Security advisories — page 5

• CVE-2026-32871criticalCVE-2026-32871 updated by NVD
• CVE-2026-102870highCVE-2026-102870 updated by NVD
• CVE-2026-25130criticalCAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection
• CVE-2024-45758criticalH2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
• CVE-2026-24118criticalCVE-2026-24118 updated by NVD
• CVE-2026-5598highCVE-2026-5598 updated by NVD
• CVE-2026-105796highCVE-2026-105796 updated by NVD
• CVE-2025-65720criticalCVE-2025-65720 updated by NVD
• CVE-2026-54513highCVE-2026-54513 updated by NVD
• CVE-2026-40859highCVE-2026-40859 updated by NVD
• CVE-2026-104252criticalCVE-2026-104252 updated by NVD
• CVE-2024-6829criticalAim External Control of File Name or Path vulnerability
• CVE-2026-48043mediumCVE-2026-48043 updated by NVD
• CVE-2026-61445criticalCVE-2026-61445 updated by NVD
• CVE-2026-61434highCVE-2026-61434 updated by NVD
• CVE-2026-88058highCVE-2026-88058 updated by NVD
• CVE-2026-12866criticalexpr-eval vulnerable to Code Execution
• CVE-2026-25119highGogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers
• CVE-2026-50633highCVE-2026-50633 updated by NVD
• CVE-2026-92946criticalCVE-2026-92946 updated by NVD
• CVE-2026-55993highApache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters in
• CVE-2026-46726highCVE-2026-46726 updated by NVD
• CVE-2024-25128criticalFlask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID
• CVE-2026-84939criticalCVE-2026-84939 updated by NVD
• CVE-2026-112946mediumCVE-2026-112946 updated by NVD
• CVE-2026-44008criticalCVE-2026-44008 updated by NVD
• CVE-2023-1712criticalUse of hard-coded, security-relevant constants in deepset-ai/haystack
• CVE-2026-65608highCVE-2026-65608 updated by NVD
• CVE-2026-70186highCVE-2026-70186 updated by NVD
• CVE-2026-40682criticalCVE-2026-40682 updated by NVD
• CVE-2026-35002criticalCVE-2026-35002 updated by NVD
• CVE-2026-87697highCVE-2026-87697 updated by NVD
• CVE-2026-92944criticalCVE-2026-92944 updated by NVD
• CVE-2026-50527highCVE-2026-50527 updated by NVD
• CVE-2026-46590highCVE-2026-46590 updated by NVD
• CVE-2024-10831criticalDB-GPT Absolute Path Traversal vulnerability
• CVE-2024-10833criticalDB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
• CVE-2026-69522highCVE-2026-69522 updated by NVD
• CVE-2023-49657criticalCross-site Scripting in Apache superset
• CVE-2026-57296highCVE-2026-57296 updated by NVD
• CVE-2026-2575mediumCVE-2026-2575 updated by NVD
• CVE-2025-26699mediumDjango Vulnerable to Allocation of Resources Without Limits or Throttling
• CVE-2026-70188criticalCVE-2026-70188 updated by NVD
• CVE-2026-46454criticalCVE-2026-46454 updated by NVD
• CVE-2026-10561criticalCVE-2026-10561 updated by NVD
• CVE-2024-6091criticalAutoGPT bypass of the shell commands denylist settings
• CVE-2025-1750criticalLlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id
• CVE-2023-26051mediumSaleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
• CVE-2026-96229mediumCVE-2026-96229 updated by NVD
• CVE-2026-101894criticalCVE-2026-101894 updated by NVD
• CVE-2026-47302highCVE-2026-47302 updated by NVD
• CVE-2026-54753mediumCVE-2026-54753 updated by NVD
• CVE-2026-42258mediumCVE-2026-42258 updated by NVD
• CVE-2026-44009criticalCVE-2026-44009 updated by NVD
• CVE-2026-25161highAlist vulnerable to Path Traversal in multiple file operation handlers
• CVE-2026-31072criticalCVE-2026-31072 updated by NVD
• CVE-2025-2000criticalQiskit allows arbitrary code execution decoding QPY format versions < 13
