597 matches found
CVE-2019-16097
CVE-2019-16097 This program is only for security research, do not use it illegally! Vulnerability Impact Attackers can create an administrator account, upload malicious images, and infect clients using the repository. Affected Component Harbor Affected Versions 1.7.0-1.8.2 Remediation Upgrade to...
cargo-perm
Description A new vulnerability in cargo version 1.7.0 has been found as explained here. Step by Step First you have to make sure your cargo version is vulnerable cargo --version Supose I have a cargo project with the following src/main.rs file: use numbigint::BigInt; use std::str::FromStr; //...
Astra Linux – Vulnerability in hunspell
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::left CommonsSubstring in suggestmgr.cxx...
CVE-2025-70820
Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...
pwndoc v1.7.0
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
Node.js Module axios 1.7.0 < 1.18.0 maxBodyLength Bypass (CVE-2026-67317)
The version of the axios Node.js module installed on the remote host is 1.7.0 prior to 1.18.0. It is, therefore, affected by a vulnerability: - axios fails to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers ca...
EUVD-2026-53834
A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initializerepo of the file OpenHands/resolver/sendpullrequest.py. This manipulation causes command injection. Remote exploitation of the attack is possible. The vendor deleted the original GitHub issue...
CVE-2026-19022 OpenHands send_pull_request.py initialize_repo command injection
A vulnerability was determined in OpenHands up to 0.62.0. The affected element is the function initializerepo of the file OpenHands/resolver/sendpullrequest.py. This manipulation causes command injection. Remote exploitation of the attack is possible. The vendor deleted the original GitHub issue...
CLSA-2026-1785204336 TuxCare security update for karma (2 CVEs)
TuxCare rebuilt karma to address 2 CVEs. Fixed in 1.7.0-tuxcare.1...
CLSA-2026-1775003192 TuxCare security update for underscore (2 CVEs)
TuxCare rebuilt underscore to address 2 CVEs. Fixed in 1.7.0-tuxcare.1...
CLSA-2026-1773620196 TuxCare security update for growl (1 CVE)
TuxCare rebuilt growl to address 1 CVE. Fixed in 1.7.0-tuxcare.2...
CVE-2026-67332
Technical details (affected products/versions/mitigation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-67332 @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never...
CVE-2026-67327
Better-Auth before 1.6.22 is vulnerable to account takeover via pre-account hijacking on magic-link and email-OTP sign-in when open email/password registration is enabled. An attacker registers a victim s email with a chosen password; the account remains unverified. When the victim signs in later...
SUSE CVE-2025-7453
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
CLEANSTART-2026-YN06108 Security fixes in yunikorn-k8shim 1.7.0-r0
Package yunikorn-k8shim version 1.7.0-r0 fixes 5 vulnerabilities: ghsa-vvgc-356p-c3xw, CVE-2025-68121, CVE-2025-61732, CVE-2025-47911, CVE-2025-58190...
CLEANSTART-2026-DK44310 Security fixes in kubernetes-dashboard-web-fips 1.7.0-r0
Package kubernetes-dashboard-web-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-PV07726 Security fixes in yunikorn-web-fips 1.7.0-r0
Package yunikorn-web-fips version 1.7.0-r0 fixes 24 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2026-27143, CVE-2025-68121, CVE-2026-42499...
CLEANSTART-2026-AK78194 Security fixes in yunikorn-k8shim-fips 1.7.0-r1
Package yunikorn-k8shim-fips version 1.7.0-r1 fixes 19 vulnerabilities: CVE-2026-27139, CVE-2026-39825, CVE-2026-32288, CVE-2026-27142, CVE-2026-32289...