35 matches found
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: parseable, qdrant, zed, atuin, garage, pnpm, deno, workmux, lakekeeper, vector, bootc, nushell...
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: deno, zed, nushell, qdrant, atuin, vector, pnpm, parseable...
CVE-2026-32641
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
EUVD-2026-83265
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641
Parseable , a log analytics platform for high-volume data ingestion, is affected by an unauthenticated denial-of-service vulnerability in versions prior to 3.0.0 . The root cause is an unchecked unwrap() call in src/handlers/http/middleware.rs while parsing the x-amz-firehose-common-attributes he...
CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
CVE-2026-32641: Uncaught Exception
Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: wasmtime, wasm-pack, zizmor, kdash, lychee, shadowsocks-rust, sccache, qdrant, tealdeer, wasmcloud, sqlx, zed, wadm, sdp-k8s-injector, samply, cargo-audit, zola, linkerd2-proxy, uv, xh, rustls-ffi, rustup, deno, nushell, linkerd-extension-init, rye, wash, ntpd-rs,...
[SECURITY] Fedora 43 Update: gpsd-3.26.1-7.fc43
gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...
CVE-2026-56783 Parseable < 2.9.2 - Cleartext Credential Exposure in Notification Target API
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including...
CVE-2026-56783: Insufficiently Protected Credentials
Parseable before 2.9.2 contains an information disclosure vulnerability in the notification-target API endpoints that returns webhook tokens and basic-auth credentials in cleartext due to commented-out secret-masking functionality. Any authenticated user with the GetAlert action, including...
GHSA-2F9F-GQ7V-9H6M vulnerabilities
Vulnerabilities for packages: vector, parseable...
CVE-2026-43868 vulnerabilities
Vulnerabilities for packages: vector, parseable...
GHSA-2F9F-GQ7V-9H6M vulnerabilities
Vulnerabilities for packages: parseable, vector...
CVE-2026-43868 vulnerabilities
Vulnerabilities for packages: parseable, vector...
GHSA-XHJ4-VRGC-HR34 vulnerabilities
Vulnerabilities for packages: qdrant, parseable...