• CVE-2026-25632criticalEPyT-Flow vulnerable to unsafe JSON deserialization (__type__)
• CVE-2024-38355mediumsocket.io has an unhandled 'error' event
• CVE-2026-70174highCVE-2026-70174 updated by NVD
• CVE-2026-30922highCVE-2026-30922 updated by NVD
• CVE-2026-70196mediumCVE-2026-70196 updated by NVD
• CVE-2025-59953criticalCVE-2025-59953 updated by NVD
• CVE-2026-55107criticalCVE-2026-55107 updated by NVD
• CVE-2026-24747highPyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
• CVE-2026-56170highCVE-2026-56170 updated by NVD
• CVE-2026-59242mediumCVE-2026-59242 updated by NVD
• CVE-2026-12795mediumCVE-2026-12795 updated by NVD
• CVE-2026-40984highCVE-2026-40984 updated by NVD
• CVE-2026-66007mediumCVE-2026-66007 updated by NVD
• CVE-2026-46456criticalCVE-2026-46456 updated by NVD
• CVE-2026-12151highCVE-2026-12151 updated by NVD
• CVE-2026-70197highCVE-2026-70197 updated by NVD
• CVE-2026-40938highCVE-2026-40938 updated by NVD
• CVE-2026-88092criticalCVE-2026-88092 updated by NVD
• CVE-2026-71513highCVE-2026-71513 updated by NVD
• CVE-2026-20896criticalCVE-2026-20896 updated by NVD
• CVE-2026-9086highKeycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
• CVE-2026-9083mediumKeycloak vulnerable to information disclosure through arbitrary filesystem path probing
• CVE-2026-62902mediumCVE-2026-62902 updated by NVD
• CVE-2026-62331highCVE-2026-62331 updated by NVD
• CVE-2026-96230highCVE-2026-96230 updated by NVD
• CVE-2026-75827criticalCVE-2026-75827 updated by NVD
• CVE-2026-54569criticalCVE-2026-54569 updated by NVD
• CVE-2026-48020highCVE-2026-48020 updated by NVD
• CVE-2026-66274highCVE-2026-66274 updated by NVD
• CVE-2026-41242criticalCVE-2026-41242 updated by NVD
• CVE-2024-32874criticalMalicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
• CVE-2023-54365highCVE-2023-54365 updated by NVD
• CVE-2024-27444criticalLangChain Experimental vulnerable to arbitrary code execution
• CVE-2026-49970highCVE-2026-49970 updated by NVD
• CVE-2026-61443highCVE-2026-61443 updated by NVD
• CVE-2026-65905criticalCVE-2026-65905 updated by NVD
• CVE-2026-70162mediumCVE-2026-70162 updated by NVD
• CVE-2026-69304mediumCVE-2026-69304 updated by NVD
• CVE-2026-40912highTraefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync
• CVE-2026-96233highCVE-2026-96233 updated by NVD
• CVE-2026-84008highCVE-2026-84008 updated by NVD
• CVE-2026-47751mediumCVE-2026-47751 updated by NVD
• CVE-2024-23641highSending a GET or HEAD request with a body crashes SvelteKit
• CVE-2026-92934criticalCVE-2026-92934 updated by NVD
• CVE-2026-57576mediumCVE-2026-57576 updated by NVD
• CVE-2026-41862highCVE-2026-41862 updated by NVD
• CVE-2026-93687highCVE-2026-93687 updated by NVD
• CVE-2026-56811highCVE-2026-56811 updated by NVD
• CVE-2025-70974criticalFASTJSON Includes Functionality from Untrusted Control Sphere
• CVE-2026-55407mediumCVE-2026-55407 updated by NVD
• CVE-2023-26052lowSaleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
• CVE-2026-96959highCVE-2026-96959 updated by NVD
• CVE-2025-49655criticalCVE-2025-49655 updated by NVD
• CVE-2026-68968highCVE-2026-68968 updated by NVD
• CVE-2026-53913criticalApache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function
• CVE-2026-115776highCVE-2026-115776 updated by NVD
• CVE-2026-115778highCVE-2026-115778 updated by NVD
• CVE-2026-8634criticalCVE-2026-8634 updated by NVD
• CVE-2026-53917highApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation wi
• CVE-2026-50734highApache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value
