295443 matches found
CLSA-2026-1792514585 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792514584 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792514582 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
CLSA-2026-1792514583 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792514580 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792514581 TuxCare security update for @babel/plugin-transform-named-capturing-groups-regex (1 CVE)
TuxCare rebuilt @babel/plugin-transform-named-capturing-groups-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CVE-2026-113613
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
CVE-2026-112947
Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Requests containing the ?vite-wasm-instance query are handled by the internal...
CVE-2026-112947
Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by a request containing ?vite-wasm-instance. Requests containing the ?vite-wasm-instance query are handled by the internal...
Apache Traffic Server resource management error vulnerability
Versions 10.0.0 through 10.1.4 and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability stems from post-free reuse in the transaction close handler within an experimental WASM plugin, which forwards unvalidated metric IDs provided by guests to an...
Apache Traffic Server command injection vulnerability
The Apache Traffic Server versions 8.0.1 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a command injection vulnerability. This vulnerability arises from the experimental magick plugin, which allows unauthenticated clients to control the ImageMagick convert parameters under default...
Apache Traffic Server authorization issue vulnerability
Versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0 of Apache Traffic Server contain an authorization issue vulnerability. This vulnerability arises because the experimental tsmemcache plugin allows unauthenticated attackers to read, write, and delete shared pro...
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
CVE-2026-113613
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
EUVD-2026-105091
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...
CVE-2026-113613
FlexGet versions before 3.20.7 are vulnerable to a path traversal (Zip Slip) vulnerability within the decompress plugin . A remote attacker can exploit this by providing malicious zip or rar archives containing ../ sequences or absolute paths through a feed. This allows the attacker to write arbi...
CVE-2026-113613 FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin
FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can deliver zip or rar archives with ../ sequences or absolute paths through a feed, writing Python...