30605 matches found
CVE-2026-58507
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:30+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-p4mj-98mv-xq26...
CVE-2026-58314
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:23+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2fcr-jfvc-vgg2...
CVE-2026-58510
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q423-49rw-g9mh...
CVE-2026-47690
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690
MeltanoHub (hub.meltano.com) had a vulnerability in versions prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173, where a pull_request_target workflow could exfiltrate the repository GITHUB_TOKEN with write permissions. The issue was fixed by the commit 923820de8f64d753951fbbd54f7282a3d5f751...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-57894
creationtimestamp| type| source ---|---|--- 2026-07-21 20:35:06+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-82f7-87hm-852x...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: promitor, dotnet, dotnet-sdk, dotnet-bootstrap, powershell...
GHSA-CVVH-RHRC-WG4Q vulnerabilities
Vulnerabilities for packages: promitor, dotnet, dotnet-sdk, dotnet-bootstrap, powershell...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: tileserver-gl, kubeflow-centraldashboard, kubeflow-pipelines, langfuse, json-server, sqlpad, argo-workflows...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: dotnet, powershell, promitor, dotnet-sdk...
GHSA-JPW9-PFVF-9F58 vulnerabilities
Vulnerabilities for packages: litellm, semgrep...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: redisinsight, kibana, sqlpad...
ROOT-APP-NPM-GHSA-2CM2-M3W5-GP2F GHSA-2cm2-m3w5-gp2f in @rootio/vm2 - Patched by Root
Root has patched GHSA-2cm2-m3w5-gp2f in the @rootio/vm2 package for Root:npm. Multiple fixed versions available...
GHSA-6R8X-57C9-28J4
creationtimestamp| type| source ---|---|--- 2026-07-21 10:31:21+00:00| seen| https://gist.github.com/alon710/8369d28698d5eaa2f4badffaca60e4b4...
CLEANSTART-2026-ZJ21676 Security fixes for CVE-2021-43616, CVE-2026-11525, CVE-2026-12151, CVE-2026-23745, CVE-2026-23950, CVE-2026-24001, CVE-2026-25547, CVE-2026-26960, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-31802, CVE-2026-45149, CVE-2026-53655, CVE-2026-6733, CVE-2026-9496, CVE-2026-9679, ghsa-35p6-xmwp-9g52, ghsa-3ppc-4f35-3m26, ghsa-83g3-92jg-28cx, ghsa-g8m3-5g58-fq7m, ghsa-jxxr-4gwj-5jf2, ghsa-p88m-4jfj-68fv, ghsa-qffp-2rhf-9h96, ghsa-vxpw-j846-p89q applied in versions: 11.10.0-r1, 11.10.0-r2, 11.11.0-r0, 11.11.0-r1, 11.11.0-r2, 11.14.0-r0, 11.14.0-r2, 11.14.0-r3, 11.17.0-r1, 11.17.0-r2, 11.7.0-r0, 11.8.0-r0, 8.1.4-r0
Multiple security vulnerabilities affect the npm package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LB41442 Security fixes for CVE-2021-0341, CVE-2022-1471, CVE-2023-3635, CVE-2025-67735, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-44249, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673, CVE-2026-45674, CVE-2026-47244, CVE-2026-47691, CVE-2026-48043, CVE-2026-50010, CVE-2026-50020, CVE-2026-50560, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-38f8-5428-x5cv, ghsa-3cqm-mf7h-prrj, ghsa-3qp7-7mw8-wx86, ghsa-45q3-82m4-75jr, ghsa-563q-j3cm-6jxm, ghsa-57rv-r2g8-2cj3, ghsa-5jmj-h7xm-6q6v, ghsa-5pvg-856g-cp85, ghsa-5x3r-wrvg-rp6q, ghsa-676x-f7gg-47vc, ghsa-72hv-8253-57qq, ghsa-84h7-rjj3-6jx4, ghsa-c2gf-v879-257j, ghsa-c653-97m9-rcg9, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-hgj6-7826-r7m5, ghsa-hvcg-qmg6-jm4c, ghsa-j3rv-43j4-c7qm, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-mjmj-j48q-9wg2, ghsa-pwqr-wmgm-9rr8, ghsa-rmj7-2vxq-3g9f, ghsa-v8h7-rr48-vmmv, ghsa-w33c-445m-f8w7, ghsa-w573-9ffj-6ff9, ghsa-w9fj-cfpg-grvv, ghsa-x4gw-5cx5-pgmh, ghsa-xmv7-r254-6q78, ghsa-xxqh-mfjm-7mv9 applied in versions: 3.3.0-r1, 3.3.0-r2
Multiple security vulnerabilities affect the s3proxy package. These issues are resolved in later releases. See references for individual vulnerability details...