• CVE-2026-48006highCVE-2026-48006 updated by NVD
• CVE-2026-96224highCVE-2026-96224 updated by NVD
• CVE-2026-85363highCVE-2026-85363 updated by NVD
• CVE-2026-96235highCVE-2026-96235 updated by NVD
• CVE-2026-69439highCVE-2026-69439 updated by NVD
• CVE-2026-56140criticalApache Camel-AWS2-SNS: An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy
• CVE-2026-22807highCVE-2026-22807 updated by NVD
• CVE-2026-28368highCVE-2026-28368 updated by NVD
• CVE-2026-93605criticalCVE-2026-93605 updated by NVD
• CVE-2026-92708highCVE-2026-92708 updated by NVD
• CVE-2026-54718highCVE-2026-54718 updated by NVD
• CVE-2025-29923lowCVE-2025-29923 updated by NVD
• CVE-2026-62899mediumCVE-2026-62899 updated by NVD
• CVE-2023-6569criticalExternal Control of File Name or Path in h2oai/h2o-3
• CVE-2026-77459criticalCVE-2026-77459 updated by NVD
• CVE-2026-76218highCVE-2026-76218 updated by NVD
• CVE-2026-28367highCVE-2026-28367 updated by NVD
• CVE-2026-55149highCVE-2026-55149 updated by NVD
• CVE-2026-5807highCVE-2026-5807 updated by NVD
• CVE-2024-5986criticalH2O has an External Control of File Name or Path vulnerability
• CVE-2026-92955criticalCVE-2026-92955 updated by NVD
• CVE-2025-10284criticalCVE-2025-10284 updated by NVD
• CVE-2026-83557mediumCVE-2026-83557 updated by NVD
• CVE-2026-26332criticalCVE-2026-26332 updated by NVD
• CVE-2025-71351highCVE-2025-71351 updated by NVD
• CVE-2025-54951criticalExecuTorch vulnerable to Heap-based Buffer Overflow
• CVE-2026-42027criticalCVE-2026-42027 updated by NVD
• CVE-2026-44017highCVE-2026-44017 updated by NVD
• CVE-2026-43868mediumCVE-2026-43868 updated by NVD
• CVE-2026-112944mediumCVE-2026-112944 updated by NVD
• CVE-2026-23490highCVE-2026-23490 updated by NVD
• CVE-2026-116692criticalCVE-2026-116692 updated by NVD
• CVE-2026-61560criticalCVE-2026-61560 updated by NVD
• CVE-2026-60090mediumPraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL
• CVE-2025-66455criticalCVE-2025-66455 updated by NVD
• CVE-2026-49980criticalCVE-2026-49980 updated by NVD
• CVE-2026-56397criticalCVE-2026-56397 updated by NVD
• CVE-2026-88060highCVE-2026-88060 updated by NVD
• CVE-2026-65017mediumCVE-2026-65017 updated by NVD
• CVE-2026-55956mediumCVE-2026-55956 updated by NVD
• CVE-2026-49818mediumCVE-2026-49818 updated by NVD
• CVE-2026-96232highCVE-2026-96232 updated by NVD
• CVE-2026-49042highCVE-2026-49042 updated by NVD
• CVE-2026-46588highCVE-2026-46588 updated by NVD
• CVE-2026-46587highCVE-2026-46587 updated by NVD
• CVE-2026-50628criticalCVE-2026-50628 updated by NVD
• CVE-2026-85790mediumCVE-2026-85790 updated by NVD
• CVE-2026-46455criticalCVE-2026-46455 updated by NVD
• CVE-2026-106443highCVE-2026-106443 updated by NVD
• CVE-2026-28369highCVE-2026-28369 updated by NVD
• CVE-2026-45051criticalCVE-2026-45051 updated by NVD
• CVE-2026-46633highCVE-2026-46633 updated by NVD
• CVE-2026-31234criticalCVE-2026-31234 updated by NVD
• CVE-2026-50750highApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulner
• CVE-2026-61435highCVE-2026-61435 updated by NVD
• CVE-2026-33646criticalCVE-2026-33646 updated by NVD
• CVE-2025-59250highJDBC Driver for SQL Server has improper input validation issue
• CVE-2026-90776highCVE-2026-90776 updated by NVD
• CVE-2026-59902highCVE-2026-59902 updated by NVD
• CVE-2025-54949criticalExecuTorch heap buffer overflow vulnerability
• CVE-2026-63126highCVE-2026-63126 updated by NVD
• CVE-2026-55511criticalCVE-2026-55511 updated by NVD
• CVE-2026-27690criticalCVE-2026-27690 updated by NVD
• CVE-2026-49086mediumCVE-2026-49086 updated by NVD
• CVE-2025-66471highCVE-2025-66471 updated by NVD
• CVE-2026-32773mediumCVE-2026-32773 updated by NVD
• CVE-2026-52816mediumGogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS
• CVE-2026-45360highCVE-2026-45360 updated by NVD
• CVE-2025-13590criticalcarbon-apimgt does not properly restrict uploaded files
• CVE-2026-111765highCVE-2026-111765 updated by NVD
• CVE-2026-49097mediumCVE-2026-49097 updated by NVD
• CVE-2026-66822mediumCVE-2026-66822 updated by NVD
• CVE-2026-92935criticalCVE-2026-92935 updated by NVD
• CVE-2026-112945lowCVE-2026-112945 updated by NVD
• CVE-2026-91973highCVE-2026-91973 updated by NVD
• CVE-2026-55629highCVE-2026-55629 updated by NVD
• CVE-2026-46623highCVE-2026-46623 updated by NVD
• CVE-2026-56091highCVE-2026-56091 updated by NVD
• CVE-2026-42527highCVE-2026-42527 updated by NVD
• CVE-2026-85731highCVE-2026-85731 updated by NVD
• CVE-2025-57735criticalCVE-2025-57735 updated by NVD
• CVE-2026-55207highPimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin
• CVE-2026-77274highCVE-2026-77274 updated by NVD
• CVE-2026-55833highCVE-2026-55833 updated by NVD
• CVE-2026-55831highCVE-2026-55831 updated by NVD
• CVE-2026-59880highImmutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
• CVE-2026-49487mediumCVE-2026-49487 updated by NVD
• CVE-2026-48828mediumCVE-2026-48828 updated by NVD
• CVE-2026-48892mediumCVE-2026-48892 updated by NVD
• CVE-2026-115889criticalCVE-2026-115889 updated by NVD
• CVE-2026-115915highCVE-2026-115915 updated by NVD
• CVE-2026-44914highCVE-2026-44914 updated by NVD
• CVE-2026-46457highCVE-2026-46457 updated by NVD
• CVE-2026-115775highCVE-2026-115775 updated by NVD
• CVE-2026-57173mediumCVE-2026-57173 updated by NVD
• CVE-2026-73088highCVE-2026-73088 updated by NVD
• CVE-2024-6706mediumOpen WebUI Stored Cross-Site Scripting Vulnerability
• CVE-2026-62985highCVE-2026-62985 updated by NVD
• CVE-2026-73089highCVE-2026-73089 updated by NVD
• CVE-2026-92948criticalCVE-2026-92948 updated by NVD
• CVE-2026-43866highCVE-2026-43866 updated by NVD
• CVE-2026-62252criticalCVE-2026-62252 updated by NVD
• CVE-2026-45018criticalCVE-2026-45018 updated by NVD
• CVE-2024-58368highCVE-2024-58368 updated by NVD
• CVE-2026-26292criticalCVE-2026-26292 updated by NVD
• CVE-2026-53404highCVE-2026-53404 updated by NVD
• CVE-2026-39892mediumCVE-2026-39892 updated by NVD
• CVE-2026-9800highCVE-2026-9800 updated by NVD
• CVE-2026-40961highCVE-2026-40961 updated by NVD
• CVE-2026-103975mediumCVE-2026-103975 updated by NVD
• CVE-2026-92707mediumCVE-2026-92707 updated by NVD
• CVE-2026-69152highCVE-2026-69152 updated by NVD
• CVE-2024-7039highWithdrawn Advisory: Open WebUI Allows Admin Deletion via API Endpoint
• CVE-2026-59978highCVE-2026-59978 updated by NVD
• CVE-2026-9335mediumCVE-2026-9335 updated by NVD
• CVE-2026-44913mediumCVE-2026-44913 updated by NVD
• CVE-2026-73653criticalCVE-2026-73653 updated by NVD
• CVE-2026-49293highCVE-2026-49293 updated by NVD
• CVE-2026-56340highCVE-2026-56340 updated by NVD
• CVE-2026-70175highCVE-2026-70175 updated by NVD
• CVE-2026-14257highCVE-2026-14257 updated by NVD
• CVE-2025-53837criticalCVE-2025-53837 updated by NVD
• CVE-2026-68969mediumCVE-2026-68969 updated by NVD
• CVE-2026-84445highCVE-2026-84445 updated by NVD
• CVE-2026-106446criticalCVE-2026-106446 updated by NVD
• CVE-2024-45479criticalApache Ranger UI vulnerable to Server Side Request Forgery
• CVE-2026-70007highCVE-2026-70007 updated by NVD
• CVE-2026-57149criticalCVE-2026-57149 updated by NVD
• CVE-2026-59960highCVE-2026-59960 updated by NVD
