2109493 matches found
CLEANSTART-2026-HR55516 nanoid is a secure, URL-friendly, unique string ID generator for JavaScript
Security vulnerability affects the qdrant package. nanoid is a secure, URL-friendly, unique string ID generator for JavaScript...
CLEANSTART-2026-BX79488 Vitest is a testing framework powered by Vite
Security vulnerability affects the qdrant package. Vitest is a testing framework powered by Vite...
CLEANSTART-2026-NW83834 Browserslist is a configuration tool for sharing target browsers and Node
Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...
CLEANSTART-2026-EK72543 nanoid (Nano ID) before 5
Security vulnerability affects the qdrant package. nanoid Nano ID before 5...
CLEANSTART-2026-QV01130 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node
Security vulnerability affects the vault package. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node...
CLEANSTART-2026-YT03662 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-SA35538 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-GP78521 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-YH11240 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...
CLEANSTART-2026-SN90454 Previously, a channel registered in the mux's chanList is not usable until it is established
CVE-2026-78662 affects multiple packages. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
CLEANSTART-2026-MB62550 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-GI74037 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection
CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...
CLEANSTART-2026-TR09708 Security fix for ghsa-8wmf-6v46-5gfg applied in: rabbitmq-cluster-operator 2.21.1-r6
Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-95897 Dask Loader core.py from_npy_stack deserialization
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...
CVE-2026-96273 Ghidra before 12.1.4 Denial of Service via Crafted Database
Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...
CVE-2026-96272 ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
ClipBucket v5 before 5.5.3-182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. Unauthenticated attackers can exploit time-based blind SQL injection techniques to extract user credentials...
CVE-2026-96271 Photoview through 2.4.0 Authorization Bypass via shareAlbum
Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows authenticated users to create share links for albums owned by other users. Attackers can supply arbitrary album IDs to generate working share tokens for victim albums, exposing...
MAL-2026-16425 Malicious code in @wizloft/harness-commands (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153aebb3135239cb82a30714bb331584ae8c75bb4808a75f5690c37b279e51b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16427 Malicious code in @wizloft/harness-file-providers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d9b1885f1c19ec77095cbcbc0d9b62c99c58325bcf43c71a6438c83528bc396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16432 Malicious code in @wizloft/harness-project (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a1e142939c4523f9be9f14f94ae40f314f2c8ff7f2531e7474c02100ec523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16424 Malicious code in @wizloft/harness-cli-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f530bcd1820c18dbf9109139f6895ba89b5bec5b18ac374b85398844c0eabccf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16429 Malicious code in @wizloft/harness-plugin-file-events (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f0ed60b35df86f2e566ba9ced2508d217d9dd009210bbf0e6cfea17520930ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16423 Malicious code in @wizloft/harness-authority (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2542159f7d73b577f433cb116a9daa153a2fe6ec1732e7e1c5619dcb0d81aefc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16431 Malicious code in @wizloft/harness-plugin-memory-context (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f3c19162b88e3e800090cd1ebf21d351e27126fa964f4084286612b1637bb40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16426 Malicious code in @wizloft/harness-evidence (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e54dc6763e284dc9a6e7c32583fed8ff36a3a8f7e3c825f6582f679759772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16428 Malicious code in @wizloft/harness-memory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f75e92a7cec5020ee919ce491b7a30dfc43594192c2f6fc5aa18d42cd3bed75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16430 Malicious code in @wizloft/harness-plugin-file-memory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5791ca0cb9f6e9f35dbdec168cfa44f58498fe5559a99ba8d46dd5f28eff38c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16422 Malicious code in @httttt/mcp-npx-fetch-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73432c5cbb8e74b1a4b66e91fdbde0eda311176dbef0301b13605d75bdd299ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-4XV2-X4V3-6W6H
Bulletin has no description...
CGA-CGC6-2737-W94Q
Bulletin has no description...
CGA-2M8Q-43C7-J7F9
Bulletin has no description...
CGA-V34J-34HP-3GJ3
Bulletin has no description...
CGA-39R2-MQ5G-3J93
Bulletin has no description...
CGA-GG3V-CJ95-RQ7W
Bulletin has no description...
CGA-M927-FXJW-G2Q3
Bulletin has no description...
CGA-QMCM-W4RX-X6F5
Bulletin has no description...
CGA-9QM4-QG4X-7PVQ
Bulletin has no description...
CGA-9MJG-RX4J-89PH
Bulletin has no description...
CGA-GV8W-XR89-M652
Bulletin has no description...
CGA-P89V-4CFH-RXF3
Bulletin has no description...
CGA-Q2JW-V9JQ-GJ9V
Bulletin has no description...
CGA-V65W-G9PW-829Q
Bulletin has no description...
CGA-4GPW-9QXM-9FR5
Bulletin has no description...
CGA-GPJ7-CJP9-54P2
Bulletin has no description...
CGA-4V9J-5X6Q-35GP
Bulletin has no description...
CGA-PP4X-625V-CM5W
Bulletin has no description...
CGA-6JM7-8GR4-97J7
Bulletin has no description...
CGA-P77C-Q329-FQR4
Bulletin has no description...