GHSA-54W4-5MRC-HFP8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FHC2-C9VH-XRG3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-PP6F-JF25-X95P vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-CPFR-CVMP-53MX vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-HRH9-M4MW-766H vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XJ6V-33Q6-WVXJ vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XJFQ-6RHW-XJ37 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QCXP-GM7M-4J5V vulnerabilities

Vulnerabilities for packages: apicurio-registry...

SUSE CVE-2024-53412

Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution via injection of malicious payloads into the Port field...

[SECURITY] Fedora 43 Update: pack-0.40.8-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

SUSE CVE-2025-64431

Zitadel is an open source identity management platform. Versions 4.0.0-rc.1 through 4.6.2 are vulnerable to secure Direct Object Reference IDOR attacks through its V2Beta API, allowing authenticated users with specific administrator roles within one organization to access and modify data belongin...

PT-2026-66778

Name of the Vulnerable Software and Affected Versions aap-gateway affected versions not specified Description A flaw in the aap-gateway component of Ansible Automation Platform's Event-Driven Ansible EDA allows an unauthenticated remote attacker to bypass mutual Transport Layer Security mTLS...

RHCOS 4 : OpenShift Container Platform 4.15.67 (RHSA-2026:43225)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:43225 advisory. - google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation...

CVE-2026-18141: Improper Certificate Validation

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CI/CD Pipeline Configuration Alteration

The vulnerability of the scheduling component of the CI/CD pipeline API for a Git-based software platform relates to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow an attacker to remotely alter the CI/CD configuration...

Portainer Unprotected Registration Data Access

The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

Grafana Monitoring Resource Consumption DoS

The vulnerability of the Grafana monitoring and observation platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Node.js Brace Expansion Resource Consumption DoS

The vulnerability of the brace-expansion library on the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

GitLab XSS ()

The vulnerability of the page display mechanism for software-based programming platforms based on Git, which is used for collaborative code development in GitLab CE/EE, is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perfor...

installer v13.31.1

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...