141 matches found
EUVD-2026-5530
In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory...
CVE-2026-1301 Out-of-bounds Write in o6 Automation GmbH Open62541
In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory...
CVE-2026-1301
CVE-2026-1301 pertains to o6 Automation GmbH Open62541 (Open62541/Open62541-like builds) where in PubSub with JSON decoding enabled a crafted JSON message can cause a heap-allocated array write beyond bounds before authentication, leading to a process crash and memory corruption. Affected compone...
CVE-2026-1301 Out-of-bounds Write in o6 Automation GmbH Open62541
In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, reliably crashing the process and corrupting memory...
PT-2026-6627
Name of the Vulnerable Software and Affected Versions Versions prior to 2026-1301 Description A specially crafted JSON message can cause a heap overflow in the PubSub JSON decoder before authentication. This can lead to a process crash and memory corruption. The issue occurs in builds with PubSub...
GHSA-M27R-M6RX-MHM4 Laravel Redis Horizontal Scaling Insecure Deserialization
Impact This vulnerability affects Laravel Reverb versions prior to v1.7.0 when horizontal scaling is enabled REVERBSCALINGENABLED=true. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication. With horizontal scaling enabled, Reverb...
Laravel Redis Horizontal Scaling Insecure Deserialization
Impact This vulnerability affects Laravel Reverb versions prior to v1.7.0 when horizontal scaling is enabled REVERBSCALINGENABLED=true. The exploitability of this vulnerability is increased because Redis servers are commonly deployed without authentication. With horizontal scaling enabled, Reverb...
PT-2026-3792
Name of the Vulnerable Software and Affected Versions Laravel Reverb versions 1.6.3 and below Description Laravel Reverb, a real-time WebSocket communication backend for Laravel applications, has an issue where it passes data from the Redis channel directly into PHP’s unserialize function without...
Malicious code in @trigo/atrix-pubsub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774898dc5178ad4bd2128a0ec966ceb51a9cc46c9884a0618869d7525c96260c The package @trigo/atrix-pubsub was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198849
Malicious code in @trigo/atrix-pubsub npm...
MAL-2025-190828 Malicious code in @trigo/atrix-pubsub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774898dc5178ad4bd2128a0ec966ceb51a9cc46c9884a0618869d7525c96260c The package @trigo/atrix-pubsub was found to contain malicious code. Source: ghsa-malware...
EUVD-2019-0130
Malware in sbrugna...
EUVD-2020-25623
Malware in sbrugna...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: newrelic-nri-statsd, bank-vaults, addon-resizer, blobfuse2, secrets-store-csi-driver-provider-aws, confluent-common-docker, vault-k8s, vault-benchmark, octo-sts, sftpgo-plugin-pubsub, cloud-provider-aws, gitsign, shfmt, container-object-storage-interface,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: newrelic-nri-statsd, bank-vaults, addon-resizer, blobfuse2, secrets-store-csi-driver-provider-aws, confluent-common-docker, vault-k8s, vault-benchmark, octo-sts, sftpgo-plugin-pubsub, cloud-provider-aws, gitsign, shfmt, container-object-storage-interface,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: octo-sts, nemo, vexctl, kubeflow-katib, prometheus-node-exporter-fips, git-lfs, gostatsd, newrelic-nri-statsd, prometheus-process-exporter, azuredisk-csi-fips, blobfuse2, nvidia-nsight-compute-13.1, gcp-compute-persistent-disk-csi-driver-fips,...
Linux Distros Unpatched Vulnerability : CVE-2010-0044
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web...
Linux Distros Unpatched Vulnerability : CVE-2019-1000021
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage ...