35342 matches found
GHSA-7XGM-5PRM-V5GC vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2026-47427: NULL Pointer Dereference
GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...
PT-2026-65504
Name of the Vulnerable Software and Affected Versions GitHub MCP Server versions prior to 1.1.0 Description A nil pointer dereference occurs in the CompletionsHandler function within pkg/github/server.go when processing a completion/complete request. The issue arises because the server accesses t...
cicd-sensor rules/v20260722-001
🚧 Pre-release: Active development. cicd-sensor is currently in pre-release and under active development. Feedback is very welcome. cicd-sensor Think EDR, but for CI/CD Pipelines. Open-source eBPF-powered runtime security sensor for GitHub Actions and GitLab CI/CD. → Full documentation Demo ---...
CVE-2026-9830
creationtimestamp| type| source ---|---|--- 2026-07-27 21:00:03+00:00| seen| Telegram/jZonNK9LGMSvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI 2026-07-27 21:00:03+00:00| seen| Telegram/MNUQPIGpAGeGg3WQfZgMMHal6jpwzokF-mfI2PhU7te8xo 2026-07-27 21:00:03+00:00| seen| https://t.me/GithubRedTeam/95407 2026-07-2...
GHSA-MFG7-5GFP-C4W3 vulnerabilities
Vulnerabilities for packages: seata, airbyte-server, akhq, kafka-bridge, floci, commercial-elasticsearch, request-9047-keycloak-fips, keycloak, spark, apache-pulsar-fips, kayenta-fips, elasticsearch, apicurio-registry-fips, camunda-zeebe, metabase, druid, kayenta, airbyte-server-fips, apache-hop,...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: sqlpad, saf...
GHSA-MH99-V99M-4GVG vulnerabilities
Vulnerabilities for packages: nextcloud-server, prism, renovate, langfuse, thingsboard, jupyter-base-notebook, lerna, pulumi, rancher-api-ui, argo-workflows, npm, saf, kubeflow-katib, sqlpad, opensearch-dashboards, ts-patch, serve...
ROOT-APP-NPM-GHSA-9GGV-8W38-R7PM GHSA-9ggv-8w38-r7pm in @rootio/typeorm - Patched by Root
Root has patched GHSA-9ggv-8w38-r7pm in the @rootio/typeorm package for Root:npm. Multiple fixed versions available...
PT-2026-65351
Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: spegel-fips, kubo, ipfs-cluster-fips, rke2-runtime, rke2-runtime-fips, ipfs-cluster, spegel, k3s...
GHSA-P6PH-3JX2-3337
creationtimestamp| type| source ---|---|--- 2026-07-25 16:31:29+00:00| seen| https://gist.github.com/alon710/7ac48e75205a16d278d7edd78b6790dd 2026-10-12 18:55:14+00:00| seen| https://infosec.exchange/users/cve/statuses/117429457016187919...
CGA-6W2Q-49J7-CV62
Bulletin has no description...
GHSA-Q53C-4PRM-W95Q
creationtimestamp| type| source ---|---|--- 2026-07-25 11:31:34+00:00| seen| https://gist.github.com/alon710/7d82b3a29a466133e3b991f0cb56fd86...
GHSA-JVXP-QMX7-GJPX
creationtimestamp| type| source ---|---|--- 2026-07-25 04:31:18+00:00| seen| https://gist.github.com/alon710/5da01f85fee825f05b5c606f0085a6c9...
GHSA-8Q49-2H5H-434X
creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...
openSUSE 16 Security Update : gh (openSUSE-SU-2026:21432-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21432-1 advisory. Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version...
CVE-2026-62323
creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:05+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp...