Developer Tooling

🛡 Related vulnerabilities 35

Image	ID	Title	Severity	Detected
	CVE-2026-77805	In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the...	High	1 week ago
	CVE-2026-104851	fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution	High	2 weeks ago
	CVE-2026-86540	knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json	High	1 month ago
	CVE-2026-78677	GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination	High	1 month ago
	CVE-2026-78209	exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...	High	1 month ago
	CVE-2026-78136	chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...	High	1 month ago
	CVE-2026-62960	Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transport_get_remote_bundle_uri(), fetch_bundle_uri_interna...	High	1 month ago
	CVE-2026-73226	electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...	High	2 months ago
	CVE-2026-73224	electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user do...	High	2 months ago
	CVE-2026-73222	Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)	High	2 months ago
	CVE-2026-48120	Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell comma...	High	2 months ago
	CVE-2026-66036	FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...	High	2 months ago
	CVE-2026-58049	FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...	High	3 months ago
	CVE-2026-47964	DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow...	High	4 months ago
	CVE-2026-47908	Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer...	High	4 months ago
	CVE-2026-49367	In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account	High	4 months ago
	CVE-2026-49366	In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion	High	4 months ago
	CVE-2026-42302	Vulnerability in openai-sdk (CVE-2026-42302)	Critical	5 months ago
	CVE-2026-41588	Vulnerability in timing-attack (CVE-2026-41588)	Critical	5 months ago
	CVE-2026-41507	Code Injection in remote (CVE-2026-41507)	Critical	5 months ago
	CVE-2026-43944	Vulnerability in electerm (CVE-2026-43944)	Critical	5 months ago
	CVE-2026-41500	Command Injection in electerm-project (CVE-2026-41500)	Critical	5 months ago
	CVE-2025-63704	Vulnerability in prototype-pollution (CVE-2025-63704)	Critical	5 months ago
	CVE-2025-63706	Code Injection in npm (CVE-2025-63706)	Critical	5 months ago
	CVE-2026-42503	gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls...	High	5 months ago
	CVE-2026-34084	Unsafe Deserialization in phpoffice/phpspreadsheet (CVE-2026-34084)	Critical	5 months ago
	CVE-2026-38431	Code Injection in frappe (CVE-2026-38431)	Critical	5 months ago
	CVE-2026-26956	Vulnerability in vm2-project (CVE-2026-26956)	Critical	5 months ago
	CVE-2026-24781	Code Injection in vm2-project (CVE-2026-24781)	Critical	5 months ago
	CVE-2026-24118	Code Injection in vm2-project (CVE-2026-24118)	Critical	5 months ago