143858 matches found
GHSA-P88M-4JFJ-68FV
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:05+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
OpenClaw: Node pairing reconnection could confuse approval scope state
Summary Node pairing reconnection could confuse approval scope state. In affected versions, a paired or reconnecting node session could mutate pairing state in a way that changed the approval scope decision. This advisory is scoped to the named feature and configuration. It does not change...
@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53810 via openclaw (>=2026.3.22, <=2026.5.7)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53810 Source advisory: OSV:GHSA-V6R2-JH58-XX6W...
@0xwork/connect (>=0.1.0, <=0.1.7), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +27 more potentially affected by CVE-2026-53822 via openclaw (>=2026.3.22, <=2026.5.7)
openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-53822 Source advisory: OSV:GHSA-2J8V-HWGC-X698...
GHSA-4J3C-42XV-3F84 vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-8R5M-3F66-QPR3 vulnerabilities
Vulnerabilities for packages: vault-fips, splunk-otel-collector, splunk-otel-collector-fips, vault...
GHSA-8P83-CPFG-FJ3G vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-Q82V-H4RQ-5C86 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-XR3X-62QW-VC4W vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-MJCP-RJ3C-36FR vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-MQ23-VVG7-XFM4 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-9C5P-35GJ-JQP4 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-3PX7-C4J3-576R vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-4G2F-XCPH-2335 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...
GHSA-XCHC-CQWG-G76Q vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, kubeflow-pipelines, argo-workflows-fips...
GHSA-JXPM-75MH-9FP7 vulnerabilities
Vulnerabilities for packages: conftest, gatekeeper, argo-cd, cluster-api-helm-controller, gogatekeeper, kyverno, trivy, eksctl, helm-mapkubeapis, rancher-fleet, kyverno-notation-aws, helm-set-status, kots, linkerd2, chartmuseum, xeol, cilium-cli, tw, headlamp, ratify, maru, rancher-helm, rancher,...
PYSEC-2026-688 JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
Impact Untrusted notebook can execute code on load. This is a remote code execution, but requires user action to open a notebook. Patches Patched in the following versions: 3.1.4, 3.0.17, 2.3.2, 2.2.10, 1.2.21. References OWASP Page on Restricting Form Submissions For more information If you have...
CGA-495M-3359-5FRG
Bulletin has no description...