301 matches found
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061
Scriban before 7.2.2 has an access-modifier bypass in TypedObjectAccessor, allowing template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters and mass-assign public-setter properties, permanently alt...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
EUVD-2026-59947
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
PT-2026-73148
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fa351dd59830661fec220bea9d36a6b2c84b9107412e6dead9067002ca6f607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14071 Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fa351dd59830661fec220bea9d36a6b2c84b9107412e6dead9067002ca6f607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-kusto, mountpoint-s3-csi-driver, local-path-provisioner-fips, crossplane-provider-aws-cloudsearch-fips, kubernetes-csi-external-resizer-fips, authservice, rancher-fleet, kube-conformance,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-kusto, kube-logging-operator-fips, dockerize, crossplane-provider-aws-cloudsearch-fips, kube-conformance, opensearch-datasource, crossplane-provider-aws-emrserverless-fips, weaviate, crossplane-provider-aws-route53-fips, nri-redis-fips,...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-kusto, kube-logging-operator-fips, dockerize, crossplane-provider-aws-cloudsearch-fips, kube-conformance, opensearch-datasource, crossplane-provider-aws-emrserverless-fips, weaviate, crossplane-provider-aws-route53-fips, nri-redis-fips,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-azure-kusto, mountpoint-s3-csi-driver, local-path-provisioner-fips, crossplane-provider-aws-cloudsearch-fips, kubernetes-csi-external-resizer-fips, authservice, rancher-fleet, kube-conformance,...
CLEANSTART-2026-EE75554 Security fixes in volume-modifier-for-k8s-fips 0.9.5-r2
Package volume-modifier-for-k8s-fips version 0.9.5-r2 fixes 1 vulnerabilities: CVE-2026-27145...
CLEANSTART-2026-KM76344 Security fixes in volume-modifier-for-k8s 0.9.5-r2
Package volume-modifier-for-k8s version 0.9.5-r2 fixes 2 vulnerabilities: CVE-2026-27145, CVE-2026-33811...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the X.Org X server. This vulnerability, an out-of-bounds read, affects the handling of XKB X Keyboard Extension modifier maps. An attacker with access to the X11 server can exploit this by sending a malformed request, causing the server to read beyond its intended memory...
CLEANSTART-2026-ID58976 Security fixes in volume-modifier-for-k8s-fips 0.9.0-r0
Package volume-modifier-for-k8s-fips version 0.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
PT-2026-63507
Name of the Vulnerable Software and Affected Versions Sourcerer extension affected versions not specified Description Multiple code injection vectors exist within the extension. The Free version fails to verify that both the article creator and the last modifier possess Super User privileges befo...
EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-2577)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the...
EUVD-2026-38890
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: bound enumeration string aggregation populateenumdata aggregates firmware-provided value-modifier and possible-value strings into fixed 512-byte struct members. The current code bounds each individu...