Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Clear
ID Title
CVE-2026-50765 Cross-Site Scripting (XSS) in koha (CVE-2026-50765)
cross-site scripting in koha (CVE-2026-50765). Risk of unauthorized operations or information disclosure.
CVE-2026-38571 Vulnerability in CVE-2026-38571 (CVE-2026-38571)
vulnerability in CVE-2026-38571 (CVE-2026-38571). Confidential information can be exposed externally.
CVE-2026-36907 Vulnerability in dos (CVE-2026-36907)
vulnerability in dos (CVE-2026-36907). Risk of unauthorized operations or information disclosure.
CVE-2026-36908 Vulnerability in dos (CVE-2026-36908)
vulnerability in dos (CVE-2026-36908). Risk of unauthorized operations or information disclosure.
CVE-2026-55700 Path Traversal in pnpm (CVE-2026-55700)
path traversal in pnpm (CVE-2026-55700). Data can be tampered with by attackers. Exploitable via ``main``. Mitigation: upgrade to `11.5.3` or later.
CVE-2026-55699 Path Traversal in pnpm (CVE-2026-55699)
path traversal in pnpm (CVE-2026-55699). Risk of unauthorized operations or information disclosure. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
CVE-2026-55698 Vulnerability in pnpm (CVE-2026-55698)
vulnerability in pnpm (CVE-2026-55698). Successful exploitation can lead to full system takeover. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
CVE-2026-55697 OS Command Injection in pnpm (CVE-2026-55697)
OS command injection in pnpm (CVE-2026-55697). Successful exploitation can lead to full system takeover. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
CVE-2026-55487 Vulnerability in pnpm (CVE-2026-55487)
vulnerability in pnpm (CVE-2026-55487). Successful exploitation can lead to full system takeover. Exploitable via ``bf1b731ee6``. Mitigation: upgrade to `10.34.2` or later.
CVE-2026-55180 Information Disclosure in pnpm (CVE-2026-55180)
vulnerability in pnpm (CVE-2026-55180). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `11.5.3` or later.
CVE-2026-54244 Authorization Flaw in statamic/cms (CVE-2026-54244)
vulnerability in statamic/cms (CVE-2026-54244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.74.0` or later.
CVE-2026-54242 Vulnerability in statamic/cms (CVE-2026-54242)
vulnerability in statamic/cms (CVE-2026-54242). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.73.24` or later.
CVE-2026-50015 Path Traversal in pnpm (CVE-2026-50015)
path traversal in pnpm (CVE-2026-50015). Data can be tampered with by attackers. Exploitable via ``patchedDependencies``. Mitigation: upgrade to `11.4.0` or later.
CVE-2026-50017 Information Disclosure in pnpm (CVE-2026-50017)
vulnerability in pnpm (CVE-2026-50017). Confidential information can be exposed externally. Exploitable via ``_authToken``. Mitigation: upgrade to `11.4.0` or later.
CVE-2026-50016 Vulnerability in pnpm (CVE-2026-50016)
vulnerability in pnpm (CVE-2026-50016). Successful exploitation can lead to full system takeover. Exploitable via ``node_modules``. Mitigation: upgrade to `11.4.0` or later.
CVE-2026-50014 Vulnerability in pnpm (CVE-2026-50014)
vulnerability in pnpm (CVE-2026-50014). Confidential information can be exposed externally. Exploitable via ``resolution.commit``. Mitigation: upgrade to `11.4.0` or later.
CVE-2026-50029 Vulnerability in js-toml (CVE-2026-50029)
vulnerability in js-toml (CVE-2026-50029). Risk of unauthorized operations or information disclosure. Exploitable via ``false``. Mitigation: upgrade to `1.1.2` or later.
CVE-2026-49349 Vulnerability in github.com/regclient/regclient (CVE-2026-49349)
vulnerability in github.com/regclient/regclient (CVE-2026-49349). Confidential information can be exposed externally. Exploitable via ``urls``. Mitigation: upgrade to `0.11.5` or later.
CVE-2026-49869 KEV [KEV] OS Command Injection in kestra (CVE-2026-49869)
OS command injection in kestra (CVE-2026-49869). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.0.45` or later.
CVE-2026-53576 Code Injection in kestra (CVE-2026-53576)
code injection in kestra (CVE-2026-53576). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.45` or later.
CVE-2026-53577 Authorization Flaw in kestra (CVE-2026-53577)
vulnerability in kestra (CVE-2026-53577). Confidential information can be exposed externally. Exploitable via `GET /api/v1/{tenant}/executions/{executionId}/file/preview`. Mitigation: upgrade to `1.0.45` or later.
CVE-2026-49984 Path Traversal in kestra (CVE-2026-49984)
path traversal in kestra (CVE-2026-49984). Confidential information can be exposed externally. Exploitable via `GET /api/v1/{tenant}/executions/{executionId}/file`. Mitigation: upgrade to `1.0.45` or later.
