2517 matches found
CVE-2026-10973 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-10903 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-HWHG-7C6P-XFW2 vulnerabilities
Vulnerabilities for packages: chromium...
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +12 more potentially affected by CVE-2026-59196 via pnpm (>=10.0.0, <=10.33.2)
pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.0-beta.3, =0.1.8, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-59196 Source advisory: OSV:GHSA-FR4H-3CPH-29XV...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails...
CVE-2026-48525 vulnerabilities
Vulnerabilities for packages: ggshield, datadog-agent, kserve, superset...
CVE-2026-11701 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-72XP-P242-47P9 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
MAL-2026-5448 Malicious code in mazemap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751317dcad79cec866b8dc69cd60b39e3be8e1bcc45746039835b04ce32445b0 package.json declares its only dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.0.2.tgz...
GHSA-P337-8MM9-6P6X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-V4C4-Q9W7-M653 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-31843
The goodoneuz/pay-uz Laravel package = 2.2.24 contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remot...
Linux Distros Unpatched Vulnerability : CVE-2026-11043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially...
Security Bulletin: IBM Maximo Application Suite uses once-2.0.0.tgz which is vulnerable to CVE-2026-3449
Summary IBM Maximo Application Suite uses once-2.0.0.tgz which is vulnerable to CVE-2026-3449. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-3449 DESCRIPTION: Versions of the package @tootallnate/once before 3.0.1 are vulnerab...
CVE-2026-35371 vulnerabilities
Vulnerabilities for packages: uutils...
GHSA-5699-PPR6-8H44 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
Linux Distros Unpatched Vulnerability : CVE-2026-9984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium...
EUVD-2026-33053
typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery SSRF caused by a trust-boundary inconsistency between manual discovery and tool invocation. registerManual validates the discovery URL against an HTT...