607 matches found
CVE-2026-84445 affecting package azcopy for versions less than 10.25.1-9
CVE-2026-84445 affecting package azcopy for versions less than 10.25.1-9. An upgraded version of the package is available that resolves this issue...
CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8
CVE-2026-84304 affecting package containerized-data-importer for versions less than 1.62.0-8. A patched version of the package is available...
CVE-2026-84304 affecting package skopeo for versions less than 1.14.4-13
CVE-2026-84304 affecting package skopeo for versions less than 1.14.4-13. A patched version of the package is available...
CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33
CVE-2026-84445 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...
CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9
CVE-2026-37236 affecting package cloud-provider-kubevirt for versions less than 0.5.1-9. A patched version of the package is available...
CVE-2026-72924 affecting package gh for versions less than 2.101.0-1
CVE-2026-72924 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10
CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...
CVE-2026-7598 affecting package rust for versions less than 1.96.1-2
CVE-2026-7598 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...
Astra Linux – Vulnerability in Firefox and Thunderbird
When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird 91.4.0, Firefox ESR 91.4.0, and Firefox 95...
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
SWC HTML minifier may allow script element breakout when minifying embedded JSON
Impact @swc/html minifies JSON contained in script elements such as application/json and application/ld+json by parsing and serializing the JSON value. Before the patched versions, JSON serialization could convert escaped less-than signs such as \u003C into literal sequence, the generated HTML...
CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3
CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3. A patched version of the package is available...
CVE-2026-79992 affecting package emacs for versions less than 29.4-5
CVE-2026-79992 affecting package emacs for versions less than 29.4-5. A patched version of the package is available...
EUVD-2026-60793
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56289 affecting package patch for versions less than 2.7.6-10
CVE-2026-56289 affecting package patch for versions less than 2.7.6-10. A patched version of the package is available...
NPM: Mermaid configuration APIs allow prototype pollution
NPM: Mermaid configuration APIs allow prototype pollution vulnerability discovered by ? in WordPress Npm mermaid versions 10.9.8...
CVE-2026-54365 CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious...