2122818 matches found
ROOT-APP-MAVEN-AIKIDO-2026-98906 AIKIDO-2026-98906 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched AIKIDO-2026-98906 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
MINI-6M9Q-MMFJ-WX4P
Bulletin has no description...
GHSA-3Q6V-R5MR-HXV8 league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scan
Summary league/commonmark's GitHub Flavored Markdown Table extension registers TableStartParser as a block-start parser. While a paragraph is the active block, the core block parser calls TableStartParser::tryStart on every non-blank line. Its first action fetches the entire growing paragraph...
MINI-24J3-QF3X-X6HC
Bulletin has no description...
MINI-G539-9JV4-57WV
Bulletin has no description...
MINI-GQQ9-33W5-6RM5
Bulletin has no description...
MINI-F9XH-XMFW-9635
Bulletin has no description...
MINI-2JVW-796H-6G9H
Bulletin has no description...
MINI-X9JM-F9P3-WG8V
Bulletin has no description...
MINI-GV4R-V564-GWG2
Bulletin has no description...
MINI-86M3-8FMJ-56GV
Bulletin has no description...
MINI-J9X5-68JJ-5368
Bulletin has no description...
MINI-V4P4-8GVQ-J72W
Bulletin has no description...
MINI-V8QJ-PJ82-XHMP
Bulletin has no description...
MINI-4J96-P69V-5VVH
Bulletin has no description...
MINI-7FM8-325H-P25M
Bulletin has no description...
MINI-697X-8M33-W3G4
Bulletin has no description...
MINI-FJ6V-R6RV-C5CQ
Bulletin has no description...
MINI-Q8GQ-X22M-VP2V
Bulletin has no description...
MINI-CWMX-XVVF-VMJP
Bulletin has no description...
MINI-FJ35-CQ2C-HXFR
Bulletin has no description...
GHSA-9FR6-4GFG-395G Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
Summary Axios default-instance requests that omit an explicit method can read an inherited method value from Object.prototype. If another vulnerability in the same process pollutes Object.prototype.method, calls such as axios.request url and axios url can send a state-changing HTTP method instead...
MINI-FP7H-RX68-V9PP
Bulletin has no description...
MINI-V9VJ-5R8Q-C3CQ
Bulletin has no description...
MINI-V6CR-G89P-X5V3
Bulletin has no description...
MINI-6CJM-5XQF-Q98W
Bulletin has no description...
MINI-V6QC-4FP9-2X7C
Bulletin has no description...
MINI-5XP4-5XPW-CC5F
Bulletin has no description...
MINI-MJH7-58V7-J825
Bulletin has no description...
MINI-994P-45WC-58CV
Bulletin has no description...
MINI-99H8-9W88-CFPM
Bulletin has no description...
MINI-6RX2-PG6J-JW27
Bulletin has no description...
MINI-6G32-C92J-C32X
Bulletin has no description...
MINI-Q3W8-PW3Q-VVXW
Bulletin has no description...
MINI-GR24-6XRG-7M8W
Bulletin has no description...
CGA-9XMM-M7GH-FXQV
Bulletin has no description...
GHSA-PRGH-XP8R-P3M5 Nodemailer addressparser: O(n^2) on comment-joined addresses enables a remote DoS (reachable via mailparser)
Summary nodemailer/lib/addressparser parses one shape of address in On^2 time. A single 640 KB address value blocks the Node.js event loop for roughly 7 seconds. And it is reachable without auth: mailparser feeds inbound email headers straight into this parser, so one crafted email is enough to...
CGA-3M6G-263J-WH72
Bulletin has no description...
CGA-8HHM-334X-5QCF
Bulletin has no description...
MINI-8239-G8X2-VGFV
Bulletin has no description...
MINI-F3W6-59C6-V6X5
Bulletin has no description...
MINI-XHC8-G587-3HR5
Bulletin has no description...
MINI-VC58-J29H-M5CR
Bulletin has no description...
CGA-M5C7-RXRW-VC8W
Bulletin has no description...
CGA-4F32-XFQ2-4V82
Bulletin has no description...
CGA-VC38-8PC8-CQV4
Bulletin has no description...
CGA-P67W-X9MV-CCWP
Bulletin has no description...
CGA-J3G9-JGG8-XQXG
Bulletin has no description...