2104782 matches found
CVE-2025-12999
UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Prefix request headers, with no check on whether the sender was a trusted proxy, falling back to the client-supplied Host header...
BIT-ENVOY-GATEWAY-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...
BIT-ENVOY-GATEWAY-2026-53718 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API...
BIT-ENVOY-GATEWAY-2026-53717 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...
BIT-ENVOY-GATEWAY-2026-53716 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled...
BIT-ENVOY-GATEWAY-2026-53715 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronization while HTTPServer.Get writes the sam...
BIT-ENVOY-GATEWAY-2026-53714 Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespace, installs a JWT StreamInterceptor bu...
BIT-ENVOY-GATEWAY-2026-53713 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...
SUSE-SU-2026:23459-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...
SUSE-SU-2026:21461-1 Security update for helm
This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...
DEBIAN-CVE-2026-47321
The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...
UBUNTU-CVE-2026-47321
The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...
ROOT-OS-DEBIAN-13-CVE-2026-6653 CVE-2026-6653 in libxml2 - Patched by Root
Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-12863 CVE-2025-12863 in libxml2 - Patched by Root
Root has patched CVE-2025-12863 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-86140 CVE-2026-86140 in libxml2 - Patched by Root
Root has patched CVE-2026-86140 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-74860 CVE-2026-74860 in libxml2 - Patched by Root
Root has patched CVE-2026-74860 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...
SUSE-SU-2026:4275-1 Security update for jq
This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in decNumberToString bsc1218034. - CVE-2023-50268: stack-based buffer overflow ...
SUSE-SU-2026:4274-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...
SUSE-SU-2026:4273-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...
SUSE-SU-2026:4272-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118....
SUSE-SU-2026:4271-1 Security update for dovecot22
This update for dovecot22 fixes the following issue: - CVE-2026-40016: Sieve :contains/:matches ONxM substring match bypasses sievemaxcputime limit bsc1265148...
SUSE-SU-2026:4270-1 Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260264. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input...
CVE-2026-94148 ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure
A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of the file /ScadaBR/exportproject.htm of the component Export Project Endpoint. This manipulation causes information disclosure. The attack can be initiated remotely. The exploit has been...
ROOT-APP-NPM-CVE-2026-62680 CVE-2026-62680 in orval - Patched by Root
Root has patched CVE-2026-62680 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-72716 CVE-2026-72716 in orval - Patched by Root
Root has patched CVE-2026-72716 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71864 CVE-2026-71864 in orval - Patched by Root
Root has patched CVE-2026-71864 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-939997 AIKIDO-2026-939997 in orval - Patched by Root
Root has patched AIKIDO-2026-939997 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71865 CVE-2026-71865 in orval - Patched by Root
Root has patched CVE-2026-71865 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71867 CVE-2026-71867 in orval - Patched by Root
Root has patched CVE-2026-71867 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-62681 CVE-2026-62681 in orval - Patched by Root
Root has patched CVE-2026-62681 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71868 CVE-2026-71868 in orval - Patched by Root
Root has patched CVE-2026-71868 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-72717 CVE-2026-72717 in orval - Patched by Root
Root has patched CVE-2026-72717 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-62682 CVE-2026-62682 in orval - Patched by Root
Root has patched CVE-2026-62682 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71866 CVE-2026-71866 in orval - Patched by Root
Root has patched CVE-2026-71866 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71869 CVE-2026-71869 in orval - Patched by Root
Root has patched CVE-2026-71869 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-71871 CVE-2026-71871 in orval - Patched by Root
Root has patched CVE-2026-71871 in the orval package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-80229 CVE-2026-80229 in curl - Patched by Root
Root has patched CVE-2026-80229 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-9080 CVE-2026-9080 in curl - Patched by Root
Root has patched CVE-2026-9080 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root
Root has patched CVE-2026-9545 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-9079 CVE-2026-9079 in curl - Patched by Root
Root has patched CVE-2026-9079 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-13608 CVE-2026-13608 in curl - Patched by Root
Root has patched CVE-2026-13608 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-82209 CVE-2026-82209 in curl - Patched by Root
Root has patched CVE-2026-82209 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-11856 CVE-2026-11856 in curl - Patched by Root
Root has patched CVE-2026-11856 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root
Root has patched CVE-2026-10536 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root
Root has patched CVE-2026-8926 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8458 CVE-2026-8458 in curl - Patched by Root
Root has patched CVE-2026-8458 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-15079 CVE-2025-15079 in curl - Patched by Root
Root has patched CVE-2025-15079 in the curl package for Root:Debian:13. Multiple fixed versions available...