2121975 matches found
CVE-2026-93355 LiteLLM Weak JWT Authentication via Email-Based User Lookup
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...
DEBIAN-CVE-2026-97023
A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...
CVE-2026-84894
In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carrie...
DEBIAN-CVE-2026-13018
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...
CLSA-2026-1790622992 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 5.1.15-tuxcare.1...
ECHO-74F7-E88A-1B78
Bulletin has no description...
CLSA-2026-1790622758 TuxCare security update for nanoid (1 CVE)
TuxCare rebuilt nanoid to address 1 CVE. Fixed in 3.3.14-tuxcare.1...
CLSA-2026-1790622749 TuxCare security update for mysql2 (2 CVEs)
TuxCare rebuilt mysql2 to address 2 CVEs. Fixed in 3.20.0-tuxcare.1...
CGA-CXVV-P9RH-HP4G
Bulletin has no description...
CGA-8W39-HJGX-4G9F
Bulletin has no description...
CGA-PX86-3JX5-GXRJ
Bulletin has no description...
CGA-PRWM-VHF5-PHX8
Bulletin has no description...
CGA-CQWM-6XRX-4GFC
Bulletin has no description...
CGA-XP77-JWF2-CW7V
Bulletin has no description...
CGA-7HRM-7252-VRW8
Bulletin has no description...
CGA-5RXP-QMV5-VJ3M
Bulletin has no description...
CGA-V2VW-V57W-9HVH
Bulletin has no description...
CGA-4WFW-XW9W-JHW2
Bulletin has no description...
CGA-JWW9-WC92-GMRM
Bulletin has no description...
CGA-22MX-J43C-8663
Bulletin has no description...
CGA-95HV-PG3X-5M93
Bulletin has no description...
CGA-7R77-Q9F8-2GQQ
Bulletin has no description...
CGA-3MRM-694V-3XMP
Bulletin has no description...
CGA-Q83X-3PG9-R69Q
Bulletin has no description...
CGA-P3G7-98R9-4X5P
Bulletin has no description...
CGA-MJR8-XCQ7-X7JM
Bulletin has no description...
CGA-975G-MRXW-3C4G
Bulletin has no description...
CGA-XP4C-HQH2-QCJC
Bulletin has no description...
CGA-RV6H-9V3G-6Q2G
Bulletin has no description...
CGA-F82J-V8MQ-H73F
Bulletin has no description...
CGA-4F3G-QGXC-RHWM
Bulletin has no description...
CGA-5RWG-WM22-47CG
Bulletin has no description...
CGA-V587-G344-VPJ8
Bulletin has no description...
CGA-XVVP-2WFF-Q77Q
Bulletin has no description...
CGA-49RX-QJ6P-8HP2
Bulletin has no description...
CGA-9557-8G8W-J8Q4
Bulletin has no description...
CGA-M6RJ-H4C2-8WQ2
Bulletin has no description...
CGA-HR8C-9G6C-6G34
Bulletin has no description...
CVE-2026-101139 Webkul Bagisto Invoice Mass Status Update state authorization
A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...
CGA-86FM-QWX5-PX2C
Bulletin has no description...
CGA-R4VR-377H-5GJ2
Bulletin has no description...
CGA-QCJ5-2V3G-V6QH
Bulletin has no description...
CGA-476W-PRJR-JFPJ
Bulletin has no description...
CGA-QXQ5-RR54-C5V7
Bulletin has no description...
CGA-WX5V-RVJ4-2C7X
Bulletin has no description...
CGA-PMCC-8659-H466
Bulletin has no description...
CGA-MRPP-M762-4F3R
Bulletin has no description...
CGA-849C-28GG-WPPP
Bulletin has no description...