36492 matches found
GO-2026-6026 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip) in github.com/filebrowser/filebrowser
File Browser: Archive builder turns backslash filenames into path traversal zip-slip in github.com/filebrowser/filebrowser...
GHSA-5GVW-P9QM-JGWH vulnerabilities
Vulnerabilities for packages: flyway, tez, zookeeper, scala, apicurio-registry, gradle, opensearch, keycloak, spark, confluent-kafka, strimzi-kafka-operator, sonarqube, cassandra, logstash, ruby3.2-jrjackson, druid, apache-nifi, ruby3.3-jrjackson, apache-nifi-registry, trino, akhq,...
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date, including those...
GHSA-JJJ6-MW9F-P565 vulnerabilities
Vulnerabilities for packages: superset, lmcache-cuda-12.8, text-generation-inference, openstack-horizon-2026.1, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, mlflow, superset-fips, label-studio,...
PT-2026-64055
These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-58436
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:50+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fw57-jgch-pgf3...
CVE-2026-44788
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6c8g-7p36-r338...
CVE-2026-58425
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:34+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-vxv2-8j6r-pcpg...
CVE-2026-58507
creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:30+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-p4mj-98mv-xq26...
CVE-2026-58314
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:23+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-2fcr-jfvc-vgg2...
CVE-2026-58510
creationtimestamp| type| source ---|---|--- 2026-07-21 22:35:09+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q423-49rw-g9mh 2026-08-14 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/gitea-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...
CVE-2026-47690
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690
MeltanoHub (hub.meltano.com) had a vulnerability in versions prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173, where a pull_request_target workflow could exfiltrate the repository GITHUB_TOKEN with write permissions. The issue was fixed by the commit 923820de8f64d753951fbbd54f7282a3d5f751...
EUVD-2026-46420
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
CVE-2026-47690 MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow
MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923820de8f64d753951fbbd54f7282a3d5f75173 were vulnerable to exfiltration of GITHUBTOKEN with write permissions to the repository. The vulnerable workflow used...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through the UpdatePullRequest function. An attacker can cause unauthorized modifications to private repository branches by exploiting a logic flaw in token scope validation during pull request updates from a publ...