221294 matches found
CVE-2026-103871
A flaw was found in pulp-python's PyPI simple index. Project names are written into the HTML index without escaping. A user who can publish a Python package can store markup in the package name. A person who opens that index in a browser runs the markup in the origin that served the page, and the...
CVE-2026-103870
A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...
CVE-2026-103869
A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who can sync an Ansible remote that uses token refresh, and can point that remote at a server they...
CVE-2026-103868
A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives the username,...
CVE-2026-106501
A flaw was found in @backstage/plugin-scaffolder-backend. An authenticated user with permission to view another user's Scaffolder task can retrieve internal task execution data, leading to sensitive information disclosure. If this execution data contains credentials for external services, an...
CVE-2026-106489
A flaw was found in the Backstage TechDocs backend plugin. An authenticated user with access to at least one documentation site can craft a request to bypass access controls when permissions and external storage are enabled. This flaw allows an attacker to view restricted documentation belonging ...
CVE-2026-106460
A flaw was found in the @backstage/plugin-auth-node package. This vulnerability allows an authenticated attacker to achieve privilege escalation by assuming another user's catalog identity and gaining their access permissions. The issue occurs because the component does not consistently enforce...
CVE-2026-106505
A flaw was found in the plugin-techdocs-node component of Backstage. This vulnerability allows an attacker with permission to commit changes to a repository utilizing TechDocs to bypass the MkDocs configuration sanitizer. By supplying a crafted configuration file, the attacker can achieve arbitra...
CVE-2026-106455
A flaw was found in the Backstage @backstage/plugin-techdocs-node package. This vulnerability allows information disclosure when an authenticated attacker with control over a TechDocs documentation repository exploits improper validation of MkDocs plugin configurations. During documentation build...
CVE-2026-106494
A flaw was found in the @backstage/backend-defaults package of Backstage. Improper input validation in cloud storage URL readers allows an attacker with write access to an associated cloud storage bucket to create specially crafted object names. Under certain deployment configurations, these name...
CVE-2026-106498
A flaw was found in @backstage/plugin-catalog-backend. An authenticated remote user can craft a catalog entity containing placeholder directives that reference resources outside the entity's source repository due to improper URL validation. Under certain configurations, this can lead to informati...
CVE-2026-106500
A flaw was found in @backstage/plugin-scaffolder-backend. Due to improper task state validation, an authenticated user with permissions to create and access Scaffolder tasks can affect files accessible to the Backstage backend under specific timing and deployment conditions. If the backend...
CVE-2026-106492
A flaw was found in @backstage/backend-defaults. The package fails to properly preserve access restrictions during service credential delegation when requests are routed through plugin delegation paths. An authenticated service with limited privileges can exploit this issue to bypass access...
CVE-2026-101023
A flaw was found in Gitea. The OAuth2 Open Authorization token endpoint validates the signature and grant of a token during a refresh request, but fails to confirm that the submitted token is specifically a refresh token. An attacker or user possessing a valid, unexpired access token can exchange...
CVE-2026-106493
A flaw was found in Backstage. Cloud storage catalog providers do not sufficiently validate object paths. An attacker with permissions to create or rename objects in a configured cloud storage source, such as Amazon Web Services AWS S3 or Azure Blob Storage, can cause catalog descriptors to be re...
CVE-2026-96594
A flaw was found in Gitea. The repository media application programming interface API endpoint does not return appropriate content-type and disposition security headers when serving small files directly from a repository. An authenticated attacker with repository push access can commit a maliciou...
CVE-2026-105268
A flaw was found in Gitea. The Application Programming Interface API endpoints handling issue attachments improperly process attachments associated with comments on that issue. An authenticated user who created an issue can exploit this flaw to rename or delete attachments posted by other users i...
CVE-2026-89182
A flaw was found in Gitea. When an instance is configured to enforce private repositories, the post-receive hook fails to block the push option that sets a repository as public during initial creation by push. An authenticated user permitted to create repositories can exploit this issue to bypass...
CVE-2026-96404
A flaw was found in Gitea. When the web installer is accessible against a database containing existing users, an unauthenticated remote attacker can submit the installation form specifying an existing administrator username. The application issues an authenticated session without verifying the...
CVE-2026-103059
A flaw was found in Gitea. When the built-in Secure Shell SSH server is enabled, public keys are evaluated using a case-insensitive comparison on certain database systems. A remote attacker who constructs a case variant of an existing user's registered public key and possesses the corresponding...
CVE-2026-94205
A flaw was found in Gitea Actions. When determining whether workflow runs from fork pull requests require approval, Gitea evaluated the identity of the user triggering the event rather than the author of the pull request. Consequently, routine repository maintainer actions, such as adding a label...
CVE-2026-106390
An incorrect provision of specified functionality flaw was found in the SanitizerAPI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556213916...
CVE-2026-106413
A race condition flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553336689...
CVE-2026-106385
A race condition flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554874487...
CVE-2026-106334
An information leak flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556229780...
CVE-2026-106316
An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554556423...
CVE-2026-106355
A missing authorization flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559777100...
CVE-2026-106294
An incomplete cleanup flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556215048...
CVE-2026-106272
An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556259957...
CVE-2026-106269
An use after free flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565742178...
CVE-2026-106345
An use of released resource flaw was found in the Session component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556258544...
CVE-2026-106320
An use of released resource flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553929758...
CVE-2026-106325
An incorrect reference resolution flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556211265...
CVE-2026-106234
An use after free flaw was found in the Network component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/564085088...
CVE-2026-106310
An use of released resource flaw was found in the FontAccess component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556250086...
CVE-2026-106418
A missing authorization flaw was found in the Network component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553283471...
CVE-2026-106251
An ui misrepresentation flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556237314...
CVE-2026-106417
An integer overflow flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536471438...
CVE-2026-106256
An information leak flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553335319...
CVE-2026-106350
An incorrect authorization flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553270559...
CVE-2026-106195
An incorrect authorization flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553930843...
CVE-2026-106305
An ui misrepresentation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553276352...
CVE-2026-106371
An incorrect authorization flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553326010...
CVE-2026-106399
An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/530237174...
CVE-2026-106380
An ui misrepresentation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553168380...
CVE-2026-106285
An ui misrepresentation flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533119681...
CVE-2026-106368
An ui misrepresentation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553252261...
CVE-2026-106270
An incorrect authorization flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553269860...