540345 matches found
Updated python-nltk packages fix security vulnerabilities
Updated packages fix security vulnerabilities. Please see the links...
github.com/getkin/kin-openapi: kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized acce...
fast-uri: fast-uri: Host confusion via skipped IDN canonicalization
A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names IDN to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a...
fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers URIs in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An...
fast-uri: fast-uri: URI authority bypass due to improper delimiter handling
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier URI that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw...
fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a...
fast-uri: fast-uri: Host confusion via skipped IDN canonicalization
A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names IDN to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers URIs in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An...
CVE-2026-56854 vulnerabilities
Vulnerabilities for packages: kubernetes, containerd, loki...
GO-2026-6303 vulnerabilities
Vulnerabilities for packages: kubernetes, containerd, loki...
CVE-2026-56854 vulnerabilities
Vulnerabilities for packages: kubernetes, containerd, loki...
GO-2026-6303 vulnerabilities
Vulnerabilities for packages: kubernetes, containerd, loki...
CVE-2026-54770 vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.2-fips, openstack-tempest-2025.2, openstack-keystone-2025.1-fips, openstack-placement-2025.2-fips, openstack-placement-2026.1-fips, openstack-glance-2025.2, openstack-glance-2026.1, openstack-keystone-2026.1-fips, openstack-horizon-2025.2,...
GHSA-6HX8-3WJJ-GR8G vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.2-fips, openstack-tempest-2025.2, openstack-keystone-2025.1-fips, openstack-placement-2025.2-fips, openstack-placement-2026.1-fips, openstack-glance-2025.2, openstack-glance-2026.1, openstack-keystone-2026.1-fips, openstack-horizon-2025.2,...
GHSA-W4PP-8PJF-RMXW vulnerabilities
Vulnerabilities for packages: lerna...