <=2.5.21) potentially affected by CVE-2024-57063 via org.webjars.npm:php-date-formatter (1.3.6)

org.webjars.npm:php-date-formatter MAVEN version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:php-date-formatter and may be impacted: - org.webjars.npm:github-com-xdan-datetimepicker 2.5.20 - org.webjars.npm:jquery-datetimepick...

GO-2022-0360 Ambiguous OCI manifest parsing in github.com/containerd/containerd

Ambiguous OCI manifest parsing in github.com/containerd/containerd...

DEBIAN-CVE-2016-2562

The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate...