Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-50765 |
|
Cross-Site Scripting (XSS) in koha (CVE-2026-50765)
cross-site scripting in koha (CVE-2026-50765). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38571 |
|
Vulnerability in CVE-2026-38571 (CVE-2026-38571)
vulnerability in CVE-2026-38571 (CVE-2026-38571). Confidential information can be exposed externally.
|
| CVE-2026-36907 |
|
Vulnerability in dos (CVE-2026-36907)
vulnerability in dos (CVE-2026-36907). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-36908 |
|
Vulnerability in dos (CVE-2026-36908)
vulnerability in dos (CVE-2026-36908). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55700 |
|
Path Traversal in pnpm (CVE-2026-55700)
path traversal in pnpm (CVE-2026-55700). Data can be tampered with by attackers. Exploitable via ``main``. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-55699 |
|
Path Traversal in pnpm (CVE-2026-55699)
path traversal in pnpm (CVE-2026-55699). Risk of unauthorized operations or information disclosure. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-55698 |
|
Vulnerability in pnpm (CVE-2026-55698)
vulnerability in pnpm (CVE-2026-55698). Successful exploitation can lead to full system takeover. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-55697 |
|
OS Command Injection in pnpm (CVE-2026-55697)
OS command injection in pnpm (CVE-2026-55697). Successful exploitation can lead to full system takeover. Exploitable via ``a93449314f398cf4bdf2e28d033c02d37395ad22``. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-55487 |
|
Vulnerability in pnpm (CVE-2026-55487)
vulnerability in pnpm (CVE-2026-55487). Successful exploitation can lead to full system takeover. Exploitable via ``bf1b731ee6``. Mitigation: upgrade to `10.34.2` or later.
|
| CVE-2026-55180 |
|
Information Disclosure in pnpm (CVE-2026-55180)
vulnerability in pnpm (CVE-2026-55180). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `11.5.3` or later.
|
| CVE-2026-54244 |
|
Authorization Flaw in statamic/cms (CVE-2026-54244)
vulnerability in statamic/cms (CVE-2026-54244). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.74.0` or later.
|
| CVE-2026-54242 |
|
Vulnerability in statamic/cms (CVE-2026-54242)
vulnerability in statamic/cms (CVE-2026-54242). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.73.24` or later.
|
| CVE-2026-50015 |
|
Path Traversal in pnpm (CVE-2026-50015)
path traversal in pnpm (CVE-2026-50015). Data can be tampered with by attackers. Exploitable via ``patchedDependencies``. Mitigation: upgrade to `11.4.0` or later.
|
| CVE-2026-50017 |
|
Information Disclosure in pnpm (CVE-2026-50017)
vulnerability in pnpm (CVE-2026-50017). Confidential information can be exposed externally. Exploitable via ``_authToken``. Mitigation: upgrade to `11.4.0` or later.
|
| CVE-2026-50016 |
|
Vulnerability in pnpm (CVE-2026-50016)
vulnerability in pnpm (CVE-2026-50016). Successful exploitation can lead to full system takeover. Exploitable via ``node_modules``. Mitigation: upgrade to `11.4.0` or later.
|
| CVE-2026-50014 |
|
Vulnerability in pnpm (CVE-2026-50014)
vulnerability in pnpm (CVE-2026-50014). Confidential information can be exposed externally. Exploitable via ``resolution.commit``. Mitigation: upgrade to `11.4.0` or later.
|
| CVE-2026-50029 |
|
Vulnerability in js-toml (CVE-2026-50029)
vulnerability in js-toml (CVE-2026-50029). Risk of unauthorized operations or information disclosure. Exploitable via ``false``. Mitigation: upgrade to `1.1.2` or later.
|
| CVE-2026-49349 |
|
Vulnerability in github.com/regclient/regclient (CVE-2026-49349)
vulnerability in github.com/regclient/regclient (CVE-2026-49349). Confidential information can be exposed externally. Exploitable via ``urls``. Mitigation: upgrade to `0.11.5` or later.
|
| CVE-2026-49869 KEV |
|
[KEV] OS Command Injection in kestra (CVE-2026-49869)
OS command injection in kestra (CVE-2026-49869). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.0.45` or later.
|
| CVE-2026-53576 |
|
Code Injection in kestra (CVE-2026-53576)
code injection in kestra (CVE-2026-53576). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.45` or later.
|
| CVE-2026-53577 |
|
Authorization Flaw in kestra (CVE-2026-53577)
vulnerability in kestra (CVE-2026-53577). Confidential information can be exposed externally. Exploitable via `GET /api/v1/{tenant}/executions/{executionId}/file/preview`. Mitigation: upgrade to `1.0.45` or later.
