CVE Vulnerability Catalog

GitLab EE contains a cleanup logic flaw that fails to distinguish pre-existing vulnerability records from newly created ones during error handling. Under certain conditions, an authenticated user with read-only permissions could permanently delete existing vulnerability records. This issue affects versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1.

GitLab has remediated an issue in GitLab CE/EE affecting versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 where, when a merge request in a public project referenced a confidential issue from a private project, an authenticated user with no project membership could read the confidential issue's title, due to a viewer-independent fragment cache key that incorrectly shared per-user-redacted rendered content across all users.

GitLab has remediated an issue in GitLab EE affecting versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 where, when an instance administrator locked a group's Duo availability, an authenticated user with group Owner permissions could re-enable AI-backed data egress to a third-party service for that group and its descendant projects, due to insufficient granularity of the admin-lock enforcement controls.

In leomoon-studios wiki-go up to 1.9.1, the DeleteComment function in internal/comments/comments.go (Comment Deletion Handler) is vulnerable to path traversal via manipulation of the documentPath argument. The attack may be initiated remotely and the exploit has been publicly disclosed. Upgrading to version 1.9.2 (patch commit 224ef2a11facddef6b3a3c1f0a69156d1e574a33) resolves the issue.

A vulnerability in the Bluetooth Classic A2DP host stack (Zephyr) involves struct bt_a2dp_codec_ie, which stores a one-byte len field plus a fixed 8-byte codec_ie[] array. When an AVDTP peer sends a codec IE longer than 8 bytes, a2dp_process_config_ind(), bt_a2dp_get_config_cb() and bt_a2dp_set_config_cb() copy only the first 8 bytes but keep the full attacker-chosen length in len. Later consumers trust len, leading to an out-of-bounds read and disclosure of adjacent RAM to a paired BR/EDR peer.

Apache Pulsar did not apply subscription policies (Prefix subscription authentication mode or subscription permissions) in several admin REST API operations acting on subscriptions: clearing the backlog (for a named subscription and for all subscriptions), unsubscribe, and expiring messages for all subscriptions of a topic. An authenticated user with consume permission on the namespace or topic could bypass these policies and clear the backlog, expire messages, or delete a subscription that the policies would deny to that user.

Apache Pulsar allows administrators to enforce end-to-end message encryption for all topics in a namespace via the encryption_required namespace policy. If loading a persistent topic fails during initialization (e.g., metadata store read error or topic-level policy load failure), the broker logs a warning, disables the encryption requirement for that topic, and completes the topic load as successful. As a result, an authenticated client with produce permissions can publish unencrypted messages that the broker accepts and stores, even though the namespace policy requires encryption.

The Apache Pulsar broker admin REST API endpoints for non-persistent topics (/admin/v2/non-persistent/.../entryFilters) do not perform the entry filters topic policy authorization check, unlike persistent topic endpoints. An authenticated user with produce or consume permission on a non-persistent topic can read, replace, or remove that topic's entry filter policy. This affects versions from 3.3.0 before 4.0.14 and from 4.1.0 before 4.2.5.

The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and authorization are enabled, most read endpoints of this API verify only that the request is authenticated and that the broker serves the requested topic or transaction coordinator, without checking whether the caller is permitted to access the tenant, namespace or topic whose data is returned. As a result, any authenticated user, including one with no permissions, can read transaction coordinator and transaction information belonging to other tenants.

In Nuxt before 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages disabled to render a script-capable URL through NuxtLink when attacker-controlled input bound to the to attribute is prefixed with an ASCII C0 control character. The no-pages router classifies the value as an internal route before the earlier protocol check and passes it to the rendered anchor href; browsers strip the leading control character and interpret the remaining javascript: URL. This is fixed in version 4.6.0.

In Astro from 7.1.0 until 7.3.3, the server-side View Transition CSS generator does not keep string animation properties within their generated declarations. An application passing attacker-controlled data into properties such as duration, delay, easing, direction, fillMode, or animation names can allow CSS delimiters to terminate the declaration and add attacker-selected rules to the server-rendered page. The injected CSS can conceal or reposition content, add generated text, and otherwise misrepresent the interface. This is fixed in 7.3.3.

In Electron prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for macOS offscreen rendering was not fully validated by the main process. An attacker with code execution in the GPU process could supply inconsistent frame geometry and cause the main process to read out-of-bounds memory, disclosing memory or crashing the application.

The Apache Pulsar WebSocket service allows an authenticated user holding CONSUME permission on any topic to configure a dead letter policy with an arbitrary deadLetterTopic. The service does not verify the user's PRODUCE permission on that topic and writes dead letter messages using its own broker client identity, enabling injection of messages into topics the user is not permitted to produce to, including namespaces of other tenants.

In Electron prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for webContents.beginFrameSubscription was not fully validated by the main process. An attacker with code execution in the GPU process could supply inconsistent frame geometry and cause the main process to read out-of-bounds memory, disclosing memory or crashing the application.

In the Electron framework, chrome.tabs.query() returned each tab's URL and title to extensions that lacked both the tabs permission and matching host permissions. An application loading an untrusted extension via session.extensions.loadExtension could allow it to read the URL and title of every webContents in its session. This is fixed in versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4.

In hMailServer 6.0.0 through 6.3.6, the ACME HTTP-01 challenge responder serves only one connection at a time and waits up to five seconds for a request. A remote unauthenticated attacker can hold idle connections open, preventing the certificate authority's validation request from being answered and causing certificate issuance or renewal to fail.

In the PathResourceManager component of the Undertow web server, the mechanism verifying whether a symbolic link points to a safe location only checks if the target path starts with a specific string, without ensuring it matches a full directory name. This could allow an attacker to access files in a sibling directory whose name starts with the same characters as an authorized safe directory.

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0.

In pypdf before 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow dependency are not affected. This is fixed in version 6.21.1.

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.