194872 matches found
CVE-2026-82653
SiYuan before v3.8.1 is affected by a stored cross-site scripting (XSS) vulnerability in the confirmDialog() function. Unescaped package names and notebook names are interpolated directly into innerHTML assignments, allowing attackers to submit malicious bazaar packages with HTML/script payloads ...
EUVD-2026-68239
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
CVE-2026-82653 SiYuan before v3.8.1 Stored XSS via confirmDialog
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
RHSA-2026:60853 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
MGASA-2026-0341 Updated golang packages fix security vulnerabilities
CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary...
CVE-2026-82653: Improper Neutralization of Input During Web Page Generation
SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers can submit malicious bazaar packages with HTML/script payloads in the name field that execute...
PT-2026-83579
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.1 Description A stored cross-site scripting issue exists in the confirmDialog function. This occurs because unescaped package names and notebook names are interpolated directly into innerHTML assignments. An attack...
CVE-2026-9496 vulnerabilities
Vulnerabilities for packages: graalvm, lerna, prism...
Linux Distros Unpatched Vulnerability : CVE-2026-40205
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the...
@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55855 via mariadb (>=3.3.0, <=3.3.2)
mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55855 Source advisory: OSV:GHSA-G5XC-5W98-JFVM...
@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +39 more potentially affected by CVE-2026-55855 via mariadb (>=3.4.0, <=3.4.5)
mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =0.112.0 and more Source cves: CVE-2026-55855 Source advisory: OSV:GHSA-G5XC-5W98-JFVM...
CVE-2026-55688 vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, tez...
GHSA-MCJ4-MPHF-J9FF vulnerabilities
Vulnerabilities for packages: cloudbeat...
CLSA-2026-1787867443 TuxCare security update for 206 packages (4 CVEs)
TuxCare rebuilt 206 packages to address 4 CVEs. Fixed in 3.5.9-tuxcare.7...
GO-2026-6293 vulnerabilities
Vulnerabilities for packages: temporal-fips, temporal-ui-server, temporal, falcosidekick-ui, kube-metrics-adapter, falcosidekick-ui-fips, kube-metrics-adapter-fips, temporal-ui-server-fips, listmonk...
CLSA-2026-1787846138 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.8...
CLSA-2026-1787835578 TuxCare security update for 3 packages (2 CVEs)
TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...
golang security, bug fix, and enhancement update
An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...