2026

Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating

When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has

A repository's external issue tracker regular expression containing alternating capture groups could produce invalid sli

Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was

When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with ad

Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that co

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploi

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could a

A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow m

A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation cou

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successf

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote

An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Ma

A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated re

Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the G

Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads,

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approve

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gite

When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without ch

Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's p

Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a spe

Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privi

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In th

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send

On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker wi

On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vuln

An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load

An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated

An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticate

A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload

A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to

A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store mali

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the

On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. A

Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a

When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its

A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attac

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnera

A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the u

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privile

In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalati

WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py p

Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instanti