2099065 matches found
RUSTSEC-2026-0299 `owned-alloc` is unmaintained
The owned-alloc crate has had no release since 2018, and the maintainer has not responded to the upstream issue or to direct contact...
ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root
Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...
BIT-NIFI-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...
BIT-NIFI-2026-86089 Apache NiFi: Missing Process Group Authorization for Connector Migration
Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...
BIT-NIFI-2026-81866 Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration
Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...
BIT-NIFI-2026-70469 Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...
EEF-CVE-2026-65634 Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
Summary Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. The BER OID decoder asn1rttber:decsubidentifiers/3 in lib/asn1/src/asn1rttber.erl and...
EEF-CVE-2026-68956 SSH daemon allocates unbounded idle session channels, bypassing max_channels
Summary Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...
EEF-CVE-2026-89422 TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
Summary Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A presharedkey extension in the ServerHello that the client never offered causes the client to complete the handshake witho...
ROOT-APP-MAVEN-CVE-2026-41731 CVE-2026-41731 in org.springframework.kafka:spring-kafka - Patched by Root
Root has patched CVE-2026-41731 in the org.springframework.kafka:spring-kafka package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64645 CVE-2026-64645 in next - Patched by Root
Root has patched CVE-2026-64645 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-553733 AIKIDO-2026-553733 in next - Patched by Root
Root has patched AIKIDO-2026-553733 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44573 CVE-2026-44573 in next - Patched by Root
Root has patched CVE-2026-44573 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-H25M-26QC-WCJF GHSA-h25m-26qc-wcjf in next - Patched by Root
Root has patched GHSA-h25m-26qc-wcjf in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-2XP9-VWFH-VXW4 GHSA-2xp9-vwfh-vxw4 in next - Patched by Root
Root has patched GHSA-2xp9-vwfh-vxw4 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root
Root has patched CVE-2026-5795 in the org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-10050 CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root
Root has patched CVE-2026-10050 in the org.eclipse.jetty:jetty-security package for Root:Maven. Multiple fixed versions available...
ROOT-APP-COMPOSER-AIKIDO-2026-387398 AIKIDO-2026-387398 in enshrined/svg-sanitize - Patched by Root
Root has patched AIKIDO-2026-387398 in the enshrined/svg-sanitize package for Root:Composer. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in jsonwebtoken - Patched by Root
Root has patched CVE-2015-9235 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-NSWG-ECO-17 NSWG-ECO-17 in jsonwebtoken - Patched by Root
Root has patched NSWG-ECO-17 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root
Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-23539 CVE-2022-23539 in jsonwebtoken - Patched by Root
Root has patched CVE-2022-23539 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-9557-234J-7RV9 GHSA-9557-234j-7rv9 in GitPython - Patched by Root
Root has patched GHSA-9557-234j-7rv9 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-6RJ2-96F5-CHJ9 GHSA-6rj2-96f5-chj9 in gitpython - Patched by Root
Root has patched GHSA-6rj2-96f5-chj9 in the gitpython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-CRMC-F4M7-33FJ GHSA-crmc-f4m7-33fj in GitPython - Patched by Root
Root has patched GHSA-crmc-f4m7-33fj in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-78676 CVE-2026-78676 in GitPython - Patched by Root
Root has patched CVE-2026-78676 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-78677 CVE-2026-78677 in gitpython - Patched by Root
Root has patched CVE-2026-78677 in the gitpython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-COMPOSER-AIKIDO-2026-21741 AIKIDO-2026-21741 in robrichards/xmlseclibs - Patched by Root
Root has patched AIKIDO-2026-21741 in the robrichards/xmlseclibs package for Root:Composer. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40987 CVE-2026-40987 in org.springframework.integration:spring-integration-file - Patched by Root
Root has patched CVE-2026-40987 in the org.springframework.integration:spring-integration-file package for Root:Maven. Multiple fixed versions available...
ROOT-APP-PYPI-AIKIDO-2026-499214 AIKIDO-2026-499214 in urllib3 - Patched by Root
Root has patched AIKIDO-2026-499214 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-37891 CVE-2024-37891 in urllib3 - Patched by Root
Root has patched CVE-2024-37891 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-43804 CVE-2023-43804 in urllib3 - Patched by Root
Root has patched CVE-2023-43804 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-66471 CVE-2025-66471 in urllib3 - Patched by Root
Root has patched CVE-2025-66471 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44431 CVE-2026-44431 in urllib3 - Patched by Root
Root has patched CVE-2026-44431 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-45803 CVE-2023-45803 in urllib3 - Patched by Root
Root has patched CVE-2023-45803 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-64530 CVE-2025-64530 in @apollo/composition - Patched by Root
Root has patched CVE-2025-64530 in the @apollo/composition package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-M8JR-FXQX-8XX6 GHSA-m8jr-fxqx-8xx6 in @apollo/composition - Patched by Root
Root has patched GHSA-m8jr-fxqx-8xx6 in the @apollo/composition package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-84446 CVE-2026-84446 in libheif - Patched by Root
Root has patched CVE-2026-84446 in the libheif package for Root:Debian:13. Multiple fixed versions available...
RLSA-2026:69120 Moderate: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: DNS cache poisoning via UDP source port predictability CVE-2026-50252 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
RLSA-2026:69112 Important: perl-DBI:1.641 security update
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: DBI for Perl: Heap...
RLSA-2026:69113 Moderate: apr-util security update
The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...
RLSA-2026:69266 Important: openssh security, bug fix, and enhancement update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...
ROOT-OS-DEBIAN-12-CVE-2026-13595 CVE-2026-13595 in util-linux - Patched by Root
Root has patched CVE-2026-13595 in the util-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2022-0563 CVE-2022-0563 in util-linux - Patched by Root
Root has patched CVE-2022-0563 in the util-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-78408 CVE-2026-78408 in util-linux - Patched by Root
Root has patched CVE-2026-78408 in the util-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-3184 CVE-2026-3184 in util-linux - Patched by Root
Root has patched CVE-2026-3184 in the util-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-78409 CVE-2026-78409 in util-linux - Patched by Root
Root has patched CVE-2026-78409 in the util-linux package for Root:Debian:12. Multiple fixed versions available...