Developer Tooling

🛡 Vulnérabilités associées 35

Image	ID	Titre	Gravité	Détecté
	CVE-2026-77805	Vulnérabilité dans Windows (CVE-2026-77805)	High	il y a 1 semaine
	CVE-2026-104851	Injection de code dans fsspec (CVE-2026-104851)	High	il y a 2 semaines
	CVE-2026-86540	knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json	High	il y a 1 mois
	CVE-2026-78677	Traversée de chemin dans gitpython (CVE-2026-78677)	High	il y a 1 mois
	CVE-2026-78209	Vulnérabilité dans exceljs-hardened (CVE-2026-78209)	High	il y a 1 mois
	CVE-2026-78136	chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...	High	il y a 1 mois
	CVE-2026-62960	Divulgation d'information dans Git Windows (CVE-2026-62960)	High	il y a 1 mois
	CVE-2026-73226	electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...	High	il y a 2 mois
	CVE-2026-73224	electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user do...	High	il y a 2 mois
	CVE-2026-73222	Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)	High	il y a 2 mois
	CVE-2026-48120	Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell comma...	High	il y a 2 mois
	CVE-2026-66036	FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...	High	il y a 2 mois
	CVE-2026-58049	FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...	High	il y a 3 mois
	CVE-2026-47964	DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow...	High	il y a 4 mois
	CVE-2026-47908	Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer...	High	il y a 4 mois
	CVE-2026-49367	In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account	High	il y a 4 mois
	CVE-2026-49366	In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion	High	il y a 4 mois
	CVE-2026-42302	Vulnérabilité dans openai-sdk (CVE-2026-42302)	Critical	il y a 5 mois
	CVE-2026-41588	Vulnérabilité dans timing-attack (CVE-2026-41588)	Critical	il y a 5 mois
	CVE-2026-41507	Injection de code dans remote (CVE-2026-41507)	Critical	il y a 5 mois
	CVE-2026-43944	Vulnérabilité dans electerm (CVE-2026-43944)	Critical	il y a 5 mois
	CVE-2026-41500	Injection de commande dans electerm-project (CVE-2026-41500)	Critical	il y a 5 mois
	CVE-2025-63704	Vulnérabilité dans prototype-pollution (CVE-2025-63704)	Critical	il y a 5 mois
	CVE-2025-63706	Injection de code dans npm (CVE-2025-63706)	Critical	il y a 5 mois
	CVE-2026-42503	gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls...	High	il y a 5 mois
	CVE-2026-34084	Désérialisation non sécurisée dans phpoffice/phpspreadsheet (CVE-2026-34084)	Critical	il y a 5 mois
	CVE-2026-38431	Injection de code dans frappe (CVE-2026-38431)	Critical	il y a 5 mois
	CVE-2026-26956	Vulnérabilité dans vm2-project (CVE-2026-26956)	Critical	il y a 5 mois
	CVE-2026-24781	Injection de code dans vm2-project (CVE-2026-24781)	Critical	il y a 5 mois
	CVE-2026-24118	Injection de code dans vm2-project (CVE-2026-24118)	Critical	il y a 5 mois