2099552 matches found
MINI-VXW3-GRVM-FVFP
Bulletin has no description...
MINI-XHMX-GVMQ-X4RP
Bulletin has no description...
MINI-M49J-PW8G-FW3Q
Bulletin has no description...
MINI-8M4F-67H5-RCVM
Bulletin has no description...
MINI-73W2-2M55-36GQ
Bulletin has no description...
MINI-6VQM-5XV6-XRGP
Bulletin has no description...
MINI-C2P7-33CX-634Q
Bulletin has no description...
MINI-F6V5-M3JG-6F48
Bulletin has no description...
MINI-RRXQ-VVXF-F497
Bulletin has no description...
MINI-6HFF-6P4C-M34W
Bulletin has no description...
MINI-X5WG-96GV-4286
Bulletin has no description...
MINI-G33Q-XVX5-95CC
Bulletin has no description...
MINI-X765-4444-PQ8R
Bulletin has no description...
MINI-HC5V-C6GJ-P8C3
Bulletin has no description...
MINI-MP6W-C8F5-VFGF
Bulletin has no description...
MINI-Q5C9-2V42-84V9
Bulletin has no description...
MINI-H6VP-4JCW-H9MP
Bulletin has no description...
MINI-8FMV-9PF2-X986
Bulletin has no description...
MINI-GG2G-3XC4-2WJ3
Bulletin has no description...
MINI-HF8V-46FP-PMJ2
Bulletin has no description...
MINI-X8PG-QXVF-97R5
Bulletin has no description...
MINI-XHV3-WP8G-48PR
Bulletin has no description...
MINI-CJ52-59P4-PQQP
Bulletin has no description...
MINI-6347-GJQ4-G226
Bulletin has no description...
MINI-422M-V2QW-F4QM
Bulletin has no description...
MINI-3J52-R42M-C7V7
Bulletin has no description...
MINI-93RF-84HR-7455
Bulletin has no description...
MINI-W34C-V7CF-4VVX
Bulletin has no description...
MINI-G3M4-Q3W2-R766
Bulletin has no description...
MINI-7934-P72G-GM4P
Bulletin has no description...
MAL-2026-16374 Malicious code in test-react-app-in (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebade640fa6ac69a17ff3a928d1fc0637eb0a32786093578c953de7e56c52231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16375 Malicious code in test-react-app-out (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37116c57e577d1e9271e66cf5cc5171bd4c792456b2f581dc060e00714864291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16376 Malicious code in test-react-app-way (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd5c5cfe4731b46d1c41c5302999050eb7a5a29864805bf75e3cb22a661237a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DEBIAN-CVE-2026-93710
Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compilehooks. A hook that dies fires core.app.hookexception, then calls cleanup unless the failing hook is the exception handler. A handler that halts does...
DEBIAN-CVE-2026-93709
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...
DEBIAN-CVE-2026-93711
Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...
DEBIAN-CVE-2026-93712
Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside publicdir via relative path segments in the File route handler. The handler joins the request path onto publicdir without collapsing relative segments, and checks only that the result is a readable regular file. A request...
CVE-2026-93712 Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler
Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside publicdir via relative path segments in the File route handler. The handler joins the request path onto publicdir without collapsing relative segments, and checks only that the result is a readable regular file. A request...
CVE-2026-93711 Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array
Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headerstoarray. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server that does not validate keys writes it to...
CVE-2026-93710 Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks
Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compilehooks. A hook that dies fires core.app.hookexception, then calls cleanup unless the failing hook is the exception handler. A handler that halts does...
CVE-2026-93709 Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...
CLEANSTART-2026-YY11796 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-UP97351 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-XR77764 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-KN43296 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-AL86944 Previously, resolving relative paths containing parent directory ('
CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...
CLEANSTART-2026-GJ17760 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not
Security vulnerability affects the argo-cd package. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not...
CLEANSTART-2026-XY58931 Previously, a channel registered in the mux's chanList is not usable until it is established
CVE-2026-78662 affects multiple packages. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
CLEANSTART-2026-TD63490 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion
Security vulnerability affects the argo-cd package. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
CLEANSTART-2026-RI09437 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS
CVE-2026-56858 affects multiple packages. Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. See references for individual vulnerability details...