1442840 matches found
EUVD-2026-71142
Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs. The endpoint uses a service-role Supabase client that bypasses row-level security and...
MINI-9P8W-2CGQ-VWH9
Bulletin has no description...
MINI-72J6-9X3G-9RWQ
Bulletin has no description...
MINI-V5XF-X5R4-HMP5
Bulletin has no description...
MINI-PRM4-9P44-FV38
Bulletin has no description...
MINI-C83F-M7H3-X8VR
Bulletin has no description...
MINI-4885-RQ24-P9CX
Bulletin has no description...
MINI-V485-FJC6-XQQX
Bulletin has no description...
MINI-76PG-P84M-Q6W6
Bulletin has no description...
MINI-9QCF-R63G-GFHP
Bulletin has no description...
MINI-CWR9-8P76-X86H
Bulletin has no description...
MINI-FMFQ-WGJ4-VWH9
Bulletin has no description...
MINI-P74G-857J-GMFH
Bulletin has no description...
MINI-G43H-HF68-HC6M
Bulletin has no description...
MINI-Q6XH-9XQX-MM5G
Bulletin has no description...
MINI-HMF6-HX4Q-M8FV
Bulletin has no description...
CVE-2026-85623
goose v1.37.0 (by aaif-goose) contains an arbitrary command execution flaw in its recipe subsystem. The vulnerable components are stdio extensions and retry.checks within recipes, which are executed without passing through the recipe security scan—creating a bypass for attackers who distribute ma...
EUVD-2026-71230
goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...