ROOT-APP-NPM-CVE-2026-64642 CVE-2026-64642 in next - Patched by Root

Root has patched CVE-2026-64642 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-32421 CVE-2025-32421 in next - Patched by Root

Root has patched CVE-2025-32421 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root

Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-39693 CVE-2024-39693 in next - Patched by Root

Root has patched CVE-2024-39693 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-34350 CVE-2024-34350 in next - Patched by Root

Root has patched CVE-2024-34350 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-48068 CVE-2025-48068 in next - Patched by Root

Root has patched CVE-2025-48068 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-23646 CVE-2022-23646 in next - Patched by Root

Root has patched CVE-2022-23646 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-87742

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

NPM: Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

NPM: Tina: Broken Access Control letting any TinaCloud user authorize against any self-hosted site vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions = 15.0.0...

CVE-2026-87742

A flaw in quarkus-websockets-next allows a remote attacker to trigger a Denial of Service by streaming messages over a single connection faster than the application can process them. The root cause is unbounded message buffering combined with a lack of read backpressure , which rapidly exhausts h...

CVE-2026-87742 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

EUVD-2026-81675

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

CVE-2026-87742 Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

CVE-2026-87742

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

ROOT-APP-NPM-AIKIDO-2026-10759 AIKIDO-2026-10759 in next - Patched by Root

Root has patched AIKIDO-2026-10759 in the next package for Root:npm. Multiple fixed versions available...

CVE-2026-87742: Allocation of Resources Without Limits or Throttling

A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service DoS by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified 7 vulnerabilities in various Oracle Enterprise Manager products, including Oracle Enterprise Manager Base Platform, Oracle Enterprise Manager for Fusion Middleware, and Oracle Enterprise Manager for Oracle Database. The security updates are not applicable to client-only...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a perpetrator to trigger a service failure.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

CVE-2026-63506: Authorization Bypass Through User-Controlled Key

Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUserAuthorized to validate the bearer token against that selected TinaCloud app instead of the self-hosted site's configured app...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a hacker to gain full control over the application.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the SSH protocol...