GHSA-xx8w-mq23-29g4Published
Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
osv · CVE-2024-24747 · GO-2024-2499
Go: github.com/minio/minio
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698127 source statements · aliases may refer to the same vulnerabilityGO-2024-2499Published
Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio
osv · CVE-2024-24747 · GHSA-xx8w-mq23-29g4
Go: github.com/minio/minio
GHSA-wg47-6jq2-q2hhPublished
MinIO performs incomplete signature validation for unsigned-trailer uploads
osv · CVE-2025-31489 · GO-2025-3594
Go: github.com/minio/minio
GO-2025-3594Published
MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio
osv · CVE-2025-31489 · GHSA-wg47-6jq2-q2hh
Go: github.com/minio/minio
MAL-2026-17333Published
Malicious code in @cat-gen/materia (npm)
osv · GHSA-m8g8-xcgx-j6hw
npm: @cat-gen/materia
MAL-2026-17643Published
Malicious code in waie-crash-baileys (npm)
osv · GHSA-5r5f-v5vv-289q
npm: waie-crash-baileys
MAL-2026-17334Published
Malicious code in @cat-gen/material (npm)
osv · GHSA-m7x3-q6r8-p5rg
npm: @cat-gen/material
MAL-2026-13482Published
Malicious code in diezyclutch-baileys (npm)
osv · GHSA-89rf-mgch-fg9m
npm: diezyclutch-baileys
MAL-2026-17336Published
Malicious code in @redman89405/my-module (npm)
osv · GHSA-vc53-jhh2-pwf3
npm: @redman89405/my-module
MAL-2026-16347Published
Malicious code in radio-player-theme (npm)
osv · GHSA-pp2v-g64w-gm6f
npm: radio-player-theme
MAL-2026-17338Published
Malicious code in link-status-page (npm)
osv · GHSA-5j3f-rr83-xcpq
npm: link-status-page
MAL-2026-17618Published
Malicious code in @diezyclutch/baileys (npm)
osv · GHSA-5f29-482c-j4rr
npm: @diezyclutch/baileys
MAL-2026-17646Published
Malicious code in tailwindcss-animatecss-keyframes (npm)
osv · GHSA-3g68-5jcj-q8rx
npm: tailwindcss-animatecss-keyframes
MAL-2026-17620Published
Malicious code in dzyclutch-baileys (npm)
osv · GHSA-c936-2h58-8v2f
npm: dzyclutch-baileys
CVE-2026-94114Published
Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.bcel:bcel
MAL-2026-17665Published
Malicious code in animatecss-tailwind-adapter (npm)
osv ·
npm: animatecss-tailwind-adapter
MAL-2026-17656Published
Malicious code in css-reading-display-polyfill (npm)
osv ·
npm: css-reading-display-polyfill
CVE-2026-102782Published
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0
cve-program ·
Vendor product: com_simplemembership
CVE-2026-48908Published
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
cve-program ·
Vendor product: SP Page Builder extension for Joomla
CVE-2026-102781Published
Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6
cve-program ·
Vendor product: mod_os_touchslider
CVE-2026-56290Published
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
cve-program ·
Vendor product: JoomlaCK.fr Page Builder CK extension for Joomla
MAL-2026-17664Published
Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm)
osv ·
npm: wix-ssr-thunderbolt-grid-polyfill
MAL-2026-17640Published
Malicious code in browser-metrics-plugin.contrib (npm)
osv ·
npm: browser-metrics-plugin.contrib
MAL-2026-17642Published
Malicious code in personio-pipeline-projen (npm)
osv ·
npm: personio-pipeline-projen
MAL-2026-17649Published
Malicious code in internallib_v788 (npm)
osv · GHSA-8pvp-4qvp-26m7
npm: internallib_v788
MAL-2026-17624Published
Malicious code in documenclient (npm)
osv · GHSA-648r-w4vm-vvvp
npm: documenclient
MAL-2026-17651Published
Malicious code in @praveenvjpm/color-utils-7210 (npm)
osv ·
npm: @praveenvjpm/color-utils-7210
CVE-2026-76488Published
Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
cve-program ·
Vendor product: Cisco Application Policy Infrastructure Controller (APIC)
CVE-2026-104335Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-103360Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-97676Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-97680Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-97679Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-97673Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-93675Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-93447Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-93445Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-93449Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-88962Published
Langflow OSS is affected by multiple vulnerabilities
cve-program ·
Vendor product: Langflow OSS
CVE-2026-19386Published
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Rou…
cve-program ·
Vendor product: Router
CVE-2026-103007Published
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
cve-program ·
Vendor product: Elasticsearch
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.