353 matches found
DEBIAN-CVE-2026-65832
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...
CVE-2026-65832 Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...
CVE-2026-65832 Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...
EUVD-2026-60464
Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
EUVD-2026-59947
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
CVE-2026-73061
Scriban before 7.2.2 has an access-modifier bypass in TypedObjectAccessor, allowing template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters and mass-assign public-setter properties, permanently alt...
CVE-2026-73061: Improper Access Control
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
PT-2026-73148
Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...
Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14071 Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-33818 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, redis-operator, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips, longhorn-cli-fips, fluxcd-kustomize-mutating-webhook-fips,...
CVE-2026-56859 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, prometheus-alertmanager-fips, crossplane-provider-aws-lightsail-fips, redis-operator, volcano-fips, kuma, crossplane-provider-aws-codestarconnections, crossplane-provider-aws-firehose,...
GO-2026-5972 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, redis-operator, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips, longhorn-cli-fips, fluxcd-kustomize-mutating-webhook-fips,...
GO-2026-6088 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, prometheus-alertmanager-fips, crossplane-provider-aws-lightsail-fips, redis-operator, volcano-fips, kuma, crossplane-provider-aws-codestarconnections, crossplane-provider-aws-firehose,...