Vulnerability Disclosures

← Back to Home
PVD-20260514-B9C4: Arbitrary Code Execution via IDE'Gnatlist in the GNATcoll Project Loader Fixed by Vendor
PVD-20260515-9FE6: Header Injection via Unfiltered Carriage Return in GNATcoll.Email Fixed by Vendor
PVD-20260516-4B1C: Argv Injection via User Parameter in ada-keystore (GPG) Fixed by Vendor
PVD-20260518-C7D8: Zip Slip (Path Traversal) in zip-ada UnZip Fixed by Vendor
PVD-20260518-E9B1: XXE and Unbounded Entity Expansion in XML/Ada Fixed by Vendor
PVD-20260518-F6E7: Reserved Vulnerability Disclosure Reserved
PVD-20260518-A1B2: Reserved Vulnerability Disclosure Reserved
PVD-20260518-A7F3: Use-After-Free, Memory Leak, and Denial of Service in Ada Language Server Fixed by Vendor
PVD-20260519-ABCD: Reserved Vulnerability Disclosure Reserved
PVD-20260608-D2E1: Reserved Vulnerability Disclosure Reserved
PVD-20260609-E4C2: Reserved Vulnerability Disclosure Reserved
PVD-20260731-D4A9: Reserved Vulnerability Disclosure Reserved
PVD-20260906-D960: Trivy Implicit Configuration Allows Arbitrary File Overwrite and Second-Stage Code Execution Closed by Vendor
PVD-20260906-3982: Trivy Implicit Rego Policies Can Disclose Secrets and Make Arbitrary HTTP Requests Closed by Vendor