1405744 matches found
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-W62V-XXXG-MG59 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-P63J-VCC4-9VMV vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-M99W-X7HQ-7VFJ vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-4C39-4CCG-62R3 vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-64646 vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-64641 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-WH89-7897-X99H vulnerabilities
Vulnerabilities for packages: apicurio-registry...
CVE-2026-62835
creationtimestamp| type| source ---|---|--- 2026-07-24 20:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a 2026-07-24 20:45:57+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421 2026-07-24 22:01:36+00:00| seen|...
CVE-2026-48021
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...
CVE-2026-48037
Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...
CVE-2026-57530 Milkdown < 7.21.3 Stored XSS via javascript: URL in link href
Milkdown before 7.21.3 contains a stored cross-site scripting vulnerability in the @milkdown/preset-commonmark and @milkdown/components packages that allows attackers with document write access to execute arbitrary JavaScript in the browser context of any user who opens the document or clicks a...
CVE-2026-48037
CVE-2026-48037 affects Hulumi, specifically accounts using pre-1.4.0 AccountFoundation and related baseline components. The vulnerability arises from reuse paths that import existing AWS GuardDuty and Security Hub resources without verifying their operational status, allowing deployments to appea...
CVE-2026-48037 Hulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture
Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...
CVE-2026-48036
Hulumi drift classifier (package @hulumi/drift)
CVE-2026-48033
CVE-2026-48033 affects Hulumi before version 1.4.0. The vulnerability arises in the policy packs component: policy rules incorrectly trust URNs and can be bypassed when a developer names a resource with a trusted substring in the Pulumi-URN, allowing exemptions to be applied to resources that sho...
GO-2026-5566 Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install in helm.sh/helm
Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install in helm.sh/helm...
GO-2026-5775 Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi...