59668 matches found
CVE-2026-92467 microservices-platform through 6.0.0 Unverified Password Change via /users/password
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...
CVE-2026-92466 microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...
CVE-2026-92466 microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...
CVE-2026-92467
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint. The root cause is the omission of a current-password verification check in the user service layer (SysUserServiceImpl), allowing any authenticated user to supply ...
EUVD-2026-80704
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...
CVE-2026-92466
CVE-2026-92466 affects zlt2000 microservices-platform through version 6.0.0 . The root cause is the configuration flag zlt.security.auth.urlPermission.enable defaulting to false , which disables all URL-level permission checks after a user has authenticated. As a result, any authenticated user wi...
CVE-2026-92467 microservices-platform through 6.0.0 Unverified Password Change via /users/password
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...
EUVD-2026-80705
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...
CVE-2026-92467 microservices-platform through 6.0.0 Unverified Password Change via /users/password
zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an arbitrary user id in the request bod...
CVE-2026-92466 microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where the zlt.security.auth.urlPermission.enable flag defaults to false, disabling all permission checks after authentication. Authenticated users with no roles can access administrative APIs including use...
@agent-tool-platform/agent-kit (>=0.2.0, <=0.4.0), @agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1) +600 more potentially affected by CVE-2026-92081 via fastify (>=5.0.0, <=5.12.4)
fastify NPM version =5.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =1.0.4, =0.4.0, =0.0.0-vBETA-20260417080530, =0.0.1, =1.60.2, =1.0.0, =0.0.0, =2.0.1, =2.0.5 and more Source cves: CVE-2026-92081 Source advisory: SNYK:JS-FASTIFY-19883909...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.47 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.47 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.47 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.47 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.47 security and extras update
Red Hat OpenShift Container Platform release 4.19.47 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...
testkube v2.13.2
The Open Testing Platform for AI-driven Engineering Teams Testkube provides a single platform for defining, running and analyzing automated tests, using your existing testing tools/scripts, running in your Kubernetes infrastructure...
CVE-2026-78132 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-HH8M-FM6V-7CVG vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
GHSA-F47W-MRG9-G9P2 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-pages, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce-fips...
