261320 matches found
PT-2026-100568
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101450
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101553
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102058
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102046
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102192
Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100899
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101832
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101639
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102264
Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100966
Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101218
Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95427
Name of the Vulnerable Software and Affected Versions uutils coreutils versions prior to 0.10.0 Description The install function applies setuid or setgid mode bits to installation destinations before finalizing ownership changes. On capability-restricted systems, if the ownership change operation...
PT-2026-100204
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101949
Security vulnerability affects the gitea package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100956
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100898
Security vulnerability affects the kafka package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95334
Name of the Vulnerable Software and Affected Versions Master Addons for Elementor versions prior to 3.2.3 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with contributor-level acce...
PT-2026-100171
ghsa-8xwf-rjm4-xvhv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100040
Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100841
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99709
Name of the Vulnerable Software and Affected Versions Obot versions prior to 0.23.0 Description When registry authentication is enabled via the OBOT SERVER ENABLE REGISTRY AUTH variable, the software fails to enforce authentication on MCP Registry endpoints under the /v0.1/ path. This occurs...
PT-2026-100069
Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100361
ghsa-8gc5-j5rx-235r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100844
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100052
Security vulnerability affects the druid-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100522
Security vulnerability affects the tekton-chains-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102137
Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95580
Name of the Vulnerable Software and Affected Versions SysReptor Professional versions prior to 2026.61 Description Authenticated users can upload image files that trigger Ghostscript during processing, allowing embedded PostScript to operate within the shared temporary directory. By combining thi...
PT-2026-101956
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101137
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95300
Name of the Vulnerable Software and Affected Versions ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin versions prior to 3.5.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occur...
PT-2026-95499
Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0 Description Semantic MediaWiki is an open-source extension for MediaWiki used for storing and querying data. The software fails to apply sufficient output-context encoding when the value parameter is...
PT-2026-95212
Name of the Vulnerable Software and Affected Versions Approval app affected versions not specified Description The 'approve/reject' endpoint fails to properly enforce a freshness check. The system is designed to require the current etag of a file to ensure that an approver does not act on a versi...
PT-2026-95719
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5 Description Insufficient publish access control in the 'getDynamicIcon' endpoint allows users with read-only tokens to access document metadata. By calling this endpoint with the type parameter set to 8 and...
PT-2026-100429
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100484
Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101152
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95244
Name of the Vulnerable Software and Affected Versions Product Question and Answer versions prior to 1.1.1 Description The Product Question and Answer WordPress plugin fails to sanitize and escape parameters used in SQL queries during AJAX actions accessible to unauthenticated users. This allows a...
PT-2026-102143
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100832
ghsa-m425-mq94-257g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95432
Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.20 Description When operating in prefill/decode disaggregation mode with the Mooncake KV transfer backend, the system fails to validate bootstrap room values. This allows for unbounded transfer state allocation...
PT-2026-95236
Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions prior to 51.1.81 Description The plugin fails to perform per-object authorization checks for image-optimization actions. It relies on a coarse capability shared by lower-privileged users and does not verify...
PT-2026-95445
Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description A buffer overflow occurs when processing malformed compressed data on channels configured with compression enabled. This flaw allows a remote attacker to cause a denial of service or execute...
PT-2026-100693
Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95592
Name of the Vulnerable Software and Affected Versions CSSOM versions 0.5.0 and earlier Description A denial of service issue exists in the setProperty function of CSSStyleDeclaration due to a failure to validate reserved property names. An attacker can provide a stylesheet containing a declaratio...
PT-2026-100835
ghsa-6jv9-x5w9-2ccm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100094
Security vulnerability affects the activemq package. This issue is resolved in later releases. See references for vulnerability details...