Search Vulnerabilities

Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE

ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components

ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers

NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields

NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size

NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archive

NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields

Apprise forwards configured auth headers across cross-origin HTTP redirects

In JetBrains YouTrack before 2026

In JetBrains YouTrack before 2026

Cookie attribute injection in Plug.Conn.Cookies.encode/2

SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service

An update for python-pygments is now available for EulerOS V2.0SP12

An update for openjpeg2 is now available for EulerOS V2.0SP12

An update for libxslt is now available for EulerOS V2.0SP12

An update for libxml2 is now available for EulerOS V2.0SP12

An update for python-pygments is now available for EulerOS V2.0SP12(x86_64)

An update for openjpeg2 is now available for EulerOS V2.0SP12(x86_64)

An update for libxslt is now available for EulerOS V2.0SP12(x86_64)

An update for libxml2 is now available for EulerOS V2.0SP12(x86_64)