181429 matches found
CVE-2026-59887
A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result ...
CVE-2026-39944
A flaw was found in Ceph RGW's STS Security Token Service session token implementation. The STS tokens use the same unauthenticated AES-128-CBC encryption as CephX, which lacks message authentication and uses a hardcoded initialization vector. Because there is no integrity protection on the token...
CVE-2020-37267
A flaw was found in Renovate. When used with Azure DevOps, the bot's authorization token may be exposed in server or pipeline logs. This occurs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. An attacker with access to these logs could obtain the bot's...
EUVD-2026-62665
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...
EUVD-2026-62659
Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.0, Orval resolves remote and local external $ref values without an allowlist or confinement to the input directory. Processing an attacker-controlled OpenAPI description can cau...
MINI-P7W2-7PQG-57F2
Bulletin has no description...
MINI-3RQH-899Q-VWHF
Bulletin has no description...
MINI-WW3R-CX53-RF6R
Bulletin has no description...
MINI-PC9J-Q467-XX97
Bulletin has no description...
MINI-V6FM-4GX9-855H
Bulletin has no description...
MINI-7GXR-G53C-P9RG
Bulletin has no description...
MINI-V4HC-QH6P-MRMW
Bulletin has no description...
MINI-5JX9-X544-J4C5
Bulletin has no description...
MINI-76HW-GF9F-5J3F
Bulletin has no description...
MINI-GV7P-R89P-F9M7
Bulletin has no description...
MINI-2QQH-M9H9-QRWC
Bulletin has no description...
MINI-RR56-79FM-7X6W
Bulletin has no description...
MINI-M7V5-JWWX-WR3G
Bulletin has no description...