473807 matches found
NPM: Payload: Unauthorized update to collection documents
NPM: Payload: Unauthorized update to collection documents vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...
GHSA-F7HX-52Q9-HCRF Payload: Unauthorized update to collection documents
Impact An attacker can submit a request to a specific endpoint that permits collection documents to be updated regardless of access control and field level access control. You are affected if: - You are configuring orderable: true with any collection or join field. Patches In the patched version...
Payload: Unauthorized update to collection documents
Impact An attacker can submit a request to a specific endpoint that permits collection documents to be updated regardless of access control and field level access control. You are affected if: - You are configuring orderable: true with any collection or join field. Patches In the patched version...
Missing Authorization
Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Missing Authorization via the reorder endpoint in packages/payload/src/config/orderable/index.ts, where access control checks on update operations are...
CVE-2026-76437
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper validation of...
CLSA-2026-1791392813 TuxCare security update for org.springframework.security (10 CVEs)
TuxCare rebuilt 21 org.springframework.security packages to address 10 CVEs. Fixed in 5.6.9-tuxcare.1...
CLSA-2026-1791392792 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 8 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.12...
react-CVE-2025-55182-fixer
React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...
CLSA-2026-1791377217 TuxCare security update for org.apache.activemq (3 CVEs)
TuxCare rebuilt 55 org.apache.activemq packages to address 3 CVEs. Fixed in 2.33.0-tuxcare.7...
CLSA-2026-1791377049 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 7.0.14-tuxcare.4...
ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root
Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...
CLSA-2026-1791372571 TuxCare security update for aiohttp (5 CVEs)
TuxCare rebuilt aiohttp to address 5 CVEs. Fixed in 3.8.5.post18+tuxcare...
ROOT-OS-DEBIAN-12-CVE-2026-32814 CVE-2026-32814 in libheif - Patched by Root
Root has patched CVE-2026-32814 in the libheif package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1791369737 TuxCare security update for @xmldom/xmldom (1 CVE)
TuxCare rebuilt @xmldom/xmldom to address 1 CVE. Fixed in 0.9.8-tuxcare.3...
CVE-2026-92393
Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...
CLSA-2026-1791368170 TuxCare security update for django (2 CVEs)
TuxCare rebuilt django to address 2 CVEs. Fixed in 4.2.post14+tuxcare...
ROOT-OS-DEBIAN-12-CVE-2025-14017 CVE-2025-14017 in curl - Patched by Root
Root has patched CVE-2025-14017 in the curl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Debian:12. Multiple fixed versions available...