75396 matches found
CVE-2026-67527 OpenProject: Improper Access Control through /api/v3/work_packages/<X.id> via PATCH parameter "fileLinks"
OpenProject is open-source, web-based project management software. Prior to 17.6.0, PATCH /api/v3/workpackages/id accepted links.fileLinks and allowed authenticated users with editworkpackages but without managefilelinks to resolve Storages::FileLink records by raw id, detach or hard-delete...
CVE-2026-67527
OpenProject prior to v17.6.0 is affected by an improper access control vulnerability in PATCH /api/v3/work_packages/{id} via the _links.fileLinks parameter.Authenticated users with edit_work_packages but without manage_file_links could resolve Storages::FileLink records by raw id, detach or hard-...
CVE-2026-66755
creationtimestamp| type| source ---|---|--- 2026-07-30 18:11:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lostbvn6jqpf...
SUSE CVE-2026-20719
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...
SUSE CVE-2026-35594
Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's link share authentication GetLinkShareFromClaims in pkg/models/linksharing.go constructs authorization objects entirely from JWT claims without any server-side database validation. When a project owner delet...
CVE-2026-4978
creationtimestamp| type| source ---|---|--- 2026-07-30 16:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvppv5ys2z...
SUSE CVE-2026-44245
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses...
SUSE CVE-2026-48788
Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 contain a Cross-Site Scripting XSS vulnerability exploitable through content-type spoofing. The Remark42 image proxy fetches an arbitrary remote URL and...
SUSE CVE-2026-52800
Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization team member management can be performed via GET requests without CSRF protection. If a victim who is an organization owner is logged in and is tricked into visiting a crafted link, an attacker-controlled user can be add...
SUSE CVE-2026-55187
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
SUSE CVE-2026-55671
ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...
CVE-2026-54722 dssrf: there a critical security bug with remove_at_symbol_in_string
DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, isurlsafe in src/helpers.ts strips the @ userinfo delimiter with removeatsymbolinstring before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-IP...
CVE-2026-51273
creationtimestamp| type| source ---|---|--- 2026-07-30 16:02:04+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrussqexyq2m...
CVE-2026-44613
creationtimestamp| type| source ---|---|--- 2026-07-30 15:55:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nmtzjyl3euyh 2026-08-07 07:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96984 2026-08-07 15:02:15+00:00| seen|...
CVE-2026-53431
creationtimestamp| type| source ---|---|--- 2026-07-30 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrurapjhtq2v...
GHSA-C9HR-64H3-GXPC
creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8...
CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...
CVE-2026-56428
creationtimestamp| type| source ---|---|--- 2026-07-30 14:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cj3oxkjqienek...