307051 matches found
CVE-2026-67213 vulnerabilities
Vulnerabilities for packages: pelias-api, vite, tensorflow-gpu-jupyter, renovate, langfuse-fips, nextcloud-server, dotstatsuite-supercore, homepage, unleash-fips, unleash, authentik, langfuse, saf, json-server, jitsucom-jitsu, keep-fips, gitlab-rails-ce-fips, keep, gitlab-rails-ce, vitess, arango...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: semaphore, nextcloud-server, opensearch-dashboards-fips, kibana, kubeflow-centraldashboard, opensearch-dashboards, prism, wazuh-dashboard, jitsucom-jitsu, wazuh-dashboard-fips, lerna, awx, langfuse, redisinsight, librechat, langfuse-fips...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: semaphore, nextcloud-server, opensearch-dashboards-fips, kibana, kubeflow-centraldashboard, opensearch-dashboards, prism, wazuh-dashboard, jitsucom-jitsu, wazuh-dashboard-fips, gitlab-rails-ce-fips, awx, lerna, gitlab-rails-ce, langfuse, redisinsight, librechat,...
GHSA-2V37-7H3G-55P8 vulnerabilities
Vulnerabilities for packages: renovate, json-server, vitess, jitsucom-jitsu, langfuse, vite, nextcloud-server, saf...
CVE-2026-67213 vulnerabilities
Vulnerabilities for packages: renovate, json-server, vitess, jitsucom-jitsu, langfuse, vite, nextcloud-server, saf...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, prism, langfuse, lerna, nextcloud-server, kubeflow-centraldashboard, opensearch-dashboards...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, prism, langfuse, lerna, nextcloud-server, kubeflow-centraldashboard, opensearch-dashboards...
MAL-2026-13669 Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...
CVE-2026-71953 D-Link DWR-M961 Command Injection via /boafrm/formNtp
D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formNtp interface. A remote attacker can inject arbitrary malicious commands into the ntpServerIp1 field, resulting in command execution with...
CVE-2026-71953
Summary: CVE-2026-71953 affects D-Link DWR-M961 devices with hardware version C1 and firmware older than 1.1.5_C1_202607071108. A command injection vulnerability exists in the /boafrm/formNtp interface, where an attacker can supply a malicious value to ntpServerIp1, leading to remote command exec...
CVE-2026-67620
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...
CVE-2026-67620
CVE-2026-67620 affects Flowise up to version 3.1.4, where the SSRF guard in httpSecurity.ts uses a faulty DEFAULT_DENY_LIST. The list blocks the AWS/GCP/Azure/DO metadata IPs 169.254.169.254 but omits OCI 192.0.0.192 and Alibaba Cloud 100.100.100.200 (and the 100.64.0.0/10 CGNAT range). An authen...
CVE-2026-67620 Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...
EUVD-2026-54793
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...
CVE-2026-67620 Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...
[SECURITY] [DSA 6420-1] pdns security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2026 https://www.debian.org/security/faq -...
CVE-2026-19288
A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...
EUVD-2026-54789
A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...
CVE-2026-19288
A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow. Such manipulation of the argument libraryId leads to pa...