Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-44180 |
|
Vulnerability in jupyter_enterprise_gateway (CVE-2026-44180)
vulnerability in jupyter_enterprise_gateway (CVE-2026-44180). Successful exploitation can lead to full system takeover. Exploitable via ``KERNEL_UID``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-44023 |
|
Path Traversal in docling-core (CVE-2026-44023)
path traversal in docling-core (CVE-2026-44023). Confidential information can be exposed externally. Mitigation: upgrade to `2.74.1` or later.
|
| CVE-2026-44019 |
|
Vulnerability in docling-core (CVE-2026-44019)
vulnerability in docling-core (CVE-2026-44019). Confidential information can be exposed externally. Mitigation: upgrade to `2.74.1` or later.
|
| CVE-2026-47214 |
|
Vulnerability in docling (CVE-2026-47214)
vulnerability in docling (CVE-2026-47214). Confidential information can be exposed externally. Exploitable via ``base_path``. Mitigation: upgrade to `2.94.0` or later.
|
| CVE-2026-44022 |
|
Path Traversal in docling (CVE-2026-44022)
path traversal in docling (CVE-2026-44022). Confidential information can be exposed externally. Mitigation: upgrade to `2.91.0` or later.
|
| CVE-2026-44020 |
|
XXE (XML External Entity) in docling (CVE-2026-44020)
vulnerability in docling (CVE-2026-44020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.74.0` or later.
|
| CVE-2026-44018 |
|
Vulnerability in docling (CVE-2026-44018)
vulnerability in docling (CVE-2026-44018). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.91.0` or later.
|
| CVE-2026-44016 |
|
Code Injection in docling (CVE-2026-44016)
code injection in docling (CVE-2026-44016). Confidential information can be exposed externally. Exploitable via ``enable_remote_fetch``. Mitigation: upgrade to `2.91.0` or later.
|
| CVE-2026-43980 |
|
Cross-Site Scripting (XSS) in malla (CVE-2026-43980)
cross-site scripting in malla (CVE-2026-43980). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41234 |
|
Vulnerability in froxlor/froxlor (CVE-2026-41234)
vulnerability in froxlor/froxlor (CVE-2026-41234). Data can be tampered with by attackers. Exploitable via ``DomainZones.add``. Mitigation: upgrade to `2.3.7` or later.
|
| CVE-2026-40898 |
|
Vulnerability in github.com/quic-go/quic-go (CVE-2026-40898)
vulnerability in github.com/quic-go/quic-go (CVE-2026-40898). Risk of unauthorized operations or information disclosure. Exploitable via ``http.Header``. Mitigation: upgrade to `0.59.1` or later.
|
| CVE-2026-44609 |
|
Vulnerability in privilege-escalation (CVE-2026-44609)
vulnerability in privilege-escalation (CVE-2026-44609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44682 |
|
Vulnerability in privilege-escalation (CVE-2026-44682)
vulnerability in privilege-escalation (CVE-2026-44682). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50033 |
|
Vulnerability in privilege-escalation (CVE-2026-50033)
vulnerability in privilege-escalation (CVE-2026-50033). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43924 |
|
Open Redirect in CVE-2026-43924 (CVE-2026-43924)
vulnerability in CVE-2026-43924 (CVE-2026-43924). Risk of unauthorized operations or information disclosure. Exploitable via ``extension_meta``.
|
| CVE-2026-40495 |
|
Information Disclosure in CVE-2026-40495 (CVE-2026-40495)
vulnerability in CVE-2026-40495 (CVE-2026-40495). Risk of unauthorized operations or information disclosure. Exploitable via ``hide_version_public``.
|
| CVE-2026-42061 |
|
Vulnerability in privilege-escalation (CVE-2026-42061)
vulnerability in privilege-escalation (CVE-2026-42061). Successful exploitation can lead to full system takeover.
|
| CVE-2026-37700 |
|
Cross-Site Scripting (XSS) in CVE-2026-37700 (CVE-2026-37700)
cross-site scripting in CVE-2026-37700 (CVE-2026-37700). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26825 |
|
Vulnerability in libxls-project (CVE-2026-26825)
vulnerability in libxls-project (CVE-2026-26825). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44017 |
|
Path Traversal in docling (CVE-2026-44017)
path traversal in docling (CVE-2026-44017). Successful exploitation can lead to full system takeover. Exploitable via ``SecurityError``. Mitigation: upgrade to `2.91.0` or later.
