CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59288 Spring for GraphQL Information Exposure in GraphiQL support

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0...

EUVD-2026-67177

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0...

CVE-2026-59288

Spring for GraphQL (org.springframework.graphql:spring-graphql) versions 2.0.0–2.0.4 , 1.4.0–1.4.6 , 1.1.0–1.3.9 , and 1.0.0–1.0.7 are vulnerable to a Cross-Site Request Forgery (CSRF) issue via the bundled GraphiQL page. An attacker can share a malicious URL that, when visited by a user with an ...

CVE-2026-59288 Spring for GraphQL Information Exposure in GraphiQL support

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0...

CVE-2026-76218

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

CVE-2026-34674

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34674 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-67082

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34674

Adobe Substance 3D Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically that a victim must open a malicious file. Adobe rated th...

MAL-2026-14560 Malicious code in inspectstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc87250d7ea2211f538d56ca04d81a6653e6493beb475ea371873ddfe6a65e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in stackpaths (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a27ce2899b65f55deaab5feaf1b3cfd2ae674a45fd3e87ab442c58d3d89ba79 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in inspectstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cc87250d7ea2211f538d56ca04d81a6653e6493beb475ea371873ddfe6a65e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14565 Malicious code in stackpaths (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a27ce2899b65f55deaab5feaf1b3cfd2ae674a45fd3e87ab442c58d3d89ba79 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-81700 openssl_encrypt before 1.4.9 GPG Signature Verification Bypass

opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...

Malicious code in charclass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8706b70b3238d5f94848a858e119e3e41d7102032d82a00ff3ae25915311d4e6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in deepjoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7191d8ad9de3616fcf3be682d6755dc092dd05df7bf8c273d1ad867a0edd6d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14557 Malicious code in charclass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8706b70b3238d5f94848a858e119e3e41d7102032d82a00ff3ae25915311d4e6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14558 Malicious code in deepjoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7191d8ad9de3616fcf3be682d6755dc092dd05df7bf8c273d1ad867a0edd6d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in sigcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6acb99271ede5807243bea2648af5e71511853e99c473309de457a8828ac0ab5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...