1156 matches found
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No...
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No...
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No...
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No...
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No...
CVE-2026-27851
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No...
PT-2026-40287
An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads...
PT-2026-40024
Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.4-1.1 Description When the safe filter is used with variable expansion, subsequent pipelines on the same string are incorrectly treated as safe. This behavior allows unsafe data to be unescaped, which can lead to...
PRISM: Generation-Time Detection and Mitigation of Secret Leakage in Multi-Agent LLM Pipelines
Multi-agent LLM systems introduce a security risk in which sensitive information accessed by one agent can propagate through shared context and reappear in downstream outputs, even without explicit adversarial intent. We formalise this phenomenon as propagation amplification, where leakage risk...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the execution of Node-based asset pipelines such as PostCSS, Babel, or TailwindCSS. An attacker can gain unauthorized access to files outside the intended project directory by executing code through these tools wh...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the execution of Node-based asset pipelines such as PostCSS, Babel, or TailwindCSS. An attacker can gain unauthorized access to files outside the intended project directory by executing code through these tools wh...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: prism, py3-captum, gitlab-rails-ce-fips, sqlpad, homepage, actions-runner, gemini-cli, saf, opensearch-dashboards, librechat, code-server, dbgate, dbgate-fips, nextcloud-server, npm, wazuh-dashboard-fips, kibana, redisinsight, tensorflow-cpu-jupyter, gitlab-rails-ce,...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, py3-jupyterlab, opensearch-dashboards, nextcloud-server, kubeflow-katib, npm, kubeflow-centraldashboard, code-server, langfuse, renovate, prism, saf, kubeflow-pipelines, argo-workflows, sqlpad...
CVE-2026-40192 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
GHSA-WHJ4-6X5X-4V2J vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
Gray-Box Poisoning of Continuous Malware Ingestion Pipelines
Modern malware detection pipelines rely on continuous data ingestion and machine learning to counter the high volume of novel threats. This work investigates a realistic gray-box poisoning threat model targeting these pipelines. Using the secmlmalware framework, we generate problem-space...
GHSA-R73J-PQJ5-W3X7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
GHSA-WJX4-4JCJ-G98J vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...