196376 matches found
MGASA-2026-0341 Updated golang packages fix security vulnerabilities
CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...
PT-2026-83579
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.1 Description A stored cross-site scripting issue exists in the confirmDialog function. This occurs because unescaped package names and notebook names are interpolated directly into innerHTML assignments. An attack...
CVE-2026-82653: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
CVE-2026-82454
The Omnivore API packages/api before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify. Using...
CVE-2026-9496 vulnerabilities
Vulnerabilities for packages: lerna, graalvm, prism...
Linux Distros Unpatched Vulnerability : CVE-2026-40205
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the...
@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55855 via mariadb (>=3.3.0, <=3.3.2)
mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55855 Source advisory: OSV:GHSA-G5XC-5W98-JFVM...
@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +39 more potentially affected by CVE-2026-55855 via mariadb (>=3.4.0, <=3.4.5)
mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =0.112.0 and more Source cves: CVE-2026-55855 Source advisory: OSV:GHSA-G5XC-5W98-JFVM...
CVE-2026-55688 vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, tez...
GHSA-MCJ4-MPHF-J9FF vulnerabilities
Vulnerabilities for packages: kubescape-server, kubescape-server-fips, kubescape, cloudbeat-fips, cloudbeat...
CLSA-2026-1787867443 TuxCare security update for 206 packages (4 CVEs)
TuxCare rebuilt 206 packages to address 4 CVEs. Fixed in 3.5.9-tuxcare.7...
GO-2026-6293 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter-fips, kube-metrics-adapter, listmonk, temporal, falcosidekick-ui, temporal-ui-server-fips, falcosidekick-ui-fips, temporal-ui-server, temporal-fips...
CLSA-2026-1787846138 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.8...
CVE-2026-81098
The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...
CLSA-2026-1787835578 TuxCare security update for 3 packages (2 CVEs)
TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...
golang security, bug fix, and enhancement update
An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...
RHSA-2026:59641 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:59635 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...