5187 matches found
ROOT-APP-NPM-CVE-2025-57810 CVE-2025-57810 in jspdf - Patched by Root
Root has patched CVE-2025-57810 in the jspdf package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151, and Thunderbird 151. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability...
Astra Linux – Vulnerability in Firefox
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – Vulnerability in Firefox
Incorrect boundary conditions in the DOM: DeviceInterfaces component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
Astra Linux – Vulnerability in Firefox
Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
Astra Linux – Vulnerability in Firefox
DOM sandbox escape: Navigation component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – Vulnerability in Firefox
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
Astra Linux – Vulnerability in Firefox
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...
EUVD-2026-52977
Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...
CVE-2026-70590
Ghost CMS (Node.js) prior to version 6.54.1 allowed staff-level users to leak other staff password hashes via the Ghost Admin API. The underlying issue is exposure of authentication data, enabling offline password guessing with potential account takeover; however, Device Verification was noted as...
CLSA-2026-1784856214 TuxCare security update for org.thymeleaf (1 CVE)
TuxCare rebuilt 3 org.thymeleaf packages to address 1 CVE. Fixed in 3.1.3.RELEASE-tuxcare.1...
CLSA-2026-1784769553 TuxCare security update for angular (1 CVE)
TuxCare rebuilt angular to address 1 CVE. Fixed in 1.8.2-tuxcare.6...
CLSA-2026-1784596295 TuxCare security update for tough-cookie (1 CVE)
TuxCare rebuilt tough-cookie to address 1 CVE. Fixed in 2.2.2-tuxcare.2...
CLSA-2026-1784250517 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v3.4.47-p2+tuxcare...
CLSA-2026-1784250510 TuxCare security update for commons-io:commons-io (1 CVE)
TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.8.0-tuxcare.1...
CLSA-2026-1783991055 TuxCare security update for twig/twig (1 CVE)
TuxCare rebuilt twig/twig to address 1 CVE. Fixed in v2.15.6-p1+tuxcare...
CLSA-2026-1783213287 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 17 @angular packages to address 1 CVE. Fixed in 13.4.0-tuxcare.8...
CLSA-2026-1782176240 TuxCare security update for werkzeug (1 CVE)
TuxCare rebuilt werkzeug to address 1 CVE. Fixed in 2.3.8.post2+tuxcare...