Security Advisories | GitStock

medium2026-09-09

CVE-2026-69304-Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

dotnet/aspnetcore · GHSA-8cp2-47hg-mfgh

high2026-09-09

CVE-2026-69522-Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

dotnet/runtime · GHSA-2j8r-3c22-8565

high2026-09-09

CVE-2026-69439-Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

dotnet/runtime · GHSA-527h-q9f6-p7qx

high2026-09-09

CVE-2026-71328-Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

dotnet/runtime · GHSA-63gh-g2x5-x69v

medium2026-09-08

CVE-2026-86996-n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

n8n-io/n8n · GHSA-7hgx-277f-7vmg

medium2026-09-08

Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain

nodemailer/nodemailer · GHSA-wmmp-3585-3rmp

high2026-09-08

Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

nodemailer/nodemailer · GHSA-2x7j-588g-ccc2

medium2026-09-08

Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain

nodemailer/nodemailer · GHSA-cc9r-2j5m-2m83

high2026-09-08

OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree

microsoft/typespec · GHSA-2q42-4q24-7rgv

high2026-09-08

CVE-2026-77078-multer vulnerable to Denial of Service via crafted multipart field names

expressjs/multer · GHSA-wc9g-mqfw-jrwm

high2026-09-08

CVE-2026-77037-multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

expressjs/multer · GHSA-qfvm-cv95-jqjf

low2026-09-08

CVE-2026-77063-multer vulnerable to file size limit bypass via async fileFilter race condition

expressjs/multer · GHSA-qvfw-j98x-7q72

high2026-09-08

CVE-2026-82333-multer vulnerable to Denial of Service via oversized array index in field names

expressjs/multer · GHSA-535w-7cp7-47q4

medium2026-09-08

CVE-2026-15603-morgan vulnerable to Log Forging via unescaped Unicode line separators

expressjs/morgan · GHSA-jxfw-x594-9x9m

high2026-09-08

CVE-2026-84452-Windows ML CLI: CORS misconfig enables localhost RCE

microsoft/winml-cli · GHSA-96p9-rh4f-92cf

high2026-09-08

CVE-2026-81525-mongodb: Reject "." and NUL bytes in database and collection names

mongodb/mongo-php-library · GHSA-65fr-j4p9-vc33

critical2026-09-08

Astro: Remote code execution through AVIF image optimization

withastro/astro · GHSA-26w7-cxv4-gfx2

medium2026-09-08

CVE-2026-84376-Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

withastro/astro · GHSA-376h-93r7-7g6f

high2026-09-08

CVE-2026-84361-Composer arbitrary command execution via a malicious package's Perforce source URL

composer/composer · GHSA-rvx4-ffvw-m9q3

high2026-09-08

sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545

lovell/sharp · GHSA-rgj7-g3m4-5g8c

← Previous 1 79 80 81 82 83 1540 Next →