Most recent entries from all

Withdrawn: CLEANSTART-2026-AV59470 — Security fixes in prometheus-node-exporter 1.12.1-r0

2026-10-04T14:39:03.169315+00:00

Withdrawn by the publisher.

Affected: CleanStart: prometheus-node-exporter

Package prometheus-node-exporter version 1.12.1-r0 fixes 1 vulnerabilities: CVE-2026-28735

EUVD-2026-320131

2026-10-04T14:39:03.169364+00:00

EUVD-2026-320131

fkie_cve-2026-28735

2026-10-04T14:39:03.169381+00:00

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to gain access to private repositories via modifying the scope parameter in the GitHub authorization URL.. Mattermost Advisory ID: MMSA-2026-00628

GHSA-r5vf-grcx-5vqp — Mattermost allows authenticated users to gain access to private repositories

2026-10-04T14:39:03.169406+00:00

Affected: Go: github.com/mattermost/mattermost-server, Go: github.com/mattermost/mattermost-plugin-github

WID-SEC-W-2026-1173 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

2026-10-04T14:39:03.169430+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.