2099552 matches found
ROOT-APP-NPM-CVE-2023-37466 CVE-2023-37466 in vm2 - Patched by Root
Root has patched CVE-2023-37466 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10718 AIKIDO-2026-10718 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10718 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47131 CVE-2026-47131 in vm2 - Patched by Root
Root has patched CVE-2026-47131 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24120 CVE-2026-24120 in vm2 - Patched by Root
Root has patched CVE-2026-24120 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-37903 CVE-2023-37903 in vm2 - Patched by Root
Root has patched CVE-2023-37903 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10844 AIKIDO-2026-10844 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10844 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10841 AIKIDO-2026-10841 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10841 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47135 CVE-2026-47135 in vm2 - Patched by Root
Root has patched CVE-2026-47135 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10725 AIKIDO-2026-10725 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10725 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-32313 CVE-2023-32313 in vm2 - Patched by Root
Root has patched CVE-2023-32313 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44008 CVE-2026-44008 in vm2 - Patched by Root
Root has patched CVE-2026-44008 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-32314 CVE-2023-32314 in vm2 - Patched by Root
Root has patched CVE-2023-32314 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10845 AIKIDO-2026-10845 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10845 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-M5W8-4GQ2-6F8X GHSA-m5w8-4gq2-6f8x in vm2 - Patched by Root
Root has patched GHSA-m5w8-4gq2-6f8x in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10842 AIKIDO-2026-10842 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10842 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10840 AIKIDO-2026-10840 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10840 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47208 CVE-2026-47208 in vm2 - Patched by Root
Root has patched CVE-2026-47208 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10190 AIKIDO-2026-10190 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10190 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44002 CVE-2026-44002 in vm2 - Patched by Root
Root has patched CVE-2026-44002 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24118 CVE-2026-24118 in vm2 - Patched by Root
Root has patched CVE-2026-24118 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47140 CVE-2026-47140 in vm2 - Patched by Root
Root has patched CVE-2026-47140 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47141 CVE-2026-47141 in vm2 - Patched by Root
Root has patched CVE-2026-47141 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10719 AIKIDO-2026-10719 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10719 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10727 AIKIDO-2026-10727 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10727 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44009 CVE-2026-44009 in vm2 - Patched by Root
Root has patched CVE-2026-44009 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10724 AIKIDO-2026-10724 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10724 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24781 CVE-2026-24781 in vm2 - Patched by Root
Root has patched CVE-2026-24781 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47686 CVE-2026-47686 in vm2 - Patched by Root
Root has patched CVE-2026-47686 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-V836-6XW4-9CX3 GHSA-v836-6xw4-9cx3 in vm2 - Patched by Root
Root has patched GHSA-v836-6xw4-9cx3 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10808 AIKIDO-2026-10808 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10808 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-26332 CVE-2026-26332 in vm2 - Patched by Root
Root has patched CVE-2026-26332 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44005 CVE-2026-44005 in vm2 - Patched by Root
Root has patched CVE-2026-44005 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44007 CVE-2026-44007 in vm2 - Patched by Root
Root has patched CVE-2026-44007 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47139 CVE-2026-47139 in vm2 - Patched by Root
Root has patched CVE-2026-47139 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10731 AIKIDO-2026-10731 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10731 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10717 AIKIDO-2026-10717 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10717 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root
Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root
Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-22709 CVE-2026-22709 in vm2 - Patched by Root
Root has patched CVE-2026-22709 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root
Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root
Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...
BIT-NIFI-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...
BIT-NIFI-2026-86089 Apache NiFi: Missing Process Group Authorization for Connector Migration
Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...
BIT-NIFI-2026-82561 Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods
Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...
BIT-NIFI-2026-81866 Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration
Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...
BIT-NIFI-2026-70469 Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...
EEF-CVE-2026-65634 Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
Summary Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. The BER OID decoder asn1rttber:decsubidentifiers/3 in lib/asn1/src/asn1rttber.erl and...
EEF-CVE-2026-68956 SSH daemon allocates unbounded idle session channels, bypassing max_channels
Summary Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...
EEF-CVE-2026-89422 TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
Summary Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A presharedkey extension in the ServerHello that the client never offered causes the client to complete the handshake witho...