270636 matches found
CVE-2026-59733 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-8C48-Q9WJ-3W37 vulnerabilities
Vulnerabilities for packages: rclone-fips, telegraf...
GHSA-FQJ9-69PF-6PJG vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-4VR5-P2GC-H23P vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-59732 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-H7PC-VWP9-298G vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
GHSA-923M-GV2P-W5QP vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-horizon-2026.1-fips...
CVE-2026-53090 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu-melange...
CVE-2026-53078 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu-melange...
CVE-2026-23272 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-vmware, linux-qemu, linux-aws, linux-gcp...
GHSA-F23P-VX2J-J53R vulnerabilities
Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, kibana, langfuse, wazuh-dashboard...
GHSA-54FX-42GC-7VW4 vulnerabilities
Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, kibana, langfuse, wazuh-dashboard...
CVE-2026-71848 vulnerabilities
Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, kibana, langfuse, wazuh-dashboard...
GHSA-79QM-7RJ5-M7R9 vulnerabilities
Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, kibana, langfuse, wazuh-dashboard...
CVE-2026-72901
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy allows an authenticated low-privilege member to execute arbitrary commands on the control-plane host because the volumeName field accepted by volumeBackup.create and volumeBackup.runManually is interpolated...
CVE-2026-72883
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, apps/dokploy/server/wss/docker-container-logs.ts, and apps/dokploy/server/wss/docker-stats.ts validat...
CVE-2026-72877
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the dockerImage field is interpolated without quoting into shell commands in buildRemoteDocker in packages/server/src/utils/providers/docker.ts and is validated only as an optional string. An authenticated user with...
CVE-2026-71965
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public k...
CVE-2026-69114
Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel. Authenticated users with MANAGEMESSAGES permission in any controlled channel can delete...