Threats affecting pkg:bitnami/pgbouncer

173,618 threats

Severity	CVSS	Threat	Source	Published
High	–	CVE-2026-117883Use-after-free in the DOM · HTML Parser component High2026-10-27GCVE DatabaseCVE-2026-117883 Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117883 Vulnerability #ghsa-hmqr-3wr3-mv3m	GCVE Database	2026-10-27
High	–	CVE-2026-117884 · Use After Free High2026-10-27GCVE Database Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117884 Vulnerability #ghsa-fpxm-2cgh-xxrq	GCVE Database	2026-10-27
High	–	CVE-2026-117887Use-after-free in the DOM · Core & HTML component High2026-10-27GCVE DatabaseCVE-2026-117887 Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117887 Vulnerability #ghsa-9p2v-8p5p-q7hg	GCVE Database	2026-10-27
High	–	CVE-2026-117880 · Use After Free High2026-10-27GCVE Database Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117880 Vulnerability #ghsa-9h46-mqg4-pxfj	GCVE Database	2026-10-27
High	–	CVE-2026-117888 · Uninitialized Memory High2026-10-27GCVE Database Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. Report on CVE-2026-117888 Vulnerability #ghsa-574c-7wwc-rfg8	GCVE Database	2026-10-27
High	–	CVE-2026-117879 · Incorrect Boundary Conditions High2026-10-27GCVE Database Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117879 Vulnerability #ghsa-439j-54qc-vcjj	GCVE Database	2026-10-27
High	–	CVE-2026-117882 · Use After Free High2026-10-27GCVE Database Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117882 Vulnerability #ghsa-2j5p-pq5g-pxh9	GCVE Database	2026-10-27
High	–	CVE-2026-117875Use-after-free in the Layout · Scrolling and Overflow component High2026-10-27GCVE DatabaseCVE-2026-117875 Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. Report on CVE-2026-117875 Vulnerability #ghsa-w47p-gv95-299w	GCVE Database	2026-10-27
High	–	CVE-2026-117877Use-after-free in the Layout · Text and Fonts component High2026-10-27GCVE DatabaseCVE-2026-117877 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. Report on CVE-2026-117877 Vulnerability #ghsa-vrvx-w3xr-643m	GCVE Database	2026-10-27
High	–	CVE-2026-117873 · Incorrect Boundary Conditions High2026-10-27GCVE Database Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117873 Vulnerability #ghsa-hqh7-xf43-qv67	GCVE Database	2026-10-27
High	–	CVE-2026-117872Use-after-free in the JavaScript · Standard Library component High2026-10-27GCVE DatabaseCVE-2026-117872 Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117872 Vulnerability #ghsa-h58f-wgmx-96vq	GCVE Database	2026-10-27
High	–	CVE-2026-117874 · Use After Free High2026-10-27GCVE Database Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117874 Vulnerability #ghsa-h38c-jj27-rhwc	GCVE Database	2026-10-27
High	–	CVE-2026-117870 · Use After Free High2026-10-27GCVE Database Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117870 Vulnerability #ghsa-gvxg-vw4h-59wp	GCVE Database	2026-10-27
High	8.6	CVE-2026-117602Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature High8.62026-10-27GCVE DatabaseCVE-2026-117602 Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue local process with write access to the Electrum data directory can place plugin code in the plugins/ folder and mark it enabled, causing arbitrary code execution inside the Electrum process. Report on CVE-2026-117602 Vulnerability CWE-347 #ghsa-g9gm-5xmx-9r6w	GCVE Database	2026-10-27
High	–	CVE-2026-117871 · Invalid Pointer High2026-10-27GCVE Database Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. Report on CVE-2026-117871 Vulnerability #ghsa-cj7m-4w5p-f874	GCVE Database	2026-10-27
High	–	CVE-2026-117876Use-after-free in the Layout · Text and Fonts component High2026-10-27GCVE DatabaseCVE-2026-117876 Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117876 Vulnerability #ghsa-7rh5-jc2p-p7g7	GCVE Database	2026-10-27
Critical	9.3	CVE-2026-117603Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed daily_limit_sat by exploiting non-atomic budget checks and millisatoshi truncation Critical9.32026-10-27GCVE DatabaseCVE-2026-117603 Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed daily_limit_sat by exploiting non-atomic budget checks and millisatoshi truncation. Attackers can send concurrent pay_invoice requests that pass budget_allows_spend() before add_to_budget() runs, or repeatedly pay msat amounts that are floored to whole satoshis, to drain funds beyond the limit. Report on CVE-2026-117603 Vulnerability CWE-367 #ghsa-98mp-7r7x-725c	GCVE Database	2026-10-27
High	–	CVE-2026-117860 · Same-origin Policy Bypass High2026-10-27GCVE Database Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. Report on CVE-2026-117860 Vulnerability #ghsa-wmwc-8q25-g888	GCVE Database	2026-10-27
High	–	CVE-2026-117868 · Sandbox Escape High2026-10-27GCVE Database Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117868 Vulnerability #ghsa-vpf8-8mc8-7fj2	GCVE Database	2026-10-27
High	–	CVE-2026-117862 · Privilege escalation due to incorrect boundary conditions in the Networking component High2026-10-27GCVE Database Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Report on CVE-2026-117862 Vulnerability #ghsa-r27g-wf92-w7q3	GCVE Database	2026-10-27

Page 12 of 8,681