2026

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticate

Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allo

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authent

A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malici

Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only

Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the G

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardTo

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validat

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.cre

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() all

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with

StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map dec

StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recu

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compi

Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars looku

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.preco

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large widt

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character ou

Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed s

Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Re

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the ma

Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net.

Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL ch

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCE

Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads,

Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approve

A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gite

A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (H

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before bei

When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without ch

Gitea's container registry served blob downloads with a `Content-Type` taken from the media type declared in pushed imag

Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's p

When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key was looked up with an

Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a spe

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that cau

Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privi

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested r

Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Alloc

Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When E

Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excess

Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Co

Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an El

Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expressi

Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Funct