2101820 matches found
GHSA-97CV-X867-6XHM Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller
Description The VM built-in function KleverUpdateAccountPermission registered always-active, creator.go:381-390 / core/vmconstants.go:234 rewrites an account's entire permission set. Its authorization check uses vmInput.RecipientAddr attacker-controlled instead of the authenticated...
GHSA-G7F6-RXC4-QHPH Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint
Summary The /csp endpoint accepts unauthenticated JSON reports and logs user-controlled values directly to stdout using print without escaping control characters. A remote attacker can include ANSI/VT100 escape sequences in fields such as blocked-uri or document-uri. When the logs are viewed in a...
GHSA-VP3W-52V9-Q57F OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting
Summary An authenticated user can execute arbitrary operating system commands on the openc3-cosmos-cmd-tlm-api service. The pypiurl setting is interpolated, unescaped, into a command line that is run through a shell backtick when a plugin is installed. Shell metacharacters in the setting value ar...
GHSA-86WM-R4C5-2RC9 Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service
Summary Wire's Swift runtime Wire SPM/CocoaPods product, implemented by wire-runtime-swift did not reject a negative LENGTHDELIMITED field length while skipping an unknown protobuf group. A crafted 10-byte protobuf payload could cause ProtoReader.skipGroup to read a length-delimited field whose...
GHSA-584P-F93J-WPGC Formie: Unauthenticated users can overwrite incomplete submissions via submit action
Impact The anonymous front-end action formie/submissions/submit SubmissionsController::actionSubmit trusted a client-supplied submissionId when loading an incomplete submission, with no session binding, ownership check, or edit token validation. An unauthenticated attacker could enumerate...
MAL-2026-16480 Malicious code in a-onesite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ed6ca931448c083b5356eae6ad5af3cce9011d70fce4ce4ad427349991856 [email protected] ships an empty index.js and no library functionality. Its package.json declares preinstall, preupdate, and test scripts that all...
GHSA-JG26-Q8HG-3PQ4 Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query builder. Category IDs supplied through the public ?categories= query parameter are only trimmed and are then concatenated directly into a JCR-SQL2 WHERE clause, without the numeric...
GHSA-6MWV-4MRM-5P3M 9router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
Summary The Kiro API-key validation endpoint builds an upstream URL using a user-controlled region value. By supplying a crafted region such as kiro-canary.local:8443, an authenticated attacker can cause 9router to send the Kiro validation request to an attacker-controlled host under the...
RLSA-2026:70753 Important: perl-DBI security update
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: DBI for Perl: Heap...
RLSA-2026:69553 Low: libarchive security update
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...
RLSA-2026:70201 Important: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: podman: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint...
RLSA-2026:69541 Important: rsyslog security update
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...
RLSA-2026:70391 Important: containernetworking-plugins security update
The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...
RLSA-2026:70191 Important: runc security update
The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes: net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 For more details about the security issues,...
RLSA-2026:69608 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
CLSA-2026-1790186133 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.14.2-tuxcare.2...
DRUPAL-CONTRIB-2026-190
This module enables you to personalize content for anonymous and authenticated users by showing different blocks to visitors based on client-side conditions. The Smart Content Block submodule doesn't sufficiently check block access when it renders the blocks of a "Display Blocks" reaction through...
CLSA-2026-1790183896 TuxCare security update for qs (1 CVE)
TuxCare rebuilt qs to address 1 CVE. Fixed in 6.4.3-tuxcare.1...
DEBIAN-CVE-2026-96808
Bulletin has no description...
DRUPAL-CONTRIB-2026-184
This module provides integration of the tawk.to live chat for Drupal sites. The module does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions through a Cross-Site Request Forgery CSRF vulnerability...
DRUPAL-CONTRIB-2026-183
This module enables sites to block access for the administrative user account user 1 or users with the administrator role. The module does not sufficiently enforce these access restrictions across all supported authentication mechanisms. As a result, a blocked administrative user may still be abl...
