171327 matches found
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: flatpak-builder security update
An update for flatpak-builder is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
CVE-2026-109341
SurrealDB versions prior to 3.3.0 are vulnerable to an authorization bypass that allows users with table-level write permissions to access SELECT-restricted fields . The root cause is the resolution of JSON Patch pointers against an unreduced record, which can be exploited to copy hidden fields i...
EUVD-2026-97643
SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...
CVE-2026-108951
LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...
ROOT-APP-NUGET-CVE-2025-26646 CVE-2025-26646 in Microsoft.Build.Tasks.Core - Patched by Root
Root has patched CVE-2025-26646 in the Microsoft.Build.Tasks.Core package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NUGET-CVE-2025-55247 CVE-2025-55247 in Microsoft.Build.Utilities.Core - Patched by Root
Root has patched CVE-2025-55247 in the Microsoft.Build.Utilities.Core package for Root:NuGet. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-39244 CVE-2026-39244 in adm-zip - Patched by Root
Root has patched CVE-2026-39244 in the adm-zip package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API
LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...
CVE-2026-108951 LavaLite CMS through 10.1.2 Authorization Bypass via User Update API
LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...
CVE-2026-108951
LavaLite CMS versions through 10.1.2 are vulnerable to an authorization bypass in the user update API. The flaw stems from an improper check within the AbstractRequest isWorkflow() function. This allows authenticated low-privileged users to send a PATCH request to the user update route, using a t...
ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root
Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-49128 CVE-2025-49128 in com.fasterxml.jackson.core:jackson-core - Patched by Root
Root has patched CVE-2025-49128 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-0122 CVE-2022-0122 in node-forge - Patched by Root
Root has patched CVE-2022-0122 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-WXGW-QJ99-44C2 GHSA-wxgw-qj99-44c2 in node-forge - Patched by Root
Root has patched GHSA-wxgw-qj99-44c2 in the node-forge package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root
Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-50447 CVE-2023-50447 in pillow - Patched by Root
Root has patched CVE-2023-50447 in the pillow package for Root:PyPI. Multiple fixed versions available...