332 matches found
CVE-2026-15656
CVE-2026-15656 affects IBM Maximo Application Suite (MAS) 9.2, 9.1, and 9.0. The issue is that authorization tokens and session cookies are not marked with the Secure attribute, allowing cookies to be exposed if a user visits an http link or a site containing such a link. As described in the conn...
Important: Red Hat Security Advisory: Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3
Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
ROOT-APP-NPM-CVE-2026-48712 CVE-2026-48712 in protobufjs - Patched by Root
Root has patched CVE-2026-48712 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44290 CVE-2026-44290 in protobufjs - Patched by Root
Root has patched CVE-2026-44290 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44289 CVE-2026-44289 in protobufjs - Patched by Root
Root has patched CVE-2026-44289 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44293 CVE-2026-44293 in protobufjs - Patched by Root
Root has patched CVE-2026-44293 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-45740 CVE-2026-45740 in protobufjs - Patched by Root
Root has patched CVE-2026-45740 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44292 CVE-2026-44292 in protobufjs - Patched by Root
Root has patched CVE-2026-44292 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in protobufjs - Patched by Root
Root has patched CVE-2026-44288 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-41242 CVE-2026-41242 in protobufjs - Patched by Root
Root has patched CVE-2026-41242 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44294 CVE-2026-44294 in protobufjs - Patched by Root
Root has patched CVE-2026-44294 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-54269 CVE-2026-54269 in protobufjs - Patched by Root
Root has patched CVE-2026-54269 in the protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44291 CVE-2026-44291 in protobufjs - Patched by Root
Root has patched CVE-2026-44291 in the protobufjs package for Root:npm. Multiple fixed versions available...
Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
Summary IBM Maximo Application Suite uses axios-1.15.2.tgz, protobufjs-8.0.1.tgz, protobufjs-8.2.0.tgz and undici-7.26.0.tgz which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-6734, CVE-2026-9678, CVE-2026-9679, CVE-2026-9697, CVE-2026-54270, CVE-2026-45740,...
Security Bulletin: There are vulnerabilities in jackson-databind-2.18.6.jar, protobufjs-8.3.0.tgz and fast-uri-3.1.2.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite which are affected by multiple CVEs
Summary There are vulnerabilities in jackson-databind-2.18.6.jar, protobufjs-8.3.0.tgz and fast-uri-3.1.2.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite which are affected by multiple CVEs mentioned below. Vulnerability Details CVEID:CVE-2026-48712 DESCRIPTION: protobuf...
ROOT-APP-NPM-CVE-2026-59877 CVE-2026-59877 in @rootio/protobufjs - Patched by Root
Root has patched CVE-2026-59877 in the @rootio/protobufjs package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-36665 CVE-2023-36665 in @rootio/protobufjs - Patched by Root
Root has patched CVE-2023-36665 in the @rootio/protobufjs package for Root:npm. Multiple fixed versions available...
SUSE CVE-2026-59877
protobufjs compiles protobuf definitions into JavaScript JS functions. Prior to 7.6.5 and 8.6.6, protobufjs parsed option names by advancing through schema tokens until reaching an = token without checking for end of input, so a crafted .proto schema that opens an option declaration and ends...
CVE-2026-59877
A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions ...
