597 matches found
CVE-2025-27893
CVE-2025-27893: Controllo esterno di parametro web presunto immutabile nella piattaforma Archer Descrizione Nella piattaforma Archer dalla versione 6 alla 6.14.00202.10024, un utente autenticato con privilegi di creazione record può manipolare campi immutabili, come la data di creazione,...
EUVD-2026-66820
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850 Spring Data REST allows mutation of the version property of immutable aggregates via PUT
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
CVE-2026-47850
Spring Data REST does not preserve the persisted @Version property of an aggregate root when handling an HTTP PUT against an immutable target type, allowing mutation of the version field. The issue is rated MEDIUM (CVSS 4.3) with a low integrity impact. Affected versions include 5.1.0 , 5.0.0–5.0...
incus-os
Introduzione IncusOS è un'immagine OS immutabile dedicata all'esecuzione di Incus. È basato su Debian 13 e costruito utilizzando mkosi. IncusOS può essere installato su sistemi moderni amd64 x8664 e arm64. Questo mira a fornire un modo molto veloce, sicuro e affidabile per eseguire un server Incu...
BIT-NEO4J-ENTERPRISE-2024-34517
The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...
PT-2026-82348
Spring Data REST does not preserve the persisted version @Version property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20...
cve-2026-47850 - MEDIUM - Spring Data REST allows mutation of the version property of immutable aggregates via PUT
cve-2026-47850 - MEDIUM - Spring Data REST allows mutation of the version property of immutable aggregates via PUT...
ROOT-APP-NPM-CVE-2026-59880 CVE-2026-59880 in immutable - Patched by Root
Root has patched CVE-2026-59880 in the immutable package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59879 CVE-2026-59879 in immutable - Patched by Root
Root has patched CVE-2026-59879 in the immutable package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-29063 CVE-2026-29063 in immutable - Patched by Root
Root has patched CVE-2026-29063 in the immutable package for Root:npm. Multiple fixed versions available...
CVE-2026-72186
In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...
Security Bulletin: Immutable.js Denial of Service Vulnerabilities in Content Cortex for Microsoft Office
Summary Immutable.js versions before 4.3.9 and 5.1.8 have two DoS vulnerabilities CVSS 7.5, High. CVE-2026-59879 is an integer overflow in List operations set, setSize, setIn, updateIn that can cause infinite loops or unbounded memory allocation when given index/size values between 2^30 and 2^31...
EUVD-2026-54315
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-50481
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CLSA-2026-1784943220 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 4.1.0-tuxcare.3...
CLSA-2026-1784856463 TuxCare security update for immutable (8 CVEs)
TuxCare rebuilt immutable to address 8 CVEs. Fixed in 4.3.5-tuxcare.3...