• CVE-2026-27780criticalCVE-2026-27780 updated by NVD
• CVE-2026-54183mediumCVE-2026-54183 updated by NVD
• CVE-2024-58362highCVE-2024-58362 updated by NVD
• CVE-2026-48891mediumCVE-2026-48891 updated by NVD
• CVE-2026-77524criticalCVE-2026-77524 updated by NVD
• CVE-2026-31233criticalGuardrails AI contains a code injection vulnerability in its Hub package installation mechanism
• CVE-2026-91972highCVE-2026-91972 updated by NVD
• CVE-2025-54950criticalExecuTorch out-of-bounds access vulnerability
• CVE-2025-30405criticalExecuTorch integer overflow vulnerability
• CVE-2025-30404criticalExecuTorch integer overflow vulnerability
• CVE-2024-21669criticalHyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
• CVE-2026-68525criticalCVE-2026-68525 updated by NVD
• CVE-2026-40983highCVE-2026-40983 updated by NVD
• CVE-2026-102984highCVE-2026-102984 updated by NVD
• CVE-2026-56669highCVE-2026-56669 updated by NVD
• CVE-2026-81876highCVE-2026-81876 updated by NVD
• CVE-2026-81875highCVE-2026-81875 updated by NVD
• CVE-2026-15895highCVE-2026-15895 updated by NVD
• CVE-2026-46585highCVE-2026-46585 updated by NVD
• CVE-2026-26307highCVE-2026-26307 updated by NVD
• CVE-2026-49434highApache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability
• CVE-2026-48059highCVE-2026-48059 updated by NVD
• CVE-2026-22864highDeno has an incomplete fix for command-injection prevention on Windows — case-insensitive extension bypass
• CVE-2026-53622highCVE-2026-53622 updated by NVD
• CVE-2026-69201mediumCVE-2026-69201 updated by NVD
• CVE-2026-45794highCVE-2026-45794 updated by NVD
• CVE-2026-57301highCVE-2026-57301 updated by NVD
• CVE-2026-58659highCVE-2026-58659 updated by NVD
• CVE-2026-55994highApache Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange w
• CVE-2026-46592highCVE-2026-46592 updated by NVD
• CVE-2024-25141criticalImproper Certificate Validation in apache airflow mongo hook
• CVE-2026-59990highCVE-2026-59990 updated by NVD
• CVE-2026-77360mediumCVE-2026-77360 updated by NVD
• CVE-2026-11407highCVE-2026-11407 updated by NVD
• CVE-2026-88975highCVE-2026-88975 updated by NVD
• CVE-2026-68076mediumCVE-2026-68076 updated by NVD
• CVE-2026-16629mediumCVE-2026-16629 updated by NVD
• CVE-2026-35397highCVE-2026-35397 updated by NVD
• CVE-2026-73483criticalCVE-2026-73483 updated by NVD
• CVE-2026-77271highCVE-2026-77271 updated by NVD
• CVE-2026-79752criticalCVE-2026-79752 updated by NVD
• CVE-2026-39830criticalCVE-2026-39830 updated by NVD
• CVE-2026-32274highCVE-2026-32274 updated by NVD
• CVE-2026-62369highCVE-2026-62369 updated by NVD
• CVE-2026-54446highCVE-2026-54446 updated by NVD
• CVE-2026-11748mediumCVE-2026-11748 updated by NVD
• CVE-2026-84318highCVE-2026-84318 updated by NVD
• CVE-2026-50525highCVE-2026-50525 updated by NVD
• CVE-2026-50648highCVE-2026-50648 updated by NVD
• CVE-2026-92938criticalCVE-2026-92938 updated by NVD
• CVE-2026-92939criticalCVE-2026-92939 updated by NVD
• CVE-2026-27489highonnx Vulnerable to Path Traversal via Symlink
• CVE-2026-19484highCVE-2026-19484 updated by NVD
• CVE-2026-73667highCVE-2026-73667 updated by NVD
• CVE-2026-49757criticalCVE-2026-49757 updated by NVD
• CVE-2026-55477highCVE-2026-55477 updated by NVD
• CVE-2026-56346mediumAVideo has Unauthenticated PGP Message Decryption via Public Endpoint
• CVE-2025-71341highCVE-2025-71341 updated by NVD
• CVE-2026-65637criticalCVE-2026-65637 updated by NVD
• CVE-2026-55638highCVE-2026-55638 updated by NVD
• CVE-2026-54348highCVE-2026-54348 updated by NVD
