Open Source Vulnerabilities

kubernetes-dns-node-cache, kubernetes-dns-node-cache, kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache, kubernetes-dns-node-cache, kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache, kubernetes-dns-node-cache, kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache

CoreDNS is a DNS server that chains plugins

kubernetes-dns-node-cache

quic-go is an implementation of the QUIC protocol in Go

kubernetes-dns-node-cache, kubernetes-dns-node-cache, kubernetes-dns-node-cache

CoreDNS is a DNS server written in Go

undici, @rootio/undici

CVE-2026-22036 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-1526 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-2229 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-1527 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-1528 in undici - Patched by Root

gitea, gitea

Versions of the package github

kubernetes-dns-node-cache, kubernetes-dns-node-cache, kubernetes-dns-node-cache

CoreDNS is a DNS server written in Go

kubernetes-dns-node-cache, kubernetes-dns-node-cache, kubernetes-dns-node-cache

CoreDNS is a DNS server written in Go

commercial-gitlab-rails-ee-19.4

commercial-gitlab-rails-ee-19.4

commercial-gitlab-rails-ee-19.4

wazuh-dashboard-anomaly-detection-dashboards-plugin-fips

undici, @rootio/undici

CVE-2025-22150 in undici - Patched by Root

undici, @rootio/undici

CVE-2026-16728 in undici - Patched by Root

nextcloud-server-33, nextcloud-server-33

wazuh-dashboard-dashboards-visualizations

commercial-gitlab-rails-ee-19.3

commercial-gitlab-rails-ee-19.3

commercial-gitlab-rails-ee-19.3

SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

SQLite CLI through 3.54.1 Command Injection via .recover Output

Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects

Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update

Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name

phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute

phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer

OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields

OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch

OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

n8n from 2.14.0 through 2.46.3 Path Traversal via Databricks Node

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Blackboard Import Path Traversal

Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler

Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestions

Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}

Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Images

Lago through 1.55.0 Cross-Organization Invoice Payment Manipulation via Stripe Webhook

phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set