31244 matches found
ROOT-OS-DEBIAN-13-CVE-2025-40147 CVE-2025-40147 in linux - Patched by Root
Root has patched CVE-2025-40147 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68180 CVE-2025-68180 in linux - Patched by Root
Root has patched CVE-2025-68180 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-38514 CVE-2025-38514 in linux - Patched by Root
Root has patched CVE-2025-38514 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-64076 CVE-2026-64076 in linux - Patched by Root
Root has patched CVE-2026-64076 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-38623 CVE-2025-38623 in linux - Patched by Root
Root has patched CVE-2025-38623 in the linux package for Root:Debian:13. Multiple fixed versions available...
GHSA-3RRR-JR9J-H3Q3 Mermaid Architecture diagrams are vulnerable to prototype pollution
Rendering an untrusted architecture-beta diagram lets the diagram author write an arbitrary property with the value horizontal or vertical onto Object.prototype. A group id of proto is accepted as a valid parent. Impact Any code in the same realm that reads a property of that name from an arbitra...
Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template
Impact The default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the configured recipients Patches This has been fixed in 5.74.3 and 6.24.2...
CVE-2026-64662
Summary of CVE-2026-64662 (Statamic) : Statamic, a Laravel and Git powered CMS, had an issue where an authenticated Control Panel user could view content from entries they were not permitted to view, including entry content and custom field values, across any collection and including unpublished ...
Statamic: Account takeover via OAuth email matching without email-verification check
Impact When OAuth login is enabled with a provider that does not guarantee verified email addresses, an unauthenticated attacker could sign in as an existing user — potentially including a super admin — without their password. Exploitation requires OAuth to be explicitly enabled with such a...
Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence
Impact An authenticated Control Panel user could use an endpoint intended for the user creation wizard to determine if a given email address belongs to an existing user, without having permission to view users. The endpoint only exposed user existence, not any of its data. Patches This has been...
Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth
Summary There is a high severity vulnerability in Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares. The fix for CVE-2026-33433 stripped canonical-cased spoofed identity headers e.g. X-Auth-User before writing Traefik's own value, but did not account for underscore-variant header names...
EUVD-2026-53855
The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the chash parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider IdP that omits the chash, the RP becomes vulnerable to Authorization Code...
ROOT-OS-DEBIAN-12-CVE-2023-23039 CVE-2023-23039 in linux - Patched by Root
Root has patched CVE-2023-23039 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-56692 CVE-2024-56692 in linux - Patched by Root
Root has patched CVE-2024-56692 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-23178 CVE-2026-23178 in linux - Patched by Root
Root has patched CVE-2026-23178 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-42158 CVE-2024-42158 in linux - Patched by Root
Root has patched CVE-2024-42158 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-63845 CVE-2026-63845 in linux - Patched by Root
Root has patched CVE-2026-63845 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-46323 CVE-2026-46323 in linux - Patched by Root
Root has patched CVE-2026-46323 in the linux package for Root:Debian:12. Multiple fixed versions available...