Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-discourse-2026-55704 | Discourse: Shared-draft titles and excerpts leak through group post serialization | 2026-08-21T11:26:41.076Z | 2026-08-21T11:49:56.463Z |
| bit-discourse-2026-55674 | Discourse: Cache poisoning/XSS via color scheme cookies | 2026-08-21T11:26:39.921Z | 2026-08-21T11:49:56.463Z |
| bit-discourse-2026-53960 | Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD | 2026-08-21T11:26:33.150Z | 2026-08-21T11:49:56.463Z |
| bit-gitlab-2026-19650 | Cross-Site Request Forgery (CSRF) in GitLab | 2026-08-21T09:07:36.177Z | 2026-08-21T09:11:01.118Z |
| bit-gitlab-2026-19478 | Improper Control of Generation of Code ('Code Injection') in GitLab | 2026-08-21T09:07:34.847Z | 2026-08-21T09:11:01.118Z |
| bit-wordpress-2026-65640 | 2026-08-21T08:58:07.788Z | 2026-08-21T09:11:01.118Z | |
| bit-mlflow-2026-69148 | MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id | 2026-08-21T08:50:13.561Z | 2026-08-21T09:11:01.118Z |
| bit-mlflow-2026-69146 | MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth | 2026-08-21T08:50:12.154Z | 2026-08-21T09:11:01.118Z |
| bit-discourse-2026-59829 | Discourse: Review queue exposes flag-related private message excerpts to category group moderators | 2026-08-21T08:45:14.834Z | 2026-08-21T09:11:01.118Z |
| bit-grafana-2026-11817 | CVE-2026-11817 CVE Record | 2026-08-21T08:43:32.031Z | 2026-08-21T09:11:01.118Z |
| bit-mlflow-2026-64849 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) | 2026-08-21T05:51:48.507Z | 2026-08-21T06:12:36.893Z |
| bit-neo4j-2026-14587 | Unathenticated connection can hold Bolt channel open | 2026-08-21T05:51:22.529Z | 2026-08-21T06:12:36.893Z |
| bit-python-2026-3087 | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | 2026-08-19T11:42:48.087Z | 2026-08-19T12:00:51.730Z |
| bit-python-2026-15308 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | 2026-08-19T11:42:45.470Z | 2026-08-19T12:00:51.730Z |
| bit-powershell-2026-50523 | Microsoft PowerShell Remote Code Execution Vulnerability | 2026-08-19T11:41:11.861Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56865 | Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog | 2026-08-19T11:37:53.415Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56864 | Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb | 2026-08-19T11:37:52.101Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56862 | Limit handshake messages we are willing to accept post-handshake in crypto/tls | 2026-08-19T11:37:50.799Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56860 | Avoid quadratic complexity in resolvePath in net/url | 2026-08-19T11:37:49.374Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56859 | Add recursion depth guard during decode in encoding/xml | 2026-08-19T11:37:48.045Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56858 | Fix Javascript regexp context tracking in html/template | 2026-08-19T11:37:46.787Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-56853 | Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http | 2026-08-19T11:37:45.326Z | 2026-08-19T12:00:51.730Z |
| bit-libpython-2026-3087 | shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs | 2026-08-19T11:37:44.232Z | 2026-08-19T12:00:51.730Z |
| bit-libpython-2026-15308 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | 2026-08-19T11:37:41.302Z | 2026-08-19T12:00:51.730Z |
| bit-golang-2026-33818 | Enforce maximum recursion depth in encoding/asn1 | 2026-08-19T11:37:26.100Z | 2026-08-19T12:00:51.730Z |
| bit-postgresql-2026-6471 | PostgreSQL logical decoding can dlopen arbitrary file | 2026-08-19T08:53:05.580Z | 2026-08-19T09:09:14.600Z |
| bit-postgresql-2026-6470 | PostgreSQL fails to check type USAGE privilege | 2026-08-19T08:53:04.461Z | 2026-08-19T09:09:14.600Z |
| bit-postgresql-2026-6469 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership | 2026-08-19T08:53:03.349Z | 2026-08-19T09:09:14.600Z |
| bit-postgresql-2026-6464 | PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands | 2026-08-19T08:53:02.184Z | 2026-08-19T09:09:14.600Z |
| bit-postgresql-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | 2026-08-19T08:52:55.190Z | 2026-08-19T09:09:14.600Z |