262292 matches found
CVE-2026-55170 OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions
OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorizationmodel identifier columns can compare case-distinct values such as...
Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint
Impact An authorization bypass vulnerability exists in the shop account API. The PATCH /api/v2/shop/account/orders/tokenValue/payments/paymentId endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid state STATENEW, does not...
laravel-backup-restore has an OS Command Injection during database restore
Summary A crafted backup archive can trigger OS command injection during database restore. The restore workflow extracts a ZIP archive, enumerates files under db-dumps, converts the dump path to an absolute path, and passes that path into database import commands that are built as shell command...
WordPress KiviCare – Clinic & Patient Management System (EHR) plugin <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation vulnerability
Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation vulnerability discovered by Niv Kochan in WordPress Plugin KiviCare versions = 4.4.0...
GHSA-QMJ7-FH92-4787 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-X5G3-HX3C-GFXX vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-R42M-J2MW-2QF9 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
CVE-2026-53148 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-CH76-V6W4-9WX9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F4QH-GR9M-2CMM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-G4XJ-VXVQ-MQXR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H4V8-PH46-3VQP vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J39G-274J-3WPM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JQ2W-R287-VQVJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PG56-9PGF-WM9X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q6J6-G24G-P9X4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QXJ7-7WH4-C9PF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9Q59-V74X-7CXM vulnerabilities
Vulnerabilities for packages: chromium...