12 matches found
CVE-2026-41423
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...
CVE-2025-38159 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38159 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-6020 affecting package pam for versions less than 1.5.1-8
CVE-2025-6020 affecting package pam for versions less than 1.5.1-8. A patched version of the package is available...
CVE-2024-56658 affecting package kernel for versions less than 5.15.182.1-1
CVE-2024-56658 affecting package kernel for versions less than 5.15.182.1-1. A patched version of the package is available...
CVE-2025-22872 affecting package multus for versions less than 4.0.2-5
CVE-2025-22872 affecting package multus for versions less than 4.0.2-5. A patched version of the package is available...
CVE-2025-29481 affecting package dwarves for versions less than 1.25-2
CVE-2025-29481 affecting package dwarves for versions less than 1.25-2. A patched version of the package is available...
CVE-2025-32376
Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the beta branch, the users limit for a DM can be bypassed, thus giving the ability to potentially create a DM with every user from a site in it. This issue has been patched in stable...
CVE-2025-22870 affecting package git-lfs for versions less than 3.5.1-5
CVE-2025-22870 affecting package git-lfs for versions less than 3.5.1-5. A patched version of the package is available...
CVE-2024-53099 affecting package kernel for versions less than 5.15.176.3-1
CVE-2024-53099 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...
CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10
CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10. A patched version of the package is available...
CVE-2020-5259
In affected versions of dojox NPM package, the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or...