319359 matches found
Security Bulletin: Multiple vulnerabilities have been identified in IBM® SDK, Java™ Technology Edition, an IBM Websphere (WAS) prerequisite. WAS is used by IBM Rational ClearQuest
Summary IBM® SDK, Java™ Technology Edition is a prerequisite in order to use IBM WebSphere Application ServerWAS. WAS is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition have been published in a security bulletin...
DoS (Denial of Service) immutable Dependency in Jira Software Data Center
This DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.1, 10.5.0, 10.6.0, 10.7.1, 11.0.0, and 11.1.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
Information Disclosure axios Dependency in Jira Software Data Center
This High severity Information Disclosure vulnerability was introduced in versions 10.3.22 and 11.3.7 of Jira Software Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT: P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N allows an...
Malicious code in @servicetitan/microfront-tests (npm)
npm/@servicetitan/microfront-tests is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @servicetitan/acquisition-functions (npm)
npm/@servicetitan/acquisition-functions is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...
MAL-2026-11841 Malicious code in @servicetitan/contentful (npm)
npm/@servicetitan/contentful is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CLSA-2026-1785291207 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.24.0-tuxcare.3...
CLSA-2026-1784596290 TuxCare security update for debug (1 CVE)
TuxCare rebuilt debug to address 1 CVE. Fixed in 2.6.4-tuxcare.1...
CLSA-2026-1784596277 TuxCare security update for qs (2 CVEs)
TuxCare rebuilt qs to address 2 CVEs. Fixed in 2.2.4-tuxcare.1...
CLSA-2026-1784077477 TuxCare security update for symfony/yaml (2 CVEs)
TuxCare rebuilt symfony/yaml to address 2 CVEs. Fixed in v3.4.47-p1+tuxcare...
CLSA-2026-1783645401 TuxCare security update for symfony/routing (2 CVEs)
TuxCare rebuilt symfony/routing to address 2 CVEs. Fixed in v3.4.47-p1+tuxcare...
CLSA-2026-1783558967 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 9.52.21-p2+tuxcare...
CLSA-2026-1782089809 TuxCare security update for uuid (2 CVEs)
TuxCare rebuilt uuid to address 2 CVEs. Fixed in 3.4.0-tuxcare.2...
CLSA-2026-1781484839 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 19 org.springframework.security packages to address 1 CVE. Fixed in 6.3.10-tuxcare.6...
CLSA-2026-1780620677 TuxCare security update for csvtojson (1 CVE)
TuxCare rebuilt csvtojson to address 1 CVE. Fixed in 2.0.8-tuxcare.1...
CLSA-2026-1779151633 TuxCare security update for ajv (1 CVE)
TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.12.3-tuxcare.1...
CLSA-2026-1776731780 TuxCare security update for sockjs (1 CVE)
TuxCare rebuilt sockjs to address 1 CVE. Fixed in 0.3.19-tuxcare.1...
CLSA-2026-1776299672 TuxCare security update for postcss (3 CVEs)
TuxCare rebuilt postcss to address 3 CVEs. Fixed in 7.0.14-tuxcare.1...