Skip to content
Fencer Intel

All · bitnami

Newest first, late arrivals on top. Also a feed.

  1. 3.1
    CVE-2026-21947 Vulnerability in Oracle Java SE (component: JavaFX).
    bitnami
  2. 7.5
    CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Securi…
    bitnami
  3. 6.1
    CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networ…
    bitnami
  4. 7.4
    CVE-2026-21932 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, J…
    bitnami
  5. 4.8
    CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI).
    bitnami
  6. 6.0
    CVE-2026-0672 Header injection in http.cookies.Morsel
    bitnami
  7. 5.9
    CVE-2025-15367 POP3 command injection in user-controlled commands
    bitnami
  8. 5.9
    CVE-2025-15366 IMAP command injection in user-controlled commands
    bitnami
  9. 6.0
    CVE-2025-15282 Header injection via newlines in data URL mediatype
    bitnami
  10. 5.9
    CVE-2026-0865 wsgiref.headers.Headers allows header newline injection
    bitnami
  11. 5.7
    CVE-2025-11468 Folding email comments of unfoldable characters doesn't preserve parenthesis
    bitnami
  12. 5.8
    CVE-2026-21636 A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is enab…
    Node.jsbitnami
  13. 5.9
    CVE-2025-59466 We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when `async_hooks.cre…
    Node.jsbitnami
  14. 2.8
    CVE-2025-55132 A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` even when the process…
    Node.jsbitnami
  15. 6.5
    CVE-2025-59464 A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buf…
    Node.jsbitnami
  16. 7.1
    CVE-2025-55131 A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module wi…
    Node.jsbitnami
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  17. 7.1
    CVE-2025-55130 A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relati…
    Node.jsbitnami
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  18. 5.9
    CVE-2026-21637 A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallb…
    Node.jsbitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  19. 7.5
    CVE-2025-59465 A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` e…
    Node.jsbitnami
    EPSS 4.0% chance of exploitation in 30 days, percentile 90%
  20. 7.4
    CVE-2026-22865 Gradle's failure to disable repositories failing to answer can expose builds to malicious artifacts
    bitnami
  21. 7.4
    CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts
    bitnami
  22. 7.5
    CVE-2025-68675 Apache Airflow: proxy credentials for various providers might leak in task logs
    pypibitnami
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  23. 7.5
    CVE-2025-68438 Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated
    pypibitnami
  24. 7.7
    CVE-2025-11224 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
    GitLabbitnami
  25. 8.6
    CVE-2026-0532 External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector
    bitnami
  26. 7.2
    CVE-2022-50806 4images 1.9 - Remote Command Execution (RCE)
    bitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  27. 6.5
    CVE-2026-0543 Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation
    bitnami
  28. 6.5
    CVE-2026-0531 Allocation of Resources Without Limits or Throttling in Kibana Fleet
    bitnami
  29. 6.5
    CVE-2026-0530 Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
    bitnami
  30. 9.7
    CVE-2026-22794 Account Takeover Vulnerability in Appsmith
    bitnami