• CVE-2026-13760highCVE-2026-13760 updated by NVD
• CVE-2026-85734criticalCVE-2026-85734 updated by NVD
• CVE-2026-77322highCVE-2026-77322 updated by NVD
• CVE-2026-58268highCVE-2026-58268 updated by NVD
• CVE-2026-59991highCVE-2026-59991 updated by NVD
• CVE-2026-82399highCVE-2026-82399 updated by NVD
• CVE-2026-63460highCVE-2026-63460 updated by NVD
• CVE-2026-59724highCVE-2026-59724 updated by NVD
• CVE-2026-56816highCVE-2026-56816 updated by NVD
• CVE-2026-49098mediumApache Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-pref
• CVE-2026-87776highCVE-2026-87776 updated by NVD
• CVE-2024-35056criticalNASA AIT-Core vulnerable to SQL Injection
• CVE-2026-43871highCVE-2026-43871 updated by NVD
• CVE-2026-41608highCVE-2026-41608 updated by NVD
• CVE-2026-55276criticalCVE-2026-55276 updated by NVD
• CVE-2026-42294highCVE-2026-42294 updated by NVD
• CVE-2026-55874highSeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
• CVE-2026-47884criticalCVE-2026-47884 updated by NVD
• CVE-2026-111764highCVE-2026-111764 updated by NVD
• CVE-2026-42440highCVE-2026-42440 updated by NVD
• CVE-2026-55605mediumCVE-2026-55605 updated by NVD
• CVE-2026-45109highCVE-2026-45109 updated by NVD
• CVE-2025-27597highVue I18n Allows Prototype Pollution in `handleFlatJson`
• CVE-2026-77267highCVE-2026-77267 updated by NVD
• CVE-2026-44020highCVE-2026-44020 updated by NVD
• CVE-2026-59193mediumCVE-2026-59193 updated by NVD
• CVE-2026-48203criticalCVE-2026-48203 updated by NVD
• CVE-2026-39832criticalCVE-2026-39832 updated by NVD
• CVE-2026-33236highCVE-2026-33236 updated by NVD
• CVE-2026-111759highCVE-2026-111759 updated by NVD
• CVE-2026-58168highCVE-2026-58168 updated by NVD
• CVE-2026-68871mediumCVE-2026-68871 updated by NVD
• CVE-2026-106118highCVE-2026-106118 updated by NVD
• CVE-2026-56741highCVE-2026-56741 updated by NVD
• CVE-2025-43859criticalh11 accepts some malformed Chunked-Encoding bodies
• CVE-2026-52887criticalNocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE
• CVE-2026-44793highCVE-2026-44793 updated by NVD
• CVE-2026-44203highCVE-2026-44203 updated by NVD
• CVE-2026-56740highCVE-2026-56740 updated by NVD
• CVE-2026-65182criticalCVE-2026-65182 updated by NVD
• CVE-2026-55469mediumCVE-2026-55469 updated by NVD
• CVE-2026-68971mediumCVE-2026-68971 updated by NVD
• CVE-2026-27975highAjenti has potential Remote Code Execution
• CVE-2026-115774mediumCVE-2026-115774 updated by NVD
• CVE-2026-92956criticalCVE-2026-92956 updated by NVD
• CVE-2026-54428highCVE-2026-54428 updated by NVD
• CVE-2026-53434criticalCVE-2026-53434 updated by NVD
• CVE-2026-62988criticalCVE-2026-62988 updated by NVD
• CVE-2026-71328highCVE-2026-71328 updated by NVD
• CVE-2026-12243highnltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences
• CVE-2026-92599highCVE-2026-92599 updated by NVD
• CVE-2026-67422highCVE-2026-67422 updated by NVD
• CVE-2026-71476highCVE-2026-71476 updated by NVD
• CVE-2026-47303highCVE-2026-47303 updated by NVD
• CVE-2026-27779highCVE-2026-27779 updated by NVD
• CVE-2026-68497highCVE-2026-68497 updated by NVD
• CVE-2026-100368highCVE-2026-100368 updated by NVD
• CVE-2026-77601highCVE-2026-77601 updated by NVD
• CVE-2026-54606highCVE-2026-54606 updated by NVD
• CVE-2025-1793criticalllama_index vulnerable to SQL Injection
• CVE-2026-61695highCVE-2026-61695 updated by NVD
• CVE-2026-54148highCVE-2026-54148 updated by NVD
• CVE-2026-65595highCVE-2026-65595 updated by NVD
• CVE-2026-66907highCVE-2026-66907 updated by NVD
• CVE-2025-54550highCVE-2025-54550 updated by NVD