CVE-2026-45807 Path Traversal in kestra (CVE-2026-45807)
path traversal in kestra (CVE-2026-45807). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.43` or later.
CVE-2026-49262 Vulnerability in aimeos/pagible (CVE-2026-49262)
vulnerability in aimeos/pagible (CVE-2026-49262). Risk of unauthorized operations or information disclosure. Exploitable via ``cmsproxy``. Mitigation: upgrade to `0.10.4` or later.
CVE-2026-48995 Vulnerability in pnpm (CVE-2026-48995)
vulnerability in pnpm (CVE-2026-48995). Successful exploitation can lead to full system takeover. Exploitable via ``codeload.github.com``. Mitigation: upgrade to `11.0.7` or later.
CVE-2026-53324 Vulnerability in linux (CVE-2026-53324)
vulnerability in linux (CVE-2026-53324). Risk of unauthorized operations or information disclosure.
CVE-2024-23581 Vulnerability in hcltech (CVE-2024-23581)
vulnerability in hcltech (CVE-2024-23581). Successful exploitation can lead to full system takeover.
CVE-2026-38641 Vulnerability in dos (CVE-2026-38641)
vulnerability in dos (CVE-2026-38641). Risk of unauthorized operations or information disclosure.
CVE-2026-39031 Vulnerability in CVE-2026-39031 (CVE-2026-39031)
vulnerability in CVE-2026-39031 (CVE-2026-39031). Confidential information can be exposed externally.
CVE-2026-38639 Vulnerability in dos (CVE-2026-38639)
vulnerability in dos (CVE-2026-38639). Risk of unauthorized operations or information disclosure.
CVE-2026-53303 Out-of-Bounds Read in linux (CVE-2026-53303)
vulnerability in linux (CVE-2026-53303). Confidential information can be exposed externally.
CVE-2026-53294 Vulnerability in linux (CVE-2026-53294)
vulnerability in linux (CVE-2026-53294). Successful exploitation can lead to full system takeover.
CVE-2026-53322 Vulnerability in linux (CVE-2026-53322)
vulnerability in linux (CVE-2026-53322). Successful exploitation can lead to full system takeover.
CVE-2026-53296 Use-After-Free in linux (CVE-2026-53296)
vulnerability in linux (CVE-2026-53296). Successful exploitation can lead to full system takeover.
CVE-2026-53300 Use-After-Free in linux (CVE-2026-53300)
vulnerability in linux (CVE-2026-53300). Successful exploitation can lead to full system takeover.
CVE-2026-53298 Vulnerability in linux (CVE-2026-53298)
vulnerability in linux (CVE-2026-53298). Risk of unauthorized operations or information disclosure.
CVE-2026-53299 Vulnerability in linux (CVE-2026-53299)
vulnerability in linux (CVE-2026-53299). Risk of unauthorized operations or information disclosure.
CVE-2026-53301 Vulnerability in linux (CVE-2026-53301)
vulnerability in linux (CVE-2026-53301). Risk of unauthorized operations or information disclosure.
CVE-2026-53305 Vulnerability in linux (CVE-2026-53305)
vulnerability in linux (CVE-2026-53305). Risk of unauthorized operations or information disclosure.
CVE-2026-53302 Vulnerability in linux (CVE-2026-53302)
vulnerability in linux (CVE-2026-53302). Risk of unauthorized operations or information disclosure.
CVE-2026-53313 Vulnerability in c (CVE-2026-53313)
vulnerability in c (CVE-2026-53313). Risk of unauthorized operations or information disclosure.
CVE-2026-53297 Vulnerability in linux (CVE-2026-53297)
vulnerability in linux (CVE-2026-53297). Risk of unauthorized operations or information disclosure.
CVE-2026-53315 Vulnerability in linux (CVE-2026-53315)
vulnerability in linux (CVE-2026-53315). Risk of unauthorized operations or information disclosure.
CVE-2026-53318 Vulnerability in linux (CVE-2026-53318)
vulnerability in linux (CVE-2026-53318). Risk of unauthorized operations or information disclosure.
CVE-2026-53307 Vulnerability in linux (CVE-2026-53307)
vulnerability in linux (CVE-2026-53307). Risk of unauthorized operations or information disclosure.
CVE-2026-53316 Vulnerability in linux (CVE-2026-53316)
vulnerability in linux (CVE-2026-53316). Risk of unauthorized operations or information disclosure.
CVE-2026-53293 Vulnerability in linux (CVE-2026-53293)
vulnerability in linux (CVE-2026-53293). Risk of unauthorized operations or information disclosure.
CVE-2026-53304 Vulnerability in linux (CVE-2026-53304)
vulnerability in linux (CVE-2026-53304). Risk of unauthorized operations or information disclosure.
CVE-2026-53323 Vulnerability in linux (CVE-2026-53323)
vulnerability in linux (CVE-2026-53323). Risk of unauthorized operations or information disclosure.
CVE-2026-53308 Vulnerability in linux (CVE-2026-53308)
vulnerability in linux (CVE-2026-53308). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →