Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
Bitnami VulnDB is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-golang-2026-27145 | Inefficient candidate hostname parsing in crypto/x509 | 2026-06-05T05:44:57.398Z | 2026-08-01T09:00:02.625Z |
| bit-parse-2021-47986 | Parse Server - Unreviewed Code Execution via Malicious Version Tags | 2026-07-31T14:49:47.061Z | 2026-07-31T15:09:19.097Z |
| bit-sqlite-2026-51302 | 2026-07-30T08:53:34.203Z | 2026-07-31T09:10:46.238Z | |
| bit-prometheus-2026-42154 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload | 2026-07-14T15:49:19.565Z | 2026-07-31T09:10:46.238Z |
| bit-prometheus-2026-42151 | Prometheus Azure AD remote write OAuth client secret exposed via config API | 2026-07-15T15:58:00.968Z | 2026-07-31T09:10:46.238Z |
| bit-mariadb-2026-44172 | MariaDB: mysql_real_escape_string() incorrectly handled big5 | 2026-06-16T11:46:59.804Z | 2026-07-31T09:10:46.238Z |
| bit-helm-2026-63308 | Helm Files.Lines Denial of Service via Empty Chart Files | 2026-07-31T08:42:54.137Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-42499 | Quadratic string concatenation in consumePhrase in net/mail | 2026-05-11T05:44:41.457Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-39820 | Quadratic string concatentation in consumeComment in net/mail | 2026-05-11T05:44:31.985Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-33811 | Crash when handling long CNAME response in net | 2026-05-11T05:44:24.861Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-33810 | Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 | 2026-04-13T05:43:50.259Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-32283 | Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls | 2026-04-13T05:43:44.464Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-32280 | Unexpected work during chain building in crypto/x509 | 2026-04-13T05:43:38.849Z | 2026-07-31T09:10:46.238Z |
| bit-golang-2026-25679 | Incorrect parsing of IPv6 host literals in net/url | 2026-03-10T08:44:09.300Z | 2026-07-31T09:10:46.238Z |
| bit-python-2026-11972 | tarfile opened in streaming mode mishandles EOF | 2026-07-30T11:34:03.356Z | 2026-07-30T11:52:58.921Z |
| bit-python-2026-11940 | tarfile extraction filter bypass allows escaping the destination directory | 2026-07-30T11:34:02.069Z | 2026-07-30T11:52:58.921Z |
| bit-python-2026-0864 | Configuration Injection via Carriage Return (\r) in write() method | 2026-07-30T11:33:59.347Z | 2026-07-30T11:52:58.921Z |
| bit-libpython-2026-11972 | tarfile opened in streaming mode mishandles EOF | 2026-07-30T11:28:42.254Z | 2026-07-30T11:52:58.921Z |
| bit-libpython-2026-11940 | tarfile extraction filter bypass allows escaping the destination directory | 2026-07-30T11:28:40.972Z | 2026-07-30T11:52:58.921Z |
| bit-libpython-2026-0864 | Configuration Injection via Carriage Return (\r) in write() method | 2026-07-30T11:28:38.244Z | 2026-07-30T11:52:58.921Z |
| bit-sqlite-2026-51304 | 2026-07-30T08:53:35.358Z | 2026-07-30T09:07:47.269Z | |
| bit-sqlite-2026-51298 | 2026-07-30T08:53:33.123Z | 2026-07-30T09:07:47.269Z | |
| bit-sqlite-2026-51297 | 2026-07-30T08:53:31.986Z | 2026-07-30T09:07:47.269Z | |
| bit-sqlite-2026-51296 | 2026-07-30T08:53:30.886Z | 2026-07-30T09:07:47.269Z | |
| bit-postgresql-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | 2026-05-18T05:53:04.801Z | 2026-07-30T09:07:47.269Z |
| bit-nginx-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | 2026-06-22T05:47:00.524Z | 2026-07-29T09:17:40.827Z |
| bit-grafana-2026-21723 | CVE-2026-21723 Record | 2026-07-29T08:50:07.249Z | 2026-07-29T09:17:40.827Z |
| bit-golang-2025-61726 | Memory exhaustion in query parameter parsing in net/url | 2026-01-31T08:43:29.079Z | 2026-07-29T09:17:40.827Z |
| bit-apache-2026-44185 | Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` | 2026-06-10T08:39:18.715Z | 2026-07-29T09:17:40.827Z |
| bit-apache-2026-42536 | Apache HTTP Server: mod_xml2enc heap overflow | 2026-06-10T08:39:14.858Z | 2026-07-29T09:17:40.827Z |