80383 matches found
CVE-2026-73840 OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, the POST /api/v1alpha1/autobuild endpoint in internal/openchoreo-api/api/handlers/webhookhandler.go selected a webhook provider from caller-controlled X-Event-Key, accepted Bitbucket...
GO-2026-6180 Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...
GO-2026-6179 Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...
org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72645 via org.elasticsearch:elasticsearch (9.5.0)
org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...
org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.4) +4 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.4)
org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2, =9.4.4 Source cves: CVE-2026-72678 Source advisory: MEND:CVE-2026-72678...
org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (9.5.0)
org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...
cn.vertxup:zero-ifx-es (0.9.0), cn.vertxup:zero-vie (0.9.0) +25 more potentially affected by CVE-2026-72685 via org.elasticsearch:elasticsearch-x-content (>=8.0.0, <=8.19.19)
org.elasticsearch:elasticsearch-x-content MAVEN version =8.0.0, =0.4.0, =1.2.0, =2.6.7, =8.9.0-alpha5-rc1, =8.9.0-alpha5-rc1, =main-272, =main-272, =main-272, =0.80.0, =6.12, =8.0.0, =8.0.0, =8.0.0, =8.14.1.0 and more Source cves: CVE-2026-72685 Source advisory: MEND:CVE-2026-72685...
io.zerows:zero-boot-actor (1.0.50), io.zerows:zero-boot-cloud-actor (1.0.50) +22 more potentially affected by CVE-2026-72685 via org.elasticsearch:elasticsearch-x-content (>=9.0.0, <=9.4.4)
org.elasticsearch:elasticsearch-x-content MAVEN version =9.0.0, =0.102.0, =9.3.1, =9.3.0, =9.0.0, =9.4.4 and more Source cves: CVE-2026-72685 Source advisory: MEND:CVE-2026-72685...
org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-72683 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)
org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-72683 Source advisory: MEND:CVE-2026-72683...
WeKan /metrics unconditionally trusts X-Forwarded-For, allowing whitelist IP spoofing (MetricsBleed)
WeKan /metrics Unconditionally Trusts X-Forwarded-For, Allowing Whitelist IP Spoofing MetricsBleed Vulnerability Overview WeKan's Prometheus /metrics endpoint restricts access via an IP whitelist only configured monitoring IPs are allowed. When determining the client's source IP, the code...
Vaultwarden unconditionally trusts the X-Real-IP header, enabling rate-limit bypass and audit IP spoofing
Vaultwarden Unconditional Trust in the X-Real-IP Request Header Leading to Rate-Limit Bypass and Audit IP Spoofing Overview Vaultwarden supports reading the client IP from a configurable HTTP request header IPHEADER, default X-Real-IP for rate limiting of login/2FA and the admin panel, as well as...
CVE-2026-67991
crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service...
NPM: ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header
NPM: epetherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 2.1.0, = 3.0.0...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
EUVD-2026-57640
IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handling the built‑in X‑Client‑IP header. Under concurrent...
Exploit for CVE-2026-14840
CVE-2026-14840 — YOP Poll Vote recorded successfully. 2 403...
PT-2026-71597
crmne/ruby llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service...
PT-2026-76573
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.1.0 through 3.0.0 Description Etherpad fails to properly sanitize the x-proxy-path request header, leading to two distinct issues when client-supplied headers reach the server. First, in src/node/hooks/express/admin.ts, the...
Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability
crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service. Update...
EUVD-2026-58032
crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service...