• CVE-2026-96620criticalCVE-2026-96620 updated by NVD
• CVE-2026-69264criticalCVE-2026-69264 updated by NVD
• CVE-2026-53633criticalCVE-2026-53633 updated by NVD
• CVE-2025-65719criticalCVE-2025-65719 updated by NVD
• CVE-2026-82410highCVE-2026-82410 updated by NVD
• CVE-2026-53571highCVE-2026-53571 updated by NVD
• CVE-2026-102827highCVE-2026-102827 updated by NVD
• CVE-2026-85756highCVE-2026-85756 updated by NVD
• CVE-2026-24734highApache Tomcat has an Improper Input Validation vulnerability
• CVE-2026-77602criticalCVE-2026-77602 updated by NVD
• CVE-2026-73415highCVE-2026-73415 updated by NVD
• CVE-2026-49844mediumCVE-2026-49844 updated by NVD
• CVE-2026-56139mediumApache Camel-Undertow: The muteException consumer option defaulted to false, so a processing error returned th
• CVE-2026-49365mediumApache Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned
• CVE-2026-75508highCVE-2026-75508 updated by NVD
• CVE-2026-48853criticalCVE-2026-48853 updated by NVD
• CVE-2026-57443highCVE-2026-57443 updated by NVD
• CVE-2026-76825highCVE-2026-76825 updated by NVD
• CVE-2026-84374highCVE-2026-84374 updated by NVD
• CVE-2026-41603highCVE-2026-41603 updated by NVD
• CVE-2026-96222highCVE-2026-96222 updated by NVD
• CVE-2026-76220highCVE-2026-76220 updated by NVD
• CVE-2026-12796lowCVE-2026-12796 updated by NVD
• CVE-2026-93748highCVE-2026-93748 updated by NVD
• CVE-2026-50159mediumCVE-2026-50159 updated by NVD
• CVE-2026-52801highGogs has the ability to import local repositories via Mirror Settings
• CVE-2026-12770lowCVE-2026-12770 updated by NVD
• CVE-2026-61814highCVE-2026-61814 updated by NVD
• CVE-2026-72695highCVE-2026-72695 updated by NVD
• CVE-2026-55108highCVE-2026-55108 updated by NVD
• CVE-2026-85063mediumCVE-2026-85063 updated by NVD
• CVE-2026-96639criticalCVE-2026-96639 updated by NVD
• CVE-2026-112953mediumCVE-2026-112953 updated by NVD
• CVE-2026-54399highCVE-2026-54399 updated by NVD
• CVE-2026-42196criticalCVE-2026-42196 updated by NVD
• CVE-2026-115892mediumCVE-2026-115892 updated by NVD
• CVE-2026-85396highCVE-2026-85396 updated by NVD
• CVE-2026-47890criticalCVE-2026-47890 updated by NVD
• CVE-2026-62384highCVE-2026-62384 updated by NVD
• CVE-2026-63312highCVE-2026-63312 updated by NVD
• CVE-2026-11816highCVE-2026-11816 updated by NVD
• CVE-2026-35581highCVE-2026-35581 updated by NVD
• CVE-2026-54788highCVE-2026-54788 updated by NVD
• CVE-2026-46584lowCVE-2026-46584 updated by NVD
• CVE-2026-25718criticalCVE-2026-25718 updated by NVD
• CVE-2026-44827highCVE-2026-44827 updated by NVD
• CVE-2024-7040mediumWithdrawn Advisory: Open WebUI Access Control
• CVE-2026-53995highCVE-2026-53995 updated by NVD
• CVE-2026-63445highCVE-2026-63445 updated by NVD
• CVE-2025-66336highCVE-2025-66336 updated by NVD
• CVE-2026-8769lowCVE-2026-8769 updated by NVD
• CVE-2026-47698criticalCVE-2026-47698 updated by NVD
• CVE-2026-116690highCVE-2026-116690 updated by NVD
• CVE-2026-115895highCVE-2026-115895 updated by NVD
• CVE-2024-53412highNietThijmen ShoppingCart: Command injection in the connect function
• CVE-2026-27962criticalCVE-2026-27962 updated by NVD
• CVE-2023-29003highSvelteKit vulnerable to Cross-Site Request Forgery
• CVE-2026-118779highCVE-2026-118779 updated by NVD
• CVE-2026-75507highCVE-2026-75507 updated by NVD
• CVE-2026-70179highCVE-2026-70179 updated by NVD
• CVE-2026-56817highCVE-2026-56817 updated by NVD
• CVE-2026-63430mediumCVE-2026-63430 updated by NVD
• CVE-2026-47426highCVE-2026-47426 updated by NVD
• CVE-2026-52802mediumGogs has an Open Redirect via redirect_to
