2099403 matches found
ROOT-APP-NPM-CVE-2026-22709 CVE-2026-22709 in vm2 - Patched by Root
Root has patched CVE-2026-22709 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10717 AIKIDO-2026-10717 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10717 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2023-30547 CVE-2023-30547 in vm2 - Patched by Root
Root has patched CVE-2023-30547 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47209 CVE-2026-47209 in vm2 - Patched by Root
Root has patched CVE-2026-47209 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-47698 CVE-2026-47698 in vm2 - Patched by Root
Root has patched CVE-2026-47698 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-10727 AIKIDO-2026-10727 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10727 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-24118 CVE-2026-24118 in vm2 - Patched by Root
Root has patched CVE-2026-24118 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root
Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...
BIT-NIFI-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...
BIT-NIFI-2026-86089 Apache NiFi: Missing Process Group Authorization for Connector Migration
Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...
BIT-NIFI-2026-82561 Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods
Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...
BIT-NIFI-2026-81866 Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration
Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...
BIT-NIFI-2026-70469 Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...
EEF-CVE-2026-65634 Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
Summary Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. The BER OID decoder asn1rttber:decsubidentifiers/3 in lib/asn1/src/asn1rttber.erl and...
EEF-CVE-2026-68956 SSH daemon allocates unbounded idle session channels, bypassing max_channels
Summary Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...
EEF-CVE-2026-89422 TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
Summary Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A presharedkey extension in the ServerHello that the client never offered causes the client to complete the handshake witho...
DEBIAN-CVE-2026-87079
Bulletin has no description...
DEBIAN-CVE-2026-74766
Bulletin has no description...
DEBIAN-CVE-2026-87078
Bulletin has no description...
DEBIAN-CVE-2026-87081
Bulletin has no description...
DEBIAN-CVE-2026-87080
Bulletin has no description...
DEBIAN-CVE-2026-74765
Bulletin has no description...
DEBIAN-CVE-2026-87082
Bulletin has no description...
DEBIAN-CVE-2016-15059
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2026-41731 CVE-2026-41731 in org.springframework.kafka:spring-kafka - Patched by Root
Root has patched CVE-2026-41731 in the org.springframework.kafka:spring-kafka package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-Q4GF-8MX6-V5V3 GHSA-q4gf-8mx6-v5v3 in next - Patched by Root
Root has patched GHSA-q4gf-8mx6-v5v3 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-29927 CVE-2025-29927 in next - Patched by Root
Root has patched CVE-2025-29927 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root
Root has patched CVE-2026-5795 in the org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-10050 CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root
Root has patched CVE-2026-10050 in the org.eclipse.jetty:jetty-security package for Root:Maven. Multiple fixed versions available...
DEBIAN-CVE-2026-94640
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2026-40973 CVE-2026-40973 in org.springframework.boot:spring-boot - Patched by Root
Root has patched CVE-2026-40973 in the org.springframework.boot:spring-boot package for Root:Maven. Multiple fixed versions available...
ROOT-APP-COMPOSER-AIKIDO-2026-387398 AIKIDO-2026-387398 in enshrined/svg-sanitize - Patched by Root
Root has patched AIKIDO-2026-387398 in the enshrined/svg-sanitize package for Root:Composer. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in jsonwebtoken - Patched by Root
Root has patched CVE-2015-9235 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-23529 CVE-2022-23529 in jsonwebtoken - Patched by Root
Root has patched CVE-2022-23529 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-23539 CVE-2022-23539 in jsonwebtoken - Patched by Root
Root has patched CVE-2022-23539 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-NSWG-ECO-17 NSWG-ECO-17 in jsonwebtoken - Patched by Root
Root has patched NSWG-ECO-17 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...
MAL-2026-16377 Malicious code in cloushaar-poc-exfil-91827 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8ec6abf4fcd51274f6bf53cece87bc47051b0751b117e137c68d964b05753e16 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
ROOT-APP-COMPOSER-AIKIDO-2026-21741 AIKIDO-2026-21741 in robrichards/xmlseclibs - Patched by Root
Root has patched AIKIDO-2026-21741 in the robrichards/xmlseclibs package for Root:Composer. Multiple fixed versions available...
ROOT-APP-COMPOSER-AIKIDO-2026-134354 AIKIDO-2026-134354 in robrichards/xmlseclibs - Patched by Root
Root has patched AIKIDO-2026-134354 in the robrichards/xmlseclibs package for Root:Composer. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-64530 CVE-2025-64530 in @apollo/composition - Patched by Root
Root has patched CVE-2025-64530 in the @apollo/composition package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-M8JR-FXQX-8XX6 GHSA-m8jr-fxqx-8xx6 in @apollo/composition - Patched by Root
Root has patched GHSA-m8jr-fxqx-8xx6 in the @apollo/composition package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-84446 CVE-2026-84446 in libheif - Patched by Root
Root has patched CVE-2026-84446 in the libheif package for Root:Debian:13. Multiple fixed versions available...
RLSA-2026:69095 Important: libtiff security update
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrary code execution via processcommandopts function CVE-2026-52490 For more details about the security issues, including the impact, a CVSS score,...
RLSA-2026:69120 Moderate: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: DNS cache poisoning via UDP source port predictability CVE-2026-50252 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
RLSA-2026:69113 Moderate: apr-util security update
The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...
RLSA-2026:69112 Important: perl-DBI:1.641 security update
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: DBI for Perl: Heap...
RLSA-2026:69266 Important: openssh security, bug fix, and enhancement update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...
ROOT-OS-DEBIAN-12-CVE-2026-3184 CVE-2026-3184 in util-linux - Patched by Root
Root has patched CVE-2026-3184 in the util-linux package for Root:Debian:12. Multiple fixed versions available...