27793 matches found
elemeno-ai-sdk (>=0.0.5, <=0.0.20), foresthog (>=0.9.0, <=1.3.6) +7 more potentially affected by CVE-2026-69097 via gitpython (2.1.1)
gitpython PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - elemeno-ai-sdk =0.0.5, =0.9.0, =0.1.0, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.4, =1.0.10 Source cves: CVE-2026-69097 Source advisory:...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-69097 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-69097 Source advisory: OSV:GHSA-3RP5-JJMW-4WV2...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-69097 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-69097 Source advisory: OSV:GHSA-3RP5-JJMW-4WV2...
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
GHSA-P2F4-R6V6-J797 electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
Summary In electron-builder's builder-util-runtime package, the HTTP redirect handler HttpExecutor.prepareRedirectUrlOptions only stripped a credential header whose key string matched exactly lowercase "authorization". Other credential-bearing headers — most notably PRIVATE-TOKEN used by GitLab's...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-67322 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-67322 Source advisory: OSV:GHSA-RWJ8-PGH3-R573...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-67322 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-67322 Source advisory: OSV:GHSA-RWJ8-PGH3-R573...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-67323 via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-67323 Source advisory: OSV:GHSA-956X-8GVW-WG5V...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-67323 via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-67323 Source advisory: OSV:GHSA-956X-8GVW-WG5V...
dotcli (>=0.1.4, <=0.1.7), giraumon (0.0.1) +3 more potentially affected by CVE-2026-42215 +1 more via gitpython (2.1.5)
gitpython PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dotcli =0.1.4, =1.0.1, =1.0.0, =1.0.18 Source cves: CVE-2026-42215, CVE-2026-67325 Source advisory: OSV:GHSA-2F96-G7MH-G2HX...
bentodev (>=0.1.17, <=2018.11.2), confsave (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2026-42215 +1 more via gitpython (2.1.3)
gitpython PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bentodev =0.1.17, =0.1.0, =0.9.0, =0.53.0 - reckoner 1.1.1 Source cves: CVE-2026-42215, CVE-2026-67325 Source advisory: OSV:GHSA-2F96-G7MH-G2H...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: actions-runner, lerna, gitlab-rails-ce, pulumi, kubeflow-centraldashboard, graalvm, opensearch-dashboards, prism, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips, npm, saf, homepage, wazuh-dashboard, opensearch-dashboards-fips, code-server, jupyter-base-notebook,...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: actions-runner, lerna, gitlab-rails-ce, pulumi, kubeflow-centraldashboard, tensorflow-gpu-jupyter, graalvm, opensearch-dashboards, prism, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips, npm, saf, homepage, wazuh-dashboard, opensearch-dashboards-fips, code-server,...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: actions-runner, lerna, gitlab-rails-ce, pulumi, kubeflow-centraldashboard, tensorflow-gpu-jupyter, graalvm, opensearch-dashboards, prism, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips, npm, saf, homepage, wazuh-dashboard, opensearch-dashboards-fips, code-server,...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: actions-runner, lerna, gitlab-rails-ce, pulumi, kubeflow-centraldashboard, tensorflow-gpu-jupyter, graalvm, opensearch-dashboards, prism, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips, npm, saf, wazuh-dashboard, opensearch-dashboards-fips, code-server,...
GHSA-MP7J-QC5W-4988 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...
CVE-2026-54466 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...
CVE-2026-54490 vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...