2854 matches found
ROOT-APP-MAVEN-CVE-2026-45673 CVE-2026-45673 in io.root.io.netty:netty-resolver-dns - Patched by Root
Root has patched CVE-2026-45673 in the io.root.io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-50260 CVE-2026-50260 in rootio-xorg-server - Patched by Root
Root has patched CVE-2026-50260 in the rootio-xorg-server package for Root:Debian:12. Multiple fixed versions available...
PYSEC-2026-2789 Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Summary A memory-safety vulnerability in Open Babel's GAMESS output parser caused a use-after-free when reading a crafted input file. Details The flaw was in GAMESSOutputFormat::ReadMolecule. A malformed input caused the parser to dereference a stale pointer after the underlying object had been...
PYSEC-2026-2687 OctoPrint has possible file exfiltration via query parameters on upload endpoints
Impact OctoPrint versions up until and including 1.11.7 as well as 2.0.0rc1 and 2.0.0rc2 contain a vulnerability that allows an attacker with the FILEUPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the upload folder where they then can be...
PYSEC-2026-3046 RAGAS has SSRF via Multi-Modal Faithfulness Collections Module
A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...
ROOT-APP-NPM-CVE-2026-44902 CVE-2026-44902 in @rootio/opentelemetry__sdk-node - Patched by Root
Root has patched CVE-2026-44902 in the @rootio/opentelemetrysdk-node package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-6767 CVE-2026-6767 in rootio-nss - Patched by Root
Root has patched CVE-2026-6767 in the rootio-nss package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-55604
DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version 1.7.0, the process-global SessionStore accepts caller-supplied sessionid values without binding them to any authenticated principal or transport session. An attacker can enumerate active session I...
ROOT-OS-DEBIAN-12-CVE-2026-6429 CVE-2026-6429 in rootio-curl - Patched by Root
Root has patched CVE-2026-6429 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2021-44906 CVE-2021-44906 in minimist - Patched by Root
Root has patched CVE-2021-44906 in the minimist package for Root:npm. Multiple fixed versions available...
PYSEC-2026-1313 docling-core vulnerable to Remote Code Execution via unsafe PyYAML usage
Impact A PyYAML-related Remote Code Execution RCE vulnerability, namely CVE-2020-14343, is exposed in docling-core =2.21.0, 2.48.4 and, specifically only if the application uses pyyaml 5.4 and invokes doclingcore.types.doc.DoclingDocument.loadfromyaml passing it untrusted YAML data. Patches The...
RHSA-2026:35896 Red Hat Security Advisory: kernel security update
Bulletin has no description...
PT-2026-56237
Name of the Vulnerable Software and Affected Versions Chevereto versions 3.7.5 through 4.5.3 Description An issue exists in the self-hosted media-sharing platform where the /json AJAX listing endpoint fails to enforce private profile restrictions. While the profile HTML route /username correctly...
ROOT-OS-DEBIAN-13-CVE-2026-37555 CVE-2026-37555 in rootio-libsndfile - Patched by Root
Root has patched CVE-2026-37555 in the rootio-libsndfile package for Root:Debian:13. Multiple fixed versions available...
UBUNTU-CVE-2026-14760
A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function rcoreseekarchbits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made availabl...
GHSA-VJJX-RFW4-RMFC SurrealDB: Graph traversal bypasses table SELECT permissions
An authenticated record or scope user could read records on any table reachable through a graph edge or REFERENCES TO back-reference, regardless of that table's PERMISSIONS FOR select clause. Traversing SELECT FROM source-edge-target returned full documents from target even when target was define...
ROOT-APP-GOBINARY-CVE-2026-46597 CVE-2026-46597 in rootio-golang.org/x/crypto - Patched by Root
Root has patched CVE-2026-46597 in the rootio-golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
EulerOS 2.0 SP15 : openjpeg2 (EulerOS-SA-2026-2495)
According to the versions of the openjpeg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library...