DRUPAL-CONTRIB-2026-179
This module enables REST endpoints for a decoupled Commerce experience which allow for remote order creation. The module doesn't sufficiently sanitize order data passed into the order creation endpoint, which allows for potentially unsafe order properties to be set on an order...
MGASA-2026-0441 Updated nss & firefox packages fix security vulnerabilities
Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92005 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2026-92006 Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2026-92007...
MGASA-2026-0439 Updated coreutils package fixes a security vulnerability
Out‑of‑bounds Read in GNU coreutils. CVE-2026-56391...
MGASA-2026-0440 Updated borgbackup package fixes a security vulnerability
The updated package fixes a security vulnerability: CVE-2026-62268...
MGASA-2026-0438 Updated libnfs package fixes a security vulnerability
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READIOVEC in rpcreadfromsocket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. CVE-2026-57918...
DRUPAL-CONTRIB-2026-178
The Project Browser module enables you to apply recipes and enable modules from the web user interface. The module doesn't sufficiently validate admin actions to protect against cross-site request forgery attacks CSRF...
DEBIAN-CVE-2026-93402
Bulletin has no description...
DEBIAN-CVE-2026-94422
Bulletin has no description...
DEBIAN-CVE-2026-93403
Bulletin has no description...
DEBIAN-CVE-2026-92709
Bulletin has no description...
DRUPAL-CONTRIB-2026-175
The Webform module allows site builders to create forms, collect submissions, and render submitted values in configurable formats. Webform does not sufficiently exclude certain format templates from token replacement. This can allow an attacker to submit data that is evaluated as template code wh...
DRUPAL-CONTRIB-2026-173
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficiently restrict access to certain submission view modes. Under certain conditions, a user who can view a submission could access a more...
DRUPAL-CONTRIB-2026-172
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Form submissions may include uploaded files. The module does not sufficiently force certain uploaded file types to download when served. Under certan site configuration...
DRUPAL-CONTRIB-2026-171
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The Webform Share submodule can expose a webform for embedding on another site. Under certain circumstances, submissions for an Ajax-enabled Webform using Webform Share...
DRUPAL-CONTRIB-2026-169
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may also configure handlers for processing submissions, including email handlers that may include uploaded files as attachments. In affected configuration...
DRUPAL-CONTRIB-2026-168
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficiently validate requested filenames when serving generated submission exports. Under certain configurations, a user with permission to view...
ROOT-APP-MAVEN-CVE-2022-22970 CVE-2022-22970 in org.springframework:spring-beans - Patched by Root
Root has patched CVE-2022-22970 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-22965 CVE-2022-22965 in org.springframework:spring-beans - Patched by Root
Root has patched CVE-2022-22965 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2021-22060 CVE-2021-22060 in org.springframework:spring-core - Patched by Root
Root has patched CVE-2021-22060 in the org.springframework:spring-core package for Root:Maven. Multiple fixed versions available...
DRUPAL-CONTRIB-2026-163
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may add tooltips and help text to these forms. Some Webform tooltips and help text were not sufficiently sanitized, resulting in possible cross-site...
CLSA-2026-1790180021 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.2...
DRUPAL-CONTRIB-2026-158
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module includes a rating element, which did not sufficiently validate its data. Under specific circumstances, this could allow cross-site scripting on a page with a...
DRUPAL-CONTRIB-2026-154
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module provides JavaScript behaviours for announcing dynamic form updates to assistive technologies. In some configurations, due to improper sanitisation, specially...
GHSA-5F42-97GR-VFHQ Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug
moquette is reachable by untrusted MQTT clients anonymous by default, so every byte from any client, including pre-authentication, is untrusted. This is a memory-safe JVM: the ceiling is authorization/ACL bypass + denial of service + cross-session integrity, not RCE I did not find one and do not...
ROOT-APP-NPM-AIKIDO-2026-728255 AIKIDO-2026-728255 in @capacitor/ios - Patched by Root
Root has patched AIKIDO-2026-728255 in the @capacitor/ios package for Root:npm. Multiple fixed versions available...
MINI-CRGW-QRC7-VGC9
Bulletin has no description...
MINI-VMP9-CCP6-R6GX
Bulletin has no description...