60018 matches found
CVE-2026-84137 vulnerabilities
Vulnerabilities for packages: firefox...
SUSE CVE-2026-35511
unknown...
SUSE CVE-2026-49446
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...
SUSE CVE-2026-53658
Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentication into the LDAP uid search UserFilter without escaping LDAP metacharacters...
SUSE CVE-2026-54167
Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...
SUSE CVE-2026-55061
uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGETEDITOR or EDITOR with strings.Spliteditor, " " and passes every space-delimited suffix as an argument to the selected editor executable. An attacker who can...
SUSE CVE-2026-55062
uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that directory. The resulting path is passed ...
SUSE CVE-2026-85047
Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2026-85498
unknown...
GHSA-83VM-P52W-F9PW vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
CVE-2026-78680 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-71513 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-WW6M-CW3F-Q94G vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-72818 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-81723 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-10142 vulnerabilities
Vulnerabilities for packages: mlrun-fips, mlrun...
GHSA-M28W-2PQF-7QGJ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, argo-workflows, arangodb...
CVE-2026-81722 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-CW6X-M8JW-QMRH vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-80112
creationtimestamp| type| source ---|---|--- 2026-09-04 20:01:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupqxz52e32z 2026-09-08 03:20:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muy2uxeu422b 2026-09-08 03:20:06+00:00| seen|...