336437 matches found
MINI-2QW5-VR2G-4Q26
Bulletin has no description...
CVE-2026-58510
GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public-private...
CVE-2026-58511
Webhook Authorization Header Returned in Plaintext via API...
CVE-2026-58440
Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content incomplete revocation cleanup in "DeleteCollaboration"...
CVE-2026-58437
Repository Visibility Manipulation via Git Push Options...
CVE-2026-58434
Private Repository Metadata Remains Accessible After Access Revocation...
CVE-2026-58428
Release attachment extension allowlist bypass via web release edit form variant of CVE-2025-68939...
CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API...
CVE-2026-59109 Zalktis: SQL injection via partner-controlled fields in imported e-invoices
SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice UBL/PEPPOL or an e-commerce export, Zalktis concatenates partner-controlled values directly into SQL statement text using string...
Malware in async-critical-section
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain
Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...
CVE-2026-27544
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
MINI-JC6M-VX2C-6F23
Bulletin has no description...
MINI-9246-JG9R-956G
Bulletin has no description...
MINI-M336-GC9C-9R63
Bulletin has no description...
MINI-64WC-C7C3-9888
Bulletin has no description...
MINI-G4PP-H85F-P45W
Bulletin has no description...
CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1
Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...
CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1
Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1
Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...