424766 matches found
PT-2026-130811
TuxCare rebuilt @angular/platform-browser to address 3 CVEs. Fixed in 8.2.14-tuxcare.13...
PT-2026-130752
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 11.2.11-tuxcare.2...
PT-2026-130758
TuxCare rebuilt @angular/platform-browser to address 7 CVEs. Fixed in 4.3.5-tuxcare.3...
PT-2026-133117
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.12.1-tuxcare.2...
PT-2026-133174
TuxCare rebuilt brace-expansion to address 6 CVEs. Fixed in 5.0.6-tuxcare.1...
PT-2026-133154
TuxCare rebuilt webpack to address 2 CVEs. Fixed in 5.99.8-tuxcare.1...
PT-2026-133102
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.9.10.6-tuxcare.1...
PT-2026-131189
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 15.2.9-tuxcare.5...
PT-2026-133168
TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.18.2-tuxcare.1...
PT-2026-132892
Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow bignum. With allow bignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply...
PT-2026-132890
Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow barekey in decode hv. With utf8 and allow barekey, which relaxed enables, a quoted key is validated as UTF-8 but a bare key's bytes are stored as a UTF-8 flagged string without any check...
PT-2026-131717
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 16.2.7-tuxcare.1...
PT-2026-132901
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...
PT-2026-131738
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 6.0.1-tuxcare.3...
PT-2026-131746
TuxCare rebuilt @angular/service-worker to address 13 CVEs. Fixed in 12.2.17-tuxcare.7...
PT-2026-131111
TuxCare rebuilt @angular/platform-server to address 16 CVEs. Fixed in 14.2.12-tuxcare.2...
PT-2026-131497
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 7.2.1-tuxcare.5...
PT-2026-130838
TuxCare rebuilt @angular/platform-browser to address 3 CVEs. Fixed in 15.0.3-tuxcare.6...
PT-2026-131684
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...
PT-2026-131657
TuxCare rebuilt @storybook/addon-essentials to address 1 CVE. Fixed in 8.5.8-tuxcare.3...
PT-2026-130922
TuxCare rebuilt @angular/platform-browser to address 15 CVEs. Fixed in 15.2.2-tuxcare.2...
PT-2026-131284
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 18.2.14-tuxcare.13...
PT-2026-131253
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 14.2.12-tuxcare.6...
PT-2026-130716
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 16.2.12-tuxcare.6...
PT-2026-131506
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 17.1.0-tuxcare.8...
PT-2026-117397
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
PT-2026-117398
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate remote url in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...
PT-2026-131821
TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 5.2.11-tuxcare.20...
PT-2026-117305
A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...
PT-2026-133040
TuxCare rebuilt @babel/plugin-transform-spread to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-117539
Name of the Vulnerable Software and Affected Versions Hono versions 4.12.4 through 4.13.10 Description The serveStatic component in the Hono web application framework incorrectly decodes a routed request path a second time before performing a filesystem lookup. This behavior allows a malformed...
PT-2026-122237
Name of the Vulnerable Software and Affected Versions Wasmtime versions 46.0.0 through 48.0.6 Wasmtime versions 49.0.0 through 49.0.3 Description A flaw exists when lowering a host-created component-model stream or future into a guest. The system may omit a required payload-type check after the...
PT-2026-131124
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 13.3.12-tuxcare.3...
PT-2026-131172
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 13.4.0-tuxcare.11...
PT-2026-131091
TuxCare rebuilt @angular/platform-server to address 5 CVEs. Fixed in 18.2.14-tuxcare.12...
PT-2026-131442
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 13.3.12-tuxcare.4...
PT-2026-131788
TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 15.2.1-tuxcare.3...
PT-2026-131359
TuxCare rebuilt @angular/platform-server to address 2 CVEs. Fixed in 15.2.9-tuxcare.3...
PT-2026-131301
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 14.3.0-tuxcare.5...
PT-2026-118009
Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element in github.com/xuri/excelize...
PT-2026-131448
TuxCare rebuilt @angular/platform-browser-dynamic to address 3 CVEs. Fixed in 16.2.12-tuxcare.12...
PT-2026-132036
TuxCare rebuilt @babel/plugin-transform-unicode-regex to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
PT-2026-131269
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 17.3.12-tuxcare.7...
PT-2026-131767
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 10.2.5-tuxcare.9...
PT-2026-131647
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 11.2.11-tuxcare.2...
PT-2026-131093
TuxCare rebuilt @angular/platform-server to address 10 CVEs. Fixed in 11.2.14-tuxcare.7...
PT-2026-131983
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 7.2.1-tuxcare.1...
PT-2026-131081
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 5.1.0-tuxcare.1...