Known Vulnerabilities for Cf-release by Pivotal
Listed below are 3 of the newest known vulnerabilities associated with "Cf-release" by "Pivotal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73508 json | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handl... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73215 json | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allocate_even() in src/apps/r... | Not Provided | 2026-08-11 | 2026-08-13 |
| CVE-2026-72791 json | SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an information disclo... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-72761 json | The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is_global` to reject non-public addresses after DNS... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-71851 json | crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.l... | Not Provided | 2026-08-07 | 2026-08-08 |
| CVE-2026-70634 json | TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-70559 json | Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that s... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-70558 json | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and f... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-68755 json | A bundle writer may create misleading release promotion information under specific conditions. | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-68494 json | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass i... | Not Provided | 2026-08-04 | 2026-08-05 |