54102 matches found
GO-2026-5817 Mattermost doesn't validate file ownership and access control in github.com/mattermost/mattermost-server
Mattermost doesn't validate file ownership and access control in github.com/mattermost/mattermost-server...
PYSEC-2026-1361 OpaMiddleware does not filter HTTP OPTIONS requests
Summary HTTP OPTIONS requests are always allowed by OpaMiddleware, even when they lack authentication, and are passed through directly to the application. The maintainer uncertain whether this should be classed as a "bug" or "security issue" – but is erring on the side of "security issue" as an...
MAL-2026-7391 Malicious code in rewactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zwagq (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wbotmwoy27a3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandscal (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandhgx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tryf2zz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in swlicap7a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sprox-c160-1fossil (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slx55008 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnsq09 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in skytestpluginsdf (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oaklfwk5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mvv6 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8079 Malicious code in m8405v1rjo (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lp489 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lambproxy2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in enc30716 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
PYSEC-2026-1033 TensorFlow vulnerable to integer overflow in math ops
Impact When RangeSize receives values that do not fit into an int64t, it crashes. cpp auto size = std::isintegral::value ? Eigen::numext::abslimit - start + Eigen::numext::absdelta - T1 / Eigen::numext::absdelta : Eigen::numext::ceil Eigen::numext::abslimit - start / delta; // This check does not...