261266 matches found
CVE-2026-18621 Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
EUVD-2026-55814
A flaw was found in Data Science Pipelines DSP. An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf o...
CVE-2026-72751
CTI-Transmute is affected by a stored cross-site scripting XSS vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled values originating from converted CTI data were passed to multiple HTML-parsing sinks in the graph user interface without...
mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd
A flaw was found in MariaDB server. When the wsrepnotifycmd feature is enabled, a remote attacker could exploit this vulnerability by embedding shell commands in the name of a joiner node. This could lead to arbitrary code execution on the server, allowing the attacker to take full control of the...
CVE-2026-68371
In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed ofnode in probe omap2430probe stores pdev-dev.ofnode in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths...
Malicious code in polymarket-stake-mathss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef71354e27f0e5798fee884366776d5b76ba0df0122148d1f4f7aeeef42b45cc Typosquat of polymarket-stake-math double s. The postinstall script install-check.cjs resolves a bundle URL from the package.json homepage field...
Malicious code in chai-as-promised-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be02bee1e19ad24ae6091f0793dc22af62e54030388bbdc7d1aa29b078ac17a5 The package name mimics the widely-used chai-as-promised assertion helper and reuses its README/description. lib/chai-as-promised-plus.js defines the...
Malicious code in iconova-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590534a7b05eb30959d9422e2ea700fb525b66b357a62f7ba1795caba4ad799 iconova-react is a re-hosted copy of lucide-react every icon file carries a @license lucide-react header; the package name is iconova-react but its...
MAL-2026-13705 Malicious code in iconova-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590534a7b05eb30959d9422e2ea700fb525b66b357a62f7ba1795caba4ad799 iconova-react is a re-hosted copy of lucide-react every icon file carries a @license lucide-react header; the package name is iconova-react but its...
CVE-2026-68371
The CVE concerns the Linux kernel USB MUSB OMAP2430 driver. In omap2430_probe(), pdev->dev.of_node is stored in a local np variable as a borrowed pointer and the code later calls of_node_put(np). This drops a reference owned by the platform device, potentially leaving pdev->dev.of_node with...
CVE-2026-72587
A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /instatic/hole/ server island endpoint...
CVE-2026-72587 Instatic - Cache Poisoning via Unauthenticated Server Island Endpoint
A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /instatic/hole/ server island endpoint...
CVE-2026-72587 Instatic - Cache Poisoning via Unauthenticated Server Island Endpoint
A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /instatic/hole/ server island endpoint...
EUVD-2026-55219
A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /instatic/hole/ server island endpoint...
CVE-2026-71498
A flaw was found in node-re2, a library providing RE2 regular expression bindings for Node.js. A local attacker could exploit this vulnerability by providing a specially crafted input buffer that ends with an incomplete multi-byte UTF-8 character. This could lead to an out-of-bounds read,...
Malicious code in @ssgw/icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d2fb7b19baedba9c5350b19ebf8ab3e99be16bd04fd15a3960889766ed97e70 The OpenSSF Package Analysis project identified '@ssgw/icon' @ 9.999.999 npm as malicious. It is considered malicious because: - The package...
MAL-2026-13684 Malicious code in @ssgw/icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d2fb7b19baedba9c5350b19ebf8ab3e99be16bd04fd15a3960889766ed97e70 The OpenSSF Package Analysis project identified '@ssgw/icon' @ 9.999.999 npm as malicious. It is considered malicious because: - The package...
tar: Node-tar: Denial of Service via malformed tar archive header
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...
nodejs: Node.js WebCrypto: Denial of Service via large input to subtle.encrypt()
A flaw was found in the Node.js WebCrypto implementation. A remote attacker could exploit this vulnerability by providing an input to the subtle.encrypt function that is a multiple of 2 gigabytes GiB. This could lead to a denial of service DoS by crashing the Node.js process...
tar: node-tar: Denial of Service via crafted gzip bomb
A flaw was found in node-tar, a tar archive manipulation library for Node.js. This vulnerability allows a remote attacker to craft a small gzip bomb, which, when processed, can lead to the exhaustion of disk space and CPU resources. This occurs because node-tar does not enforce strict limits on t...