2110646 matches found
CGA-JHXW-GMV2-RHQP
Bulletin has no description...
CGA-W25F-RGM4-4PJP
Bulletin has no description...
CVE-2026-61834 scim-patch: Mutation of Inherited Built-in Method Objects
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate reads inherited properties and assign uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such ...
GHSA-J43X-5HJQ-RGXF Plug: quadratic-time decoding of nested query/body parameters enables denial of service
Summary Plug's nested-parameter decoder Plug.Conn.Query parses URL-encoded keys in time quadratic in their bracket-nesting depth. Any unauthenticated remote attacker that can reach a Plug-based HTTP endpoint can pin a BEAM scheduler for minutes with a single small request. Details For a key like...
GHSA-5VJJ-2R48-Q622 Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service
Impact Who is impacted: - Any application using Zapros to make HTTP requests to untrusted servers - Applications that follow redirects to attacker-controlled hosts Attack vector: - A malicious HTTP server returns a response with many chained content encodings. When the client attempts to decode, ...
GHSA-6CP7-3M3C-5X5C Zapros: Streaming decoders ignored the requested chunk size, allowing a single compressed response chunk to allocate unbounded memory (decompression bomb)
Impact Denial of service via memory exhaustion. Affects all callers who streamed compressed responses relying on the chunk size — explicit iterbyteschunksize=... or the default — to bound memory. The decoder ignored that bound, so a chunk could be far larger than requested and a single compressed...
CGA-G92J-HQ62-769F
Bulletin has no description...
CGA-J8Q7-FP5G-VFPV
Bulletin has no description...
CGA-VC9W-Q752-2FR3
Bulletin has no description...
CGA-868C-9969-667H
Bulletin has no description...
CGA-254X-WPJF-VVPG
Bulletin has no description...
CGA-M8PV-QQ8C-54P7
Bulletin has no description...
CGA-MC8J-6MH3-4F54
Bulletin has no description...
GHSA-RR49-F9G6-C9R5 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
Impact The Classic portlet plone.app.portlets.portlets.classic used its user-supplied template/macro fields to build a TALES path expression that was then evaluated by the TAL path helper. Because the value was interpreted as a full TALES expression, a user able to add or edit a Classic portlet...
CLSA-2026-1790171653 TuxCare security update for pacote (1 CVE)
TuxCare rebuilt pacote to address 1 CVE. Fixed in 21.5.0-tuxcare.1...
CVE-2026-59167 SunEditor: Critical XSS vulnerability - sanitizer bypass
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...
ROOT-APP-MAVEN-GHSA-R7WM-3CXJ-WFF9 GHSA-r7wm-3cxj-wff9 in com.fasterxml.jackson.core:jackson-core - Patched by Root
Root has patched GHSA-r7wm-3cxj-wff9 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available...
CGA-F78C-3G8J-QV67
Bulletin has no description...
CGA-G96H-3W4F-GJ4C
Bulletin has no description...
CGA-JQ6C-6V27-HQXP
Bulletin has no description...
CGA-4X44-F545-JXH6
Bulletin has no description...
CGA-73X7-Q54W-HW3Q
Bulletin has no description...
CGA-7497-MGFH-RRPP
Bulletin has no description...
CGA-3JX3-76RV-2992
Bulletin has no description...
CGA-CJQ2-9MW5-3W34
Bulletin has no description...
CGA-CGP6-46HW-8G2C
Bulletin has no description...
CGA-CGM8-3RJ6-R999
Bulletin has no description...
CGA-F6JF-2CQC-Q83M
Bulletin has no description...
CGA-RWHH-47MH-M3C7
Bulletin has no description...
CGA-C3H6-QCJW-HQ68
Bulletin has no description...
CGA-9C9G-HPWW-769X
Bulletin has no description...
CGA-77CC-QWW5-2G9R
Bulletin has no description...
CGA-F68F-9535-V9JC
Bulletin has no description...
CGA-62CR-J786-RX4V
Bulletin has no description...
CGA-68CR-W6CG-R4CQ
Bulletin has no description...
CGA-RHWR-3R6P-J7F8
Bulletin has no description...
CGA-34W6-QFWJ-8W38
Bulletin has no description...
CGA-5HGX-5M43-X9H7
Bulletin has no description...
CGA-9C5H-X633-3RFF
Bulletin has no description...
CGA-24MP-J6RG-HVXG
Bulletin has no description...
CGA-6J7P-VJ98-CX2W
Bulletin has no description...
CGA-8PPF-RJ4H-99PJ
Bulletin has no description...
CGA-X98J-JRGW-X7GR
Bulletin has no description...
CGA-9GXM-RG62-3PVG
Bulletin has no description...
CGA-C4J4-X5HJ-VHQF
Bulletin has no description...
CGA-GH4P-99C7-CHV5
Bulletin has no description...
CGA-53RG-8749-9PMV
Bulletin has no description...
CGA-27HF-V7J9-M5RP
Bulletin has no description...