Search CVE reports

(An issue in MongoDB Server's intra-cluster connection setup could allo ...)

(An issue in MongoDB Server could allow an authenticated user with a li ...)

(An issue in MongoDB Server's aggregation framework could allow an auth ...)

(MongoDB Server's handling of a Queryable Encryption maintenance operat ...)

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution...

chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to...

(rails-html-sanitizer is responsible for sanitizing HTML fragments in R ...)

(js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2 ...)

JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator...

JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension...