425118 matches found
PT-2026-117303
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor. init of the file deeppavlov/models/preprocessors/multitask preprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried...
PT-2026-118034
ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud getFileURL Endpoint Leads to Remote Denial of Service in github.com/luskaner/ageLANServer/server...
PT-2026-131741
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 12.2.16-tuxcare.2...
PT-2026-131234
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 11.2.14-tuxcare.12...
PT-2026-131972
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 11.2.11-tuxcare.1...
PT-2026-131395
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 7.2.11-tuxcare.1...
PT-2026-130981
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 17.3.12-tuxcare.7...
PT-2026-131610
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 13.4.0-tuxcare.3...
PT-2026-133042
TuxCare rebuilt @babel/plugin-transform-spread to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-130950
TuxCare rebuilt @angular/platform-browser to address 15 CVEs. Fixed in 15.2.9-tuxcare.2...
PT-2026-131008
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 12.2.0-tuxcare.2...
PT-2026-131024
TuxCare rebuilt @angular/platform-browser to address 2 CVEs. Fixed in 13.3.11-tuxcare.2...
PT-2026-133048
TuxCare rebuilt @babel/plugin-transform-spread to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-133057
TuxCare rebuilt @babel/plugin-transform-for-of to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-132016
TuxCare rebuilt @babel/helper-builder-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-133049
TuxCare rebuilt @storybook/builder-manager to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-133054
TuxCare rebuilt @babel/plugin-transform-for-of to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-130887
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 12.2.0-tuxcare.7...
PT-2026-130843
TuxCare rebuilt @angular/platform-browser to address 4 CVEs. Fixed in 16.2.12-tuxcare.14...
PT-2026-131392
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 18.2.12-tuxcare.1...
PT-2026-131826
TuxCare rebuilt @angular/service-worker to address 3 CVEs. Fixed in 15.0.3-tuxcare.6...
PT-2026-131401
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 5.2.7-tuxcare.2...
PT-2026-131180
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 14.2.8-tuxcare.6...
PT-2026-131530
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 11.2.11-tuxcare.7...
PT-2026-131837
TuxCare rebuilt @angular/service-worker to address 3 CVEs. Fixed in 17.1.0-tuxcare.6...
PT-2026-131125
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 13.3.0-tuxcare.3...
PT-2026-130430
TuxCare rebuilt @angular/localize to address 3 CVEs. Fixed in 15.2.6-tuxcare.5...
PT-2026-117431
Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy...
PT-2026-130790
TuxCare rebuilt @angular/platform-browser to address 2 CVEs. Fixed in 10.1.0-tuxcare.5...
PT-2026-131985
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 7.2.11-tuxcare.1...
PT-2026-117551
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...
PT-2026-130895
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 13.3.11-tuxcare.6...
PT-2026-133034
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.12.1-tuxcare.2...
PT-2026-117432
Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint validation and an internal address when Guzzle...
PT-2026-132603
TuxCare rebuilt @react-router/remix-routes-option-adapter to address 1 CVE. Fixed in 7.18.1-tuxcare.1...
PT-2026-131973
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 5.1.0-tuxcare.1...
PT-2026-131201
TuxCare rebuilt @angular/platform-server to address 4 CVEs. Fixed in 18.2.14-tuxcare.15...
PT-2026-130886
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 12.0.0-tuxcare.7...
PT-2026-131957
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 10.2.5-tuxcare.7...
PT-2026-130751
TuxCare rebuilt @angular/platform-browser to address 2 CVEs. Fixed in 6.1.10-tuxcare.8...
PT-2026-117213
A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedure of the file packages/trpc/server/routers/viewer/webhook/util.ts of the component Webhook Handler. Executing a manipulation of the argument ID can lead to authorization bypass...
PT-2026-117642
Name of the Vulnerable Software and Affected Versions DiffSK configobj versions prior to 5.1.0 Description Remote exploitation is possible due to inefficient regular expression complexity within the sectionmarker function located in the configobj/ init .py file. Recommendations At the moment, the...
PT-2026-130713
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 9.1.13-tuxcare.4...
PT-2026-117447
Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that...
PT-2026-133200
TuxCare rebuilt @babel/plugin-transform-destructuring to address 2 CVEs. Fixed in 7.23.0-tuxcare.1...
PT-2026-133185
TuxCare rebuilt markdown-it to address 2 CVEs. Fixed in 12.3.0-tuxcare.2...
PT-2026-117542
CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuin...
PT-2026-131676
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...