org.apache.pulsar:pulsar-broker (>=4.2.0, <=4.2.4), org.apache.pulsar:pulsar-broker-auth-athenz (>=4.2.0, <=4.2.4) +3 more potentially affected by CVE-2026-105945 via org.apache.pulsar:pulsar-package-filesystem-storage (>=4.2.0, <=4.2.4)

org.apache.pulsar:pulsar-package-filesystem-storage MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.4 Source cves: CVE-2026-105945 Source advisory: MEND:CVE-2026-105945...

com.datastax.oss:kafka-0-10 (4.0.3.8), com.datastax.oss:kafka-0-9 (4.0.3.8) +15 more potentially affected by CVE-2026-105945 via org.apache.pulsar:pulsar-package-filesystem-storage (>=4.0.0, <=4.0.13)

org.apache.pulsar:pulsar-package-filesystem-storage MAVEN version =4.0.0, =8.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.13 and more Source cves: CVE-2026-105945 Source advisory: MEND:CVE-2026-105945...

Debian: Security Advisory (DLA-238-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-8768

click/install.py in click does not require files in package filesystem tarballs to start with ./ dot slash, which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone...

CVE-2015-8768

click/install.py in click does not require files in package filesystem tarballs to start with ./ dot slash, which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone...

CVE-2015-8768

click/install.py in click does not require files in package filesystem tarballs to start with ./ dot slash, which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone...