414787 matches found
PT-2026-122849
Security vulnerability affects the strimzi-kafka-operator package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...
PT-2026-122817
Security vulnerability affects the langfuse package. Next...
PT-2026-122815
Security vulnerability affects the strimzi-kafka-operator package. Out-of-bounds memory operations in org...
PT-2026-122814
Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...
PT-2026-122805
Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers...
PT-2026-122744
Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...
PT-2026-122768
Security vulnerability affects the kafka package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...
PT-2026-122861
Security vulnerability affects the strimzi-kafka-operator package. Netty io...
PT-2026-122865
Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers...
PT-2026-122835
Security vulnerability affects the kafka package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-122834
Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver...
PT-2026-122837
Security vulnerability affects the strimzi-kafka-operator package. Uncontrolled Resource Consumption vulnerability in Apache Commons IO...
PT-2026-122857
Security vulnerability affects the langfuse package. hono before 4...
PT-2026-122853
Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...
PT-2026-122869
Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...
PT-2026-122688
Security vulnerability affects the nfs-subdir-external-provisioner package. Within HostnameError...
PT-2026-122689
Security vulnerability affects the renovate package. node-tar is a full-featured Tar for Node...
PT-2026-122686
Security vulnerability affects the langfuse package. @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon...
PT-2026-122760
Security vulnerability affects the renovate package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
PT-2026-122730
Security vulnerability affects the nfs-subdir-external-provisioner package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input...
PT-2026-114847
In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...
PT-2026-114865
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive...
PT-2026-115002
Name of the Vulnerable Software and Affected Versions markdown2 versions prior to 2.5.5 Description A Regular-Expression Denial of Service ReDoS exists in the extract metadata function within the lib/markdown2.py file. An attacker can trigger this issue by providing a specially crafted Markdown...
PT-2026-114887
A cross-site scripting XSS vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP...
PT-2026-115278
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base url. Attackers can set base url via the provider config endpoint and trigger POST /api/v1/models/check to...
PT-2026-122852
Security vulnerability affects the nfs-subdir-external-provisioner package. OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go...
PT-2026-122832
Security vulnerability affects the prometheus package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
PT-2026-122728
Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous, event-driven network application framework...
PT-2026-122749
Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-114997
Name of the Vulnerable Software and Affected Versions OPNsense versions prior to 26.1.11 Description The OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view fail to apply quote-safe encoding to the common name of a client when...
PT-2026-122708
Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-122836
Security vulnerability affects the strimzi-kafka-operator package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
PT-2026-122745
Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous, event-driven network application framework...
PT-2026-115020
Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.p...
PT-2026-122799
Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...
PT-2026-123080
TuxCare rebuilt qs to address 1 CVE. Fixed in 2.2.5-tuxcare.2...
PT-2026-123079
TuxCare rebuilt qs to address 1 CVE. Fixed in 2.3.3-tuxcare.2...
PT-2026-123089
TuxCare rebuilt 37 io.netty packages to address 13 CVEs. Fixed in 4.1.42.Final-tuxcare.1...
PT-2026-123085
TuxCare rebuilt 7 org.springframework.amqp packages to address 4 CVEs. Fixed in 3.0.10-tuxcare.3...
PT-2026-122840
Security vulnerability affects the langfuse package. Nodemailer before 10...
PT-2026-122718
Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
PT-2026-123083
TuxCare rebuilt 6 org.springframework.amqp packages to address 3 CVEs. Fixed in 2.4.16-tuxcare.2...
PT-2026-123082
TuxCare rebuilt qs to address 1 CVE. Fixed in 2.4.2-tuxcare.4...
PT-2026-123081
TuxCare rebuilt qs to address 1 CVE. Fixed in 3.1.0-tuxcare.4...
PT-2026-122841
GHSA-mhm7-754m-9p8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-122783
Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...
PT-2026-122757
Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-122711
Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...