2026

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to

A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this v

Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: app

The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether

The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored di

With `[repository] FORCE_PRIVATE = true`, Gitea creates new repositories as private, but the post-receive hook still app

NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node pack

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node pack

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend pac

The Gitea API routes for issue attachments (`/api/v1/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}`) also a

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API se

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decom

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loca

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend pack

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-mod

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may no

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-ba

Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backen

Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-back

Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCo

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lam

A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autof

When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access a

With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL va

When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" o

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names w

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circum

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manage

A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote a

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote a

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a loc

A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow

A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exp

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authent

A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malici

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardTo

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validat