2060 matches found
CLEANSTART-2026-XL56963 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the qdrant package. launch-editor allows users to open files with line numbers in editor from Node...
CLEANSTART-2026-BH80577 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the qdrant package. launch-editor allows users to open files with line numbers in editor from Node...
cve-2026-0013-poc
CVE-2026-0013 Android DocumentsUI Confused Deputy Vulnerability - Security Research Verification Project Important Notice This repository is a derived build repository, affiliated with the original upstream repository. Role| Repository| Description ---|---|--- Main repository|...
CLEANSTART-2026-HW56312 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...
CLEANSTART-2026-HJ44016 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...
CVE-2026-119287 Zuke: Command-form registry descriptors bypass the MCP launch policy
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...
CVE-2026-119287 Zuke: Command-form registry descriptors bypass the MCP launch policy
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKEREGISTRYLAUNCHHOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-ru...
CLEANSTART-2026-XQ66463 launch-editor allows users to open files with line numbers in editor from Node
CVE-2026-53632 affects multiple packages. launch-editor allows users to open files with line numbers in editor from Node. See references for individual vulnerability details...
CLEANSTART-2026-LR48178 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...
CVE-2026-18451 Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session...
CVE-2026-86968
An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution...
EUVD-2026-107361
Electron: openExternal permission requests can be attributed to the wrong origin...
SUSE CVE-2026-112942
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument where the file argument ends in a parent-directory component plus a line-and-column suffix: the path is resolved whil...
SUSE CVE-2026-112943
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When an environment variable contained a malicious value, it was possible that that content to be executed. This...
SUSE CVE-2026-112944
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in the working directory, an affected editor is selected, and the path can remain relative or is converted to a relative...
CVE-2026-114121
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...
CVE-2026-114121
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the...
CLSA-2026-1792582427 TuxCare security update for launch-editor (3 CVEs)
TuxCare rebuilt launch-editor to address 3 CVEs. Fixed in 2.2.1-tuxcare.2...
