262021 matches found
GHSA-8487-52VC-GGW6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4CWJ-QJ59-C6VC vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6WPC-625G-QWG8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8HH5-HMCM-CGRX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8HPW-6M6F-9F87 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-8PV3-6RR2-F4R8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9J3Q-3R6G-76C2 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GRFX-V4XP-4M33 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17741 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17952 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-37XG-V5FF-WMH2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17887 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17948 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17767 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17869 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3Q78-FQJ5-G3MC vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-18954
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode...
CVE-2026-18954 Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode...
CVE-2026-17623
creationtimestamp| type| source ---|---|--- 2026-08-05 19:54:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecmaqf5a23...
CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts
Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...