52844 matches found
GHSA-QQX8-2XMM-JRV8 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips, sftpgo...
GHSA-7GW9-CF7V-778F vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
CVE-2026-40260 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
PT-2026-33586
Name of the Vulnerable Software and Affected Versions SAIL versions prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979 Description The PSD codec in this cross-platform image library for loading and saving images contains a heap buffer overflow when processing images in LAB mode. The issue...
CVE-2026-40306
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue...
CVE-2026-40351 FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-based login endpoint uses TypeScript type assertion without runtime validation, allowing an unauthenticated attacker to pass a MongoDB query operator object e.g., "$ne": "" as the password field. This NoSQL...
CVE-2026-40284 WeGIA has stored XSS in listar_despachos.php
WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript via the "Destinatário" field. The payload is stored and later executed when viewing the dispatch page,...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, open-webui...
GHSA-4HGW-F49W-4349 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C9XC-4327-HW8J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X449-4QCH-5WJQ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-5900 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-26FQ-X95V-V55J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M6Q7-P4C3-835R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-88QR-F9FQ-422W vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JJ38-MP8F-H2PH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MVJ2-3QFG-7MXP vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6297 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QCVG-HWR7-R9V7 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-27144 vulnerabilities
Vulnerabilities for packages: coredns, gitaly, zabbix-agent2-fips, influx, prometheus, cert-manager, argo-cd-fips, knative-eventing, tigera-operator, datadog-agent-fips, regclient, container-object-storage-interface, go, verticadb-operator, external-secrets-operator, gitleaks,...