6540 matches found
CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-10
CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-10. A patched version of the package is available...
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6. A patched version of the package is available...
Exploit for CVE-2026-52832
CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard...
CVE-2026-47768 nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...
CVE-2026-47726 nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 — handleGetAuditLog does no admin check. The route is bearer-auth gated only; any operator API key returns the full audit log via store.ListAuditEntries up to...
CVE-2026-47726 nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 — handleGetAuditLog does no admin check. The route is bearer-auth gated only; any operator API key returns the full audit log via store.ListAuditEntries up to...
CVE-2026-48025
CVE-2026-48025 (nebula-mesh) describes a memory-safety issue in versions prior to 0.3.7 where decrypted CA private keys (ed25519.PrivateKey) are constructed and stored in memory by the CAManager and not wiped after use. The problem arises when internal/pki/resolver.go constructs CAManager with th...
@wakaru/cli arbitrary file write during bundle unpack
Impact @wakaru/cli is vulnerable to arbitrary file write when unpacking a crafted JavaScript bundle with --unpack. Bundle-controlled module filenames were sanitized before writing extracted modules to the output directory. A crafted filename containing overlapping path traversal characters, such ...
GHSA-7WPJ-VVMV-PGM8 @wakaru/cli arbitrary file write during bundle unpack
Impact @wakaru/cli is vulnerable to arbitrary file write when unpacking a crafted JavaScript bundle with --unpack. Bundle-controlled module filenames were sanitized before writing extracted modules to the output directory. A crafted filename containing overlapping path traversal characters, such ...
GHSA-4J38-RW27-97GX org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
Impact It's possible to forge a request to delete a message. Patches The problem has been patched in version 2.0-rc-1 of Discussion Extension. Workarounds There's no easy workaround except upgrading. References https://jira.xwiki.org/browse/DISCUSSION-22 For more information If you have any...
ROOT-APP-NPM-CVE-2026-54289 CVE-2026-54289 in @rootio/hono - Patched by Root
Root has patched CVE-2026-54289 in the @rootio/hono package for Root:npm. Multiple fixed versions available...
GHSA-JVXP-QMX7-GJPX Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service
Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...
Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service
Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...
GHSA-5QJQ-93H5-HRGP pypdf: Possible large memory usage for wrong image dimensions
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...
Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers
Summary The exported getToken helper next-auth/jwt and @auth/core/jwt can throw an uncaught exception when it reads a malformed Authorization: Bearer … header. When no session cookie is present, getToken URL-decodes the bearer value before validating it, and malformed percent-encoding causes the...
CVE-2026-42533 affecting package nginx for versions less than 1.28.3-8
CVE-2026-42533 affecting package nginx for versions less than 1.28.3-8. A patched version of the package is available...
CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15
CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...
CVE-2026-59886 affecting package python-pyasn1 for versions less than 0.4.8-3
CVE-2026-59886 affecting package python-pyasn1 for versions less than 0.4.8-3. A patched version of the package is available...