24066 matches found
VulnCheck KEV: CVE-2024-50340
symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...
From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp
The Signal protocol is a prominent messaging protocol that secures communication for billions of users. It powers WhatsApp, the most widely used messaging application worldwide, and the Signal app, popular among privacy-conscious users. Extensive research in the computational and Dolev-Yao settin...
PT-2026-89623
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can cause a denial of service by manipulating runtime caches. This is possible due to an insecure direct object reference, which occurs when an...
Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients
Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including apikey — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...
GHSA-FXG7-897C-57MP Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients
Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including apikey — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...
NPM: Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients
NPM: Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients vulnerability discovered by ? in WordPress Npm nuxt-ollama versions = 1.2.26, 1.3.1...
GO-2026-6302 Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2
Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2...
RHEL 9 : image-builder (RHSA-2026:65886)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65886 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes:...
PT-2026-89210
Name of the Vulnerable Software and Affected Versions nuxt-ollama versions prior to 1.3.1 Description A design flaw in src/module.ts causes the module to unconditionally merge all options, including the api key, into the public runtime configuration runtimeConfig.public.ollama. Because Nuxt...
EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-3397)
According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...
CVE-2026-69819
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
EUVD-2026-73053
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-69819
CVE-2026-69819 is a CRITICAL (CVSS 3.1: 9.8) vulnerability in the Microsoft RPC Runtime Library , caused by an out-of-bounds write that allows an unauthenticated, remote attacker to execute arbitrary code over a network with no user interaction required. The attack vector is network-based with lo...
aindy-runtime (>=1.8.0, <=2.6.0), docassemble-base (1.10.6) +7 more potentially affected by CVE-2026-62383 via nltk (>=3.10.0, <=3.10.1)
nltk PYPI version =3.10.0, =1.8.0, =0.2.12, =4.0.0, =0.2.0, =0.2.15 Source cves: CVE-2026-62383 Source advisory: GHSA-3HHW-38PF-PXJ6...
aindy-runtime (>=1.8.0, <=2.6.0), docassemble-base (1.10.6) +7 more potentially affected by CVE-2026-62384 via nltk (>=3.10.0, <=3.10.1)
nltk PYPI version =3.10.0, =1.8.0, =0.2.12, =4.0.0, =0.2.0, =0.2.15 Source cves: CVE-2026-62384 Source advisory: OSV:GHSA-F833-7JW8-XWRV...
aindy-runtime (>=1.8.0, <=2.6.0), docassemble-base (1.10.6) +7 more potentially affected by CVE-2026-62384 via nltk (>=3.10.0, <=3.10.1)
nltk PYPI version =3.10.0, =1.8.0, =0.2.12, =4.0.0, =0.2.0, =0.2.15 Source cves: CVE-2026-62384 Source advisory: GHSA-F833-7JW8-XWRV...
RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.7
Red Hat OpenShift Service Mesh 3.3.7 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.3....
CLEANSTART-2026-XP70950 Hono is a Web application framework that provides support for any JavaScript runtime
Multiple security vulnerabilities affect the langfuse package. Hono is a Web application framework that provides support for any JavaScript runtime. See references for individual vulnerability details...