|
| CVE-2026-49984 |
|
Path Traversal in kestra (CVE-2026-49984)
path traversal in kestra (CVE-2026-49984). Confidential information can be exposed externally. Exploitable via `GET /api/v1/{tenant}/executions/{executionId}/file`. Mitigation: upgrade to `1.0.45` or later.
|
| CVE-2026-45807 |
|
Path Traversal in kestra (CVE-2026-45807)
path traversal in kestra (CVE-2026-45807). Confidential information can be exposed externally. Mitigation: upgrade to `1.0.43` or later.
|
| CVE-2026-49262 |
|
Vulnerability in aimeos/pagible (CVE-2026-49262)
vulnerability in aimeos/pagible (CVE-2026-49262). Risk of unauthorized operations or information disclosure. Exploitable via ``cmsproxy``. Mitigation: upgrade to `0.10.4` or later.
|
| CVE-2026-48995 |
|
Vulnerability in pnpm (CVE-2026-48995)
vulnerability in pnpm (CVE-2026-48995). Successful exploitation can lead to full system takeover. Exploitable via ``codeload.github.com``. Mitigation: upgrade to `11.0.7` or later.
|
| CVE-2026-53324 |
|
Vulnerability in linux (CVE-2026-53324)
vulnerability in linux (CVE-2026-53324). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-23581 |
|
Vulnerability in hcltech (CVE-2024-23581)
vulnerability in hcltech (CVE-2024-23581). Successful exploitation can lead to full system takeover.
|
| CVE-2026-38641 |
|
Vulnerability in dos (CVE-2026-38641)
vulnerability in dos (CVE-2026-38641). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39031 |
|
Vulnerability in CVE-2026-39031 (CVE-2026-39031)
vulnerability in CVE-2026-39031 (CVE-2026-39031). Confidential information can be exposed externally.
|
| CVE-2026-38639 |
|
Vulnerability in dos (CVE-2026-38639)
vulnerability in dos (CVE-2026-38639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53303 |
|
Out-of-Bounds Read in linux (CVE-2026-53303)
vulnerability in linux (CVE-2026-53303). Confidential information can be exposed externally.
|
| CVE-2026-53294 |
|
Vulnerability in linux (CVE-2026-53294)
vulnerability in linux (CVE-2026-53294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53322 |
|
Vulnerability in linux (CVE-2026-53322)
vulnerability in linux (CVE-2026-53322). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53296 |
|
Use-After-Free in linux (CVE-2026-53296)
vulnerability in linux (CVE-2026-53296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53300 |
|
Use-After-Free in linux (CVE-2026-53300)
vulnerability in linux (CVE-2026-53300). Successful exploitation can lead to full system takeover.
|
| CVE-2026-53298 |
|
Vulnerability in linux (CVE-2026-53298)
vulnerability in linux (CVE-2026-53298). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53299 |
|
Vulnerability in linux (CVE-2026-53299)
vulnerability in linux (CVE-2026-53299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53301 |
|
Vulnerability in linux (CVE-2026-53301)
vulnerability in linux (CVE-2026-53301). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53305 |
|
Vulnerability in linux (CVE-2026-53305)
vulnerability in linux (CVE-2026-53305). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53302 |
|
Vulnerability in linux (CVE-2026-53302)
vulnerability in linux (CVE-2026-53302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53313 |
|
Vulnerability in c (CVE-2026-53313)
vulnerability in c (CVE-2026-53313). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53297 |
|
Vulnerability in linux (CVE-2026-53297)
vulnerability in linux (CVE-2026-53297). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53315 |
|
Vulnerability in linux (CVE-2026-53315)
vulnerability in linux (CVE-2026-53315). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53318 |
|
Vulnerability in linux (CVE-2026-53318)
vulnerability in linux (CVE-2026-53318). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53307 |
|
Vulnerability in linux (CVE-2026-53307)
vulnerability in linux (CVE-2026-53307). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53316 |
|
Vulnerability in linux (CVE-2026-53316)
vulnerability in linux (CVE-2026-53316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53293 |
|
Vulnerability in linux (CVE-2026-53293)
vulnerability in linux (CVE-2026-53293). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53304 |
|
Vulnerability in linux (CVE-2026-53304)
vulnerability in linux (CVE-2026-53304). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53323 |
|
Vulnerability in linux (CVE-2026-53323)
vulnerability in linux (CVE-2026-53323). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53308 |
|
Vulnerability in linux (CVE-2026-53308)
vulnerability in linux (CVE-2026-53308). Risk of unauthorized operations or information disclosure.
|