• CVE-2026-4598highCVE-2026-4598 updated by NVD
• CVE-2025-71348highCVE-2025-71348 updated by NVD
• CVE-2026-57516highCVE-2026-57516 updated by NVD
• CVE-2026-55559criticalCVE-2026-55559 updated by NVD
• CVE-2026-55607highCVE-2026-55607 updated by NVD
• CVE-2026-48206mediumCVE-2026-48206 updated by NVD
• CVE-2026-46453mediumCVE-2026-46453 updated by NVD
• CVE-2025-55013mediumAssemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
• CVE-2026-71324highCVE-2026-71324 updated by NVD
• CVE-2026-46591highCVE-2026-46591 updated by NVD
• CVE-2026-84997highCVE-2026-84997 updated by NVD
• CVE-2026-61554highCVE-2026-61554 updated by NVD
• CVE-2026-73841highCVE-2026-73841 updated by NVD
• CVE-2026-46369highCVE-2026-46369 updated by NVD
• CVE-2026-77262highCVE-2026-77262 updated by NVD
• CVE-2026-37004criticalCVE-2026-37004 updated by NVD
• CVE-2026-47110highCVE-2026-47110 updated by NVD
• CVE-2026-52814mediumGogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustio
• CVE-2026-30405highGoBGP vulnerable to a denial of service via the NEXT_HOP path attribute
• CVE-2026-89407highCVE-2026-89407 updated by NVD
• CVE-2026-101900mediumCVE-2026-101900 updated by NVD
• CVE-2026-62900mediumCVE-2026-62900 updated by NVD
• CVE-2026-72717criticalCVE-2026-72717 updated by NVD
• CVE-2026-52830criticalCVE-2026-52830 updated by NVD
• CVE-2025-71370highCVE-2025-71370 updated by NVD
• CVE-2026-59879highImmutable.js `List` 32-bit trie overflow → unrecoverable DoS
• CVE-2026-5497highCVE-2026-5497 updated by NVD
• CVE-2026-5241criticalCVE-2026-5241 updated by NVD
• CVE-2026-84313highCVE-2026-84313 updated by NVD
• CVE-2026-102983mediumCVE-2026-102983 updated by NVD
• CVE-2026-84377mediumCVE-2026-84377 updated by NVD
• CVE-2026-55843highCVE-2026-55843 updated by NVD
• CVE-2026-73054highCVE-2026-73054 updated by NVD
• CVE-2026-92951criticalCVE-2026-92951 updated by NVD
• CVE-2026-72781highCVE-2026-72781 updated by NVD
• CVE-2026-21884highReact Router SSR XSS in ScrollRestoration
• CVE-2026-113658highCVE-2026-113658 updated by NVD
• CVE-2026-47300highCVE-2026-47300 updated by NVD
• CVE-2026-92957criticalCVE-2026-92957 updated by NVD
• CVE-2025-55017criticalCVE-2025-55017 updated by NVD
• CVE-2025-64152criticalCVE-2025-64152 updated by NVD
• CVE-2024-52980mediumElasticsearch-grok Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
• CVE-2024-29888mediumSaleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
• CVE-2026-116682highCVE-2026-116682 updated by NVD
• CVE-2026-2651criticalCVE-2026-2651 updated by NVD
• CVE-2023-41052mediumincorrect order of evaluation of side effects for some builtins
• CVE-2026-61685highCVE-2026-61685 updated by NVD
• CVE-2026-63128highCVE-2026-63128 updated by NVD
• CVE-2026-88045highCVE-2026-88045 updated by NVD
• CVE-2026-34479mediumCVE-2026-34479 updated by NVD
• CVE-2026-65591highCVE-2026-65591 updated by NVD
• CVE-2026-65597highCVE-2026-65597 updated by NVD
• CVE-2026-11720criticalCVE-2026-11720 updated by NVD
• CVE-2026-94603criticalCVE-2026-94603 updated by NVD
• CVE-2026-88932mediumCVE-2026-88932 updated by NVD
• CVE-2026-76169highCVE-2026-76169 updated by NVD
• CVE-2026-66906criticalCVE-2026-66906 updated by NVD
• CVE-2026-73646highCVE-2026-73646 updated by NVD
• CVE-2026-19032mediumCVE-2026-19032 updated by NVD
• CVE-2026-75516highCVE-2026-75516 updated by NVD
• CVE-2026-47892criticalCVE-2026-47892 updated by NVD
• CVE-2026-54527criticalCVE-2026-54527 updated by NVD
• CVE-2026-115572highCVE-2026-115572 updated by NVD
• CVE-2026-115585highCVE-2026-115585 updated by NVD