111433 matches found
GHSA-XHCR-CQFR-M3HV atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)
The HTTP MCP server-registry backend factory atomicagents/mcpregistry/http.py, makehttpmcpserverregistrybackendfromurl accepts both http and https schemes. Catalog entries carry command/args that are type-validated but content-unrestricted, and are later spawned as local stdio subprocesses by...
ANT-2026-61Y3NTY3 · suricata · Use-after-free
use-after-free high GHSA-qmc9-vqq2-8mv3 Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-61Y3NTY3: Use-after-free in...
Important: Red Hat Security Advisory: haproxy security update
An update for haproxy is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
CVE-2026-75482 SWE-agent Trajectory Inspector Path Traversal File Disclosure
SWE-agent's trajectory inspector sweagent inspector, confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory '..' references, bypassing the built-in path sanitization. The server binds all interface...
EUVD-2026-60394
SWE-agent's trajectory inspector sweagent inspector, confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ handler without rejecting parent-directory '..' references, bypassing the built-in path sanitization. The server binds all interface...
CVE-2026-75482
SWE-agent's trajectory inspector (v1.1.0) exposes a path-traversal vulnerability in its /trajectory/ handler, allowing unauthenticated clients to read arbitrary files shaped as trajectory JSON, potentially leaking repository contents, command output, and API keys. The server binds to 0.0.0.0 with...
GHSA-FM65-XRRR-C358 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-6364-X4QJ-7W59 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
CVE-2026-28753 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-82W2-X7HF-5H8R vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-FM65-XRRR-C358 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-HWQ5-42J9-JVQJ vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-28755 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-60005 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-V43F-895R-CHHH vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-X88Q-X2R7-VG3G vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42530 vulnerabilities
Vulnerabilities for packages: nginx-mainline...
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...