Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-discourse-2026-55704 | Discourse: Shared-draft titles and excerpts leak through group post serialization | 2026-08-21T11:26:41.076Z | 2026-08-21T11:49:56.463Z |
| bit-discourse-2026-55674 | Discourse: Cache poisoning/XSS via color scheme cookies | 2026-08-21T11:26:39.921Z | 2026-08-21T11:49:56.463Z |
| bit-discourse-2026-53960 | Discourse: Hidden first-post excerpt is emitted in Q&A schema JSON-LD | 2026-08-21T11:26:33.150Z | 2026-08-21T11:49:56.463Z |
| bit-wordpress-2026-65640 | 2026-08-21T08:58:07.788Z | 2026-08-21T09:11:01.118Z | |
| bit-prometheus-2026-42151 | Prometheus Azure AD remote write OAuth client secret exposed via config API | 2026-07-15T15:58:00.968Z | 2026-08-21T09:11:01.118Z |
| bit-mlflow-2026-69148 | MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id | 2026-08-21T08:50:13.561Z | 2026-08-21T09:11:01.118Z |
| bit-mlflow-2026-69146 | MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth | 2026-08-21T08:50:12.154Z | 2026-08-21T09:11:01.118Z |
| bit-grafana-2026-11817 | CVE-2026-11817 CVE Record | 2026-08-21T08:43:32.031Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-42499 | Quadratic string concatenation in consumePhrase in net/mail | 2026-05-11T05:44:41.457Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-39820 | Quadratic string concatentation in consumeComment in net/mail | 2026-05-11T05:44:31.985Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-33814 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net | 2026-05-11T05:44:26.716Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-33811 | Crash when handling long CNAME response in net | 2026-05-11T05:44:24.861Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-33810 | Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | 2026-04-13T05:43:50.259Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-32283 | Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls | 2026-04-13T05:43:44.464Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-32280 | Unexpected work during chain building in crypto/x509 | 2026-04-13T05:43:38.849Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2026-27145 | Inefficient candidate hostname parsing in crypto/x509 | 2026-06-05T05:44:57.398Z | 2026-08-21T09:11:01.118Z |
| bit-golang-2025-61726 | Memory exhaustion in query parameter parsing in net/url | 2026-01-31T08:43:29.079Z | 2026-08-21T09:11:01.118Z |
| bit-gitlab-2026-19650 | Cross-Site Request Forgery (CSRF) in GitLab | 2026-08-21T09:07:36.177Z | 2026-08-21T09:11:01.118Z |
| bit-gitlab-2026-19478 | Improper Control of Generation of Code ('Code Injection') in GitLab | 2026-08-21T09:07:34.847Z | 2026-08-21T09:11:01.118Z |
| bit-discourse-2026-59829 | Discourse: Review queue exposes flag-related private message excerpts to category group moderators | 2026-08-21T08:45:14.834Z | 2026-08-21T09:11:01.118Z |
| bit-prometheus-2026-42154 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload | 2026-07-14T15:49:19.565Z | 2026-08-21T06:12:36.893Z |
| bit-powershell-2020-1108 | .NET Core & .NET Framework Denial of Service Vulnerability | 2025-09-04T17:48:33.089Z | 2026-08-21T06:12:36.893Z |
| bit-node-2026-48617 | 2026-06-23T14:50:46.123Z | 2026-08-21T06:12:36.893Z | |
| bit-node-2026-21717 | 2026-04-06T07:58:47.295Z | 2026-08-21T06:12:36.893Z | |
| bit-node-2026-21712 | 2026-04-06T07:58:33.472Z | 2026-08-21T06:12:36.893Z | |
| bit-neo4j-2026-14587 | Unathenticated connection can hold Bolt channel open | 2026-08-21T05:51:22.529Z | 2026-08-21T06:12:36.893Z |
| bit-mlflow-2026-64849 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) | 2026-08-21T05:51:48.507Z | 2026-08-21T06:12:36.893Z |
| bit-mlflow-2024-37060 | 2024-06-08T07:24:57.709Z | 2026-08-21T06:12:36.893Z | |
| bit-mlflow-2024-37059 | 2024-06-08T07:25:14.011Z | 2026-08-21T06:12:36.893Z | |
| bit-mlflow-2024-37058 | 2024-06-08T07:25:30.807Z | 2026-08-21T06:12:36.893Z |