262307 matches found
CVE-2026-59725
Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated...
Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass
A flaw was found in Apache Tomcat. This vulnerability, categorized as Missing Encryption of Sensitive Data, arises from a bypass in the EncryptInterceptor, a component designed to ensure data encryption. This bypass, introduced as a fix for CVE-2026-29146, allows sensitive data to remain...
UBUNTU-CVE-2026-59868
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in...
CVE-2026-14454
creationtimestamp| type| source ---|---|--- 2026-07-08 16:15:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jcpi77c2k 2026-07-09 17:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqa5po5axo24...
CVE-2026-59253
creationtimestamp| type| source ---|---|--- 2026-07-08 16:12:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5j5g5ct72l...
CVE-2026-59895
Hono (server-side JS framework) contains a CS/XSS flaw in cx() within hono/css: class name construction concatenates strings and marks the result as pre-escaped, bypassing HTML escaping. This allows untrusted className values used in a JSX class attribute during server-side rendering to break out...
CVE-2026-42502 affecting package multus for versions less than 4.0.2-9
CVE-2026-42502 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...
CVE-2026-42502 affecting package cf-cli for versions less than 8.7.11-7
CVE-2026-42502 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...
CVE-2026-52930 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-52930 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42502 affecting package gh for versions less than 2.62.0-17
CVE-2026-42502 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...
CVE-2026-53265 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53265 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53058 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53058 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-52924 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-52924 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56407 affecting package expat for versions less than 2.8.2-1
CVE-2026-56407 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-52910 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-52910 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53036 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53036 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53266 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53266 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63882 affecting package kernel for versions less than 6.6.143-1
CVE-2026-63882 affecting package kernel for versions less than 6.6.143-1. A patched version of the package is available...