Vulnerabilities

Recent vulnerabilities

Recent vulnerabilities from 🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.

GitHub 🐙

Recent vulnerabilities · 375274 entries
ID Severity Description Published Updated
ghsa-wr93-w764-3636
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesti… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-w8cx-4cf2-9hvr
8.7 (4.0)
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that modu… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-q84r-gp7c-vfr3
A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do expone… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-j9vw-9527-3hx6
3.5 (3.1)
2.0 (4.0)
A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-cw6x-vx7r-8x4q
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which … 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-8xvj-2pjr-73jq
When Neethi fetches a remote policy reference, it only limits the time per read, not the whole tran… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-6vm6-6w33-f874
A small WS-Policy document using repeated policy references can force Neethi to re-expand the same … 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-5p5f-qvx9-whpj
7.1 (3.1)
A flaw was found in the signature verification logic of noobaa-core, the core component of the NooB… 2026-09-21T12:32:39Z 2026-09-21T12:32:39Z
ghsa-vrgw-vghm-5p74
7.2 (4.0)
Temporal Server decided whether a Workflow completion callback was internal by reading a caller-sup… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-vg3p-fxfm-m684
8.7 (4.0)
github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metada… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-2mhp-wpjp-pjr8
8.7 (4.0)
github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TCha… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-2cw5-f255-55f8
8.7 (4.0)
github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application change… 2026-09-21T12:32:38Z 2026-09-21T12:32:38Z
ghsa-pv35-7w89-v65c
7.1 (4.0)
Temporal Server did not bound the work performed while searching for a Schedule's next action time.… 2026-09-21T12:32:37Z 2026-09-21T12:32:37Z
ghsa-g9jq-gq4v-4rw3
8.7 (4.0)
temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version c… 2026-09-21T12:32:36Z 2026-09-21T12:32:37Z
ghsa-7vcf-7m3r-v7x3
8.7 (4.0)
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a corres… 2026-09-21T12:32:37Z 2026-09-21T12:32:37Z
ghsa-rf8x-cp2v-q2fg
5.1 (4.0)
Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side re… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-mhq8-392f-7m6m
8.8 (3.1)
A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious che… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-gm83-3hcx-j6jj
1.0 (4.0)
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable … 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-g33h-rrj9-75qv
7.4 (3.1)
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificate… 2026-09-16T18:32:03Z 2026-09-21T12:32:36Z
ghsa-8mcv-mp35-55rc
6.3 (4.0)
MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galax… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-5q8h-fhcg-2395
5.3 (4.0)
Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <… 2026-09-21T12:32:36Z 2026-09-21T12:32:36Z
ghsa-vh9j-mvrr-922q
8.7 (3.1)
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which d… 2026-08-10T21:32:06Z 2026-09-21T12:32:33Z
ghsa-v6pg-cp3x-x49r
8.8 (3.1)
A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edi… 2026-08-10T21:32:07Z 2026-09-21T12:32:33Z
ghsa-qw34-v3jw-3crv
8.1 (3.1)
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user wit… 2026-08-10T21:32:06Z 2026-09-21T12:32:33Z
ghsa-p5f2-j2p5-7p7v
9.6 (3.1)
A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() f… 2026-08-18T18:31:57Z 2026-09-21T12:32:33Z
ghsa-h7xh-qc2m-rc58
8.8 (3.1)
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI o… 2026-08-10T21:32:07Z 2026-09-21T12:32:33Z
ghsa-g6qh-932v-chpq
8.8 (3.1)
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vu… 2026-08-10T21:32:06Z 2026-09-21T12:32:33Z
ghsa-g68c-wmxr-x3rh
7.1 (3.1)
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper a… 2026-08-10T21:32:06Z 2026-09-21T12:32:33Z
ghsa-cr6h-6g58-pq2g
7.5 (3.1)
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, makin… 2026-08-10T21:32:06Z 2026-09-21T12:32:33Z
ghsa-8jj2-p7p7-6mr3
9.9 (3.1)
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a us… 2026-08-17T21:31:24Z 2026-09-21T12:32:33Z