31208 matches found
ROOT-OS-DEBIAN-13-CVE-2025-68343 CVE-2025-68343 in linux - Patched by Root
Root has patched CVE-2025-68343 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-64076 CVE-2026-64076 in linux - Patched by Root
Root has patched CVE-2026-64076 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2018-17977 CVE-2018-17977 in linux - Patched by Root
Root has patched CVE-2018-17977 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-31546 CVE-2026-31546 in linux - Patched by Root
Root has patched CVE-2026-31546 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-38535 CVE-2025-38535 in linux - Patched by Root
Root has patched CVE-2025-38535 in the linux package for Root:Debian:13. Multiple fixed versions available...
GHSA-3RRR-JR9J-H3Q3 Mermaid Architecture diagrams are vulnerable to prototype pollution
Rendering an untrusted architecture-beta diagram lets the diagram author write an arbitrary property with the value horizontal or vertical onto Object.prototype. A group id of proto is accepted as a valid parent. Impact Any code in the same realm that reads a property of that name from an arbitra...
Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template
Impact The default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients Patches This has been fixed in 5.74.3 and 6.24.2...
CVE-2026-64662
Summary of CVE-2026-64662 (Statamic) : Statamic, a Laravel and Git powered CMS, had an issue where an authenticated Control Panel user could view content from entries they were not permitted to view, including entry content and custom field values, across any collection and including unpublished ...
Statamic: Account takeover via OAuth email matching without email-verification check
Impact When OAuth login is enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user — potentially including a super admin — without their password. Exploitation requires OAuth to be explicitly enabled with such a...
Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence
Impact An authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belongs to an existing user, without having permission to view users. The endpoint only exposed user existence, not any of its data. Patches This has been...
Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth
Summary There is a high severity vulnerability in Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares. The fix for CVE-2026-33433 stripped canonical-cased spoofed identity headers e.g. X-Auth-User before writing Traefik's own value, but did not account for underscore-variant header names...
EUVD-2026-53855
The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the chash parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider IdP that omits the chash, the RP becomes vulnerable to Authorization Code...
ROOT-OS-DEBIAN-12-CVE-2025-38401 CVE-2025-38401 in linux - Patched by Root
Root has patched CVE-2025-38401 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39753 CVE-2025-39753 in linux - Patched by Root
Root has patched CVE-2025-39753 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-49921 CVE-2024-49921 in linux - Patched by Root
Root has patched CVE-2024-49921 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-40272 CVE-2025-40272 in linux - Patched by Root
Root has patched CVE-2025-40272 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-46275 CVE-2026-46275 in linux - Patched by Root
Root has patched CVE-2026-46275 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-63845 CVE-2026-63845 in linux - Patched by Root
Root has patched CVE-2026-63845 in the linux package for Root:Debian:12. Multiple fixed versions available...