TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Priority MEDIUM 46
A flaw was found in GLib.
Vulnerabilities
11 records
TI-2026-30432 CVE-2026-42055 · GHSA-78jw-ww3g-9wp7
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
Priority MEDIUM 51
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
TI-2026-32429 CVE-2026-44495 · GHSA-3g43-6gmg-66jw
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Priority HIGH 69
Axios is a promise based HTTP client for the browser and Node.js.
TI-2025-43440 CVE-2025-71319 · GHSA-m5qc-5hw7-8vg7
image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
Priority HIGH 77
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…
TI-2026-08132 CVE-2026-9256 · GHSA-h78r-86c6-jgp4
NGINX ngx_http_rewrite_module vulnerability
Priority MEDIUM 55
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.
TI-2026-23208 CVE-2026-29063 · GHSA-wf6x-7x77-mvgw
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
Priority MEDIUM 46
Immutable.js provides many Persistent Immutable data structures.
TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4
Glib: integer overflow in in g_escape_uri_string()
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
TI-2024-11212 CVE-2024-12088 · GHSA-ffph-g3pc-8r3g
Rsync: --safe-links option bypass leads to path traversal
Priority HIGH 66
A flaw was found in rsync.
TI-2023-28739 CVE-2023-52356 · GHSA-cx8g-4cf5-cjv3
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
Priority HIGH 72
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
TI-2020-01658 CVE-2020-1712 · GHSA-wggx-8wf7-vg3g
Use after free in [UNKNOWN] systemd
Priority LOW 36
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages.