170521 matches found
ROOT-OS-DEBIAN-11-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root
Root has patched CVE-2026-60005 in the nginx package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6653 CVE-2026-6653 in libxml2 - Patched by Root
Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34475 CVE-2026-34475 in varnish - Patched by Root
Root has patched CVE-2026-34475 in the varnish package for Root:Debian:11. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34073 CVE-2026-34073 in cryptography - Patched by Root
Root has patched CVE-2026-34073 in the cryptography package for Root:PyPI. Multiple fixed versions available...
PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
Summarypraisonai/browser/server.py validates incoming WebSocket connections using a Chromeextension Origin check. The regex chrome-extension://a-z0-932 is applied withre.match, which only anchors at the start of the string, not the end. Any Originheader with more than 32 alphanumeric characters...
praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
Summarypraisonaiagents.tools.webcrawltools.webcrawl validates the initial URL and blocks direct loopback/private destinations by default, but the default httpx fallback still uses httpx.Clientfollowredirects=True and does not revalidate redirect targets.An attacker-controlled public URL can pass...
PYSEC-2026-3900 praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets
Summary praisonaiagents.tools.webcrawltools.webcrawl validates the initial URL and blocks direct loopback/private destinations by default, but the default httpx fallback still uses httpx.Clientfollowredirects=True and does not revalidate redirect targets. An attacker-controlled public URL can pas...
OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
PYSEC-2026-3852 OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information such as iSCSI credentials. The PATCH outcome is a security issue; the POST outcome is not a security issue...
CVE-2026-61915
A flaw was found in cyrus-imapd. An authenticated calendar user could trigger a double-free vulnerability in the Cyrus CalDAV worker. By sending a specially crafted PATCH request that includes PATCH-ACTION="BYPARAM@..." against a resource with two or more properties of the matched kind, the memor...
ROOT-APP-MAVEN-CVE-2024-50379 CVE-2024-50379 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2024-50379 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-34483 CVE-2026-34483 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-34483 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-48988 CVE-2025-48988 in org.apache.tomcat:tomcat-catalina - Patched by Root
Root has patched CVE-2025-48988 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-34981 CVE-2023-34981 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2023-34981 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-38286 CVE-2024-38286 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2024-38286 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-34750 CVE-2024-34750 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2024-34750 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-52520 CVE-2025-52520 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2025-52520 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...