ROOT-APP-NPM-AIKIDO-2026-10823 AIKIDO-2026-10823 in axios - Patched by Root

Root has patched AIKIDO-2026-10823 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42043 CVE-2026-42043 in axios - Patched by Root

Root has patched CVE-2026-42043 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42037 CVE-2026-42037 in axios - Patched by Root

Root has patched CVE-2026-42037 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44496 CVE-2026-44496 in axios - Patched by Root

Root has patched CVE-2026-44496 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42039 CVE-2026-42039 in axios - Patched by Root

Root has patched CVE-2026-42039 in the axios package for Root:npm. Multiple fixed versions available...

aztarna

Este repositorio ha sido archivado y ya no se mantiene. Consulte alurity para futuros avances en footprinting y fingerprinting de robots. aztarna Este repositorio contiene aztarna de Alias Robotics, una herramienta de footprinting para robots. Alias Robotics apoya a los fabricantes originales de...

CLEANSTART-2026-CC29276 Security fix for GHSA-259r-337f-4rfw applied in: node-problem-detector 0.8.25-r1

Security vulnerability affects the node-problem-detector package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KZ65595 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-YK40300 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-GD06163 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-IN42122 Security fix for GHSA-hrxh-6v49-42gf applied in: external-secrets-operator-fips 2.7.0-r1, node-problem-detector 0.8.25-r1

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-110788

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.1 Description Nginx UI fails to apply RequireSecureSession to several authenticated mutation routes. This occurs despite the requirement for users with One-Time Password OTP enabled to provide a fresh...

PT-2026-108965

Name of the Vulnerable Software and Affected Versions Nginx UI versions 2.0.0 through 2.4.x Description Ordinary authenticated users can access the /api/nodes and /api/nodes/:id endpoints, which return node objects containing a sensitive token field. This token is used as a shared credential for...

PT-2026-108959

Name of the Vulnerable Software and Affected Versions ruoyi-ai versions 3.0.0 through 3.1.0 Description An authorization flaw exists in the 'GET /workflow/search' endpoint. Authenticated users without administrative privileges can query this endpoint to list enabled private workflows within the...

PT-2026-117173

Security vulnerability affects the node-problem-detector package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-107813: Missing Authorization

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx reload or restart operations with AuthRequired but without RequireSecureSession. An authenticated OTP-enabled user...

CVE-2026-107805: Uncontrolled Resource Consumption

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

CVE-2026-107811: Exposure of Sensitive Information to an Unauthorized Actor

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses serialize the node token field. The same token is accepted as X-Node-Secret by AuthRequired and maps the request to initUser,...

PT-2026-108934

Name of the Vulnerable Software and Affected Versions Nginx UI versions 2.5.0 through 2.5.x Description The node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it to disk before validating the body digest and cryptographic...

PT-2026-109317

Name of the Vulnerable Software and Affected Versions Astron Agent versions prior to 1.1.2 Description An authenticated low-privilege tenant can execute arbitrary code as root within the core-workflow container. This occurs because the default workflow code-node path through the endpoints...