Skip to content
Fencer Intel

All · bitnami

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2026-26130 ASP.NET Core Denial of Service Vulnerability
    nugetbitnami
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  2. 7.5
    CVE-2026-26127 .NET Denial of Service Vulnerability
    nugetbitnami
    EPSS 2.3% chance of exploitation in 30 days, percentile 83%
  3. 7.8
    CVE-2026-26131 .NET Elevation of Privilege Vulnerability
    nugetbitnami
  4. 7.5
    CVE-2026-30941 Parse Server has a NoSQL injection via token type in password reset and email verification endpoints
    npmbitnami
  5. 7.5
    CVE-2026-30939 Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution
    npmbitnami
  6. 5.3
    CVE-2026-30938 Parse Server has denylist `requestKeywordDenylist` keyword scan bypass through nested object placement
    npmbitnami
  7. 7.5
    CVE-2026-30925 Parse Server affected by Regular Expression Denial of Service (ReDoS) via `$regex` query in LiveQuery
    npmbitnami
  8. 9.1
    CVE-2026-30862 Critical Stored XSS & Privilege Escalation in Appsmith
    bitnami
  9. 5.3
    CVE-2026-30854 Parse Server: GraphQL `__type` introspection bypass via inline fragments when public introspection is disabled
    npmbitnami
  10. 5.9
    CVE-2026-30850 Parse Server: File metadata endpoint bypasses `beforeFind` / `afterFind` trigger authorization
    npmbitnami
  11. 3.7
    CVE-2026-30848 Parse Server: `PagesRouter` path traversal allows reading files outside configured pages directory
    npmbitnami
  12. 9.8
    CVE-2026-30863 Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters
    npmbitnami
  13. 6.5
    CVE-2026-24308 Apache ZooKeeper: Sensitive information disclosure in client configuration handling
    Springmavenbitnami
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  14. 7.4
    CVE-2026-24281 Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
    Springmavenbitnami
  15. 6.1
    CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template
    bitnamigo
  16. 2.5
    CVE-2026-27139 FileInfo can escape from a Root in os
    bitnamigo
  17. 5.9
    CVE-2026-27138 Panic in name constraint checking for malformed certificates in crypto/x509
    bitnamigo
  18. 7.5
    CVE-2026-27137 Incorrect enforcement of email constraints in crypto/x509
    bitnamigo
  19. 7.5
    CVE-2026-25679 Incorrect parsing of IPv6 host literals in net/url
    bitnamigo
  20. 5.3
    CVE-2026-30835 Parse Server: Malformed `$regex` query leaks database error details in API response
    npmbitnami
  21. 7.2
    CVE-2026-30229 Parse Server: Endpoint `/loginAs` allows `readOnlyMasterKey` to gain full read and write access as any user
    npmbitnami
  22. 4.9
    CVE-2026-30228 Parse Server: File creation and deletion bypasses `readOnlyMasterKey` write restriction
    npmbitnami
  23. 8.8
    CVE-2026-3047 Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login
    mavenbitnami
  24. 8.1
    CVE-2026-3009 Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)
    mavenbitnami
  25. 7.5
    CVE-2026-29784 Ghost: Incomplete CSRF protections around OTC use
    npmbitnami
  26. 7.2
    CVE-2026-29182 Parse Server: Cloud Hooks and Cloud Jobs bypass `readOnlyMasterKey` write restriction
    npmbitnami
  27. 7.3
    CVE-2025-15558 Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
    Dockergobitnami
  28. 5.4
    CVE-2025-66168 Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated
    mavenbitnami
  29. 7.7
    CVE-2026-29053 Ghost Vulnerable to Remote Code Execution via Malicious Themes
    npmbitnami
    2 public exploits EPSS 4.9% chance of exploitation in 30 days, percentile 92%
  30. 4.3
    CVE-2026-3494 MariaDB Server Audit Plugin Comment Handling Bypass
    MariaDBbitnami