266028 matches found
CVE-2026-59140 Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths
Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ssvalidateheader bounds only the root index against the node pool nodecapacity. The order-statistics and min/max queries th...
EUVD-2026-42315
Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set...
GHSA-FRVP-7C67-39W9 Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
The same as the hono core Path traversal in serve-static on Windows via encoded backslash %5C. Summary On Windows hosts, an encoded backslash %5C in the request path decodes to , which the Windows path resolver treats as a separator. serve-static then resolves a single URL segment such as...
@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +105 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)
@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +307 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.14)
@hono/node-server NPM version =1.0.2, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =1.0.25-beta.0, =0.0.1, =1.0.0 - @arpanjain3.14/ponder-with-flashblocks 0.16.3 and more Source cves: unknown CVE Source advisory: GHSA-FRVP-7C67-3...
@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +105 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)
@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...
@agent-vm/agent-vm (>=0.0.138, <=0.0.140), @agent-vm/agent-vm-worker (>=0.0.138, <=0.0.140) +105 more potentially affected by unknown CVE via @hono/node-server (>=2.0.0, <=2.0.4)
@hono/node-server NPM version =2.0.0, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.8.5, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.2, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.9 and more Source cves: unknown CVE Source...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @adhisang/minecraft-modding-mcp (1.0.0) +307 more potentially affected by unknown CVE via @hono/node-server (>=1.0.2, <=1.19.14)
@hono/node-server NPM version =1.0.2, =0.3.1, =0.2.0, =0.2.0, =0.4.0, =0.2.0, =0.1.4, =0.0.27, =1.0.2, =2.0.0-beta.66, =2.0.0-beta.78, =2.0.0-beta.66, =1.0.25-beta.0, =0.0.1, =1.0.0 - @arpanjain3.14/ponder-with-flashblocks 0.16.3 and more Source cves: unknown CVE Source advisory:...
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
The same as the hono core Path traversal in serve-static on Windows via encoded backslash %5C. Summary On Windows hosts, an encoded backslash %5C in the request path decodes to , which the Windows path resolver treats as a separator. serve-static then resolves a single URL segment such as...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85333fa48c61a31c9f7be395bdc5ef70596e317a3bc9124f67ece4ffcf96901 [email protected] contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetching remote content, no...
OPENSUSE-SU-2026:21399-1 Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions
This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global prototyp...
Minima-private
Minima Minima is a blockchain with an emphasis on every user...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, pulumi, gitlab-rails-ce, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips, jupyter-base-notebook, kibana, actions-runner, saf, code-server, homepage, graalvm, npm, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-centraldashboard,...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, pulumi, gitlab-rails-ce, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips, jupyter-base-notebook, kibana, actions-runner, saf, code-server, graalvm, npm, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-centraldashboard,...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: pulumi, gitlab-rails-ce, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips, jupyter-base-notebook, kibana, actions-runner, saf, code-server, homepage, graalvm, npm, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-centraldashboard, wazuh-dashboard, sqlpad,...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, pulumi, gitlab-rails-ce, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips, jupyter-base-notebook, kibana, actions-runner, saf, code-server, homepage, graalvm, npm, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-centraldashboard,...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kubeflow-centraldashboard, lerna, pulumi, saf, sqlpad, code-server, prism, npm...