1246 matches found
ROOT-OS-ALPINE-322-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root
Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, a client-side heap buffer overflow occurred in the RDPGFX ClearCodec decode path, where maliciously crafted residual data caused out-of-bounds writes during color output. A malicious server could trigger a...
CVE-2026-19266 Kirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection
A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of the component review-git-diff Endpoint. Executing a manipulation of the argument args can lead to command injection. Upgrading to version 1.9.1...
CVE-2026-48120 Kakoune has a Critical RCE via Autorestore Backup Filename Injection
Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...
CVE-2026-19246
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
EUVD-2026-54680
A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function downloadimagedataurl of the file nanobot/providers/imagegeneration.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the...
CVE-2026-48007 Element Call reports full URLs of visited pages to analytics server
Element Call is a native Matrix video conferencing application. Versions 0.5.17 through 0.19.3 report analytics data to a PostHog server, when configured to by a posthog key in config.json or by the posthogApiHost and posthogApiKey URL parameters. Several fields of this data $initialpersoninfo,...
ROOT-OS-DEBIAN-13-CVE-2026-23312 CVE-2026-23312 in linux - Patched by Root
Root has patched CVE-2026-23312 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-39691 CVE-2025-39691 in linux - Patched by Root
Root has patched CVE-2025-39691 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-71133 CVE-2025-71133 in linux - Patched by Root
Root has patched CVE-2025-71133 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31731 CVE-2026-31731 in linux - Patched by Root
Root has patched CVE-2026-31731 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37887 CVE-2025-37887 in linux - Patched by Root
Root has patched CVE-2025-37887 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38574 CVE-2025-38574 in linux - Patched by Root
Root has patched CVE-2025-38574 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-39692 CVE-2025-39692 in linux - Patched by Root
Root has patched CVE-2025-39692 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-53221 CVE-2026-53221 in linux - Patched by Root
Root has patched CVE-2026-53221 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-68814 CVE-2025-68814 in linux - Patched by Root
Root has patched CVE-2025-68814 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39750 CVE-2025-39750 in linux - Patched by Root
Root has patched CVE-2025-39750 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-31570 CVE-2026-31570 in linux - Patched by Root
Root has patched CVE-2026-31570 in the linux package for Root:Debian:12. Multiple fixed versions available...