TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx
wheel Allows Arbitrary File Permission Modification via Path Traversal
Priority MEDIUM 64
wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.
RHSA-2026:62115
Red Hat Ceph Storage
Released 2026-09-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 8.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-8-rhel9
Fixes 9 records
TI-2025-36987 CVE-2025-59436 · GHSA-qf5v-q897-m77r
Server-side request forgery in fedorindutny ip
Priority MEDIUM 49
The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic.
TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
Priority MEDIUM 46
urllib3 is a user-friendly HTTP client library for Python.
TI-2019-08055 CVE-2019-10790 · GHSA-mxhp-79qh-mcx6
Exposure of resource to wrong sphere in taffy npm module
Priority LOW 37
taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB.
TI-2025-32065 CVE-2025-50182 · GHSA-48p4-8xcf-vxj5
urllib3 does not control redirects in browsers and Node.js
Priority LOW 28
urllib3 is a user-friendly HTTP client library for Python.
TI-2025-32064 CVE-2025-50181 · GHSA-pq67-6m6q-mj2v
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
Priority LOW 28
urllib3 is a user-friendly HTTP client library for Python.
TI-2023-12726 CVE-2023-28155 · GHSA-p8p7-x288-28g6
The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an…
Priority LOW 28
The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP).
TI-2023-10615 CVE-2023-25153 · GHSA-259w-8hf6-59c2
containerd OCI image importer memory exhaustion
Priority LOW 28
containerd is an open source container runtime.
TI-2024-10975 CVE-2024-11831 · GHSA-76p7-773f-r4q5
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
Priority LOW 27
A flaw was found in npm-serialize-javascript.