|
| CVE-2026-8888 |
|
Vulnerability in dos (CVE-2026-8888)
vulnerability in dos (CVE-2026-8888). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8878 |
|
Vulnerability in securly (CVE-2026-8878)
vulnerability in securly (CVE-2026-8878). Confidential information can be exposed externally.
|
| CVE-2026-8879 |
|
Vulnerability in securly (CVE-2026-8879)
vulnerability in securly (CVE-2026-8879). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8876 |
|
Vulnerability in securly (CVE-2026-8876)
vulnerability in securly (CVE-2026-8876). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45614 |
|
Vulnerability in linaro (CVE-2026-45614)
vulnerability in linaro (CVE-2026-45614). Confidential information can be exposed externally.
|
| CVE-2026-45702 |
|
Vulnerability in linaro (CVE-2026-45702)
vulnerability in linaro (CVE-2026-45702). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7888 |
|
Unsafe Deserialization in concrete5/concrete5 (CVE-2026-7888)
vulnerability in concrete5/concrete5 (CVE-2026-7888). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.2` or later.
|
| CVE-2026-42839 |
|
Cross-Site Scripting (XSS) in CVE-2026-42839 (CVE-2026-42839)
cross-site scripting in CVE-2026-42839 (CVE-2026-42839). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42840 |
|
Cross-Site Scripting (XSS) in CVE-2026-42840 (CVE-2026-42840)
cross-site scripting in CVE-2026-42840 (CVE-2026-42840). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26378 |
|
Cross-Site Scripting (XSS) in koha (CVE-2026-26378)
cross-site scripting in koha (CVE-2026-26378). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26379 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-26379)
SSRF in ssrf (CVE-2026-26379). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46273 |
|
Vulnerability in linux (CVE-2026-46273)
vulnerability in linux (CVE-2026-46273). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46267 |
|
Use-After-Free in linux (CVE-2026-46267)
vulnerability in linux (CVE-2026-46267). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46270 |
|
Use-After-Free in linux (CVE-2026-46270)
vulnerability in linux (CVE-2026-46270). Successful exploitation can lead to full system takeover. Exploitable via ``devm_``.
|
| CVE-2026-46269 |
|
Vulnerability in linux (CVE-2026-46269)
vulnerability in linux (CVE-2026-46269). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46272 |
|
Vulnerability in c (CVE-2026-46272)
vulnerability in c (CVE-2026-46272). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46260 |
|
Out-of-Bounds Read in c (CVE-2026-46260)
vulnerability in c (CVE-2026-46260). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46263 |
|
Out-of-Bounds Read in c (CVE-2026-46263)
vulnerability in c (CVE-2026-46263). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46246 |
|
Use-After-Free in linux (CVE-2026-46246)
vulnerability in linux (CVE-2026-46246). Successful exploitation can lead to full system takeover. Exploitable via ``devm_``.
|
| CVE-2026-46264 |
|
Use-After-Free in c (CVE-2026-46264)
vulnerability in c (CVE-2026-46264). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46258 |
|
Vulnerability in linux (CVE-2026-46258)
vulnerability in linux (CVE-2026-46258). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46245 |
|
Vulnerability in c (CVE-2026-46245)
vulnerability in c (CVE-2026-46245). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46261 |
|
Vulnerability in linux (CVE-2026-46261)
vulnerability in linux (CVE-2026-46261). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46252 |
|
Vulnerability in c (CVE-2026-46252)
vulnerability in c (CVE-2026-46252). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46262 |
|
Vulnerability in linux (CVE-2026-46262)
vulnerability in linux (CVE-2026-46262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46256 |
|
Vulnerability in linux (CVE-2026-46256)
vulnerability in linux (CVE-2026-46256). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46253 |
|
Out-of-Bounds Write in linux (CVE-2026-46253)
out-of-bounds write in linux (CVE-2026-46253). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46257 |
|
Vulnerability in linux (CVE-2026-46257)
vulnerability in linux (CVE-2026-46257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46244 |
|
Vulnerability in c (CVE-2026-46244)
vulnerability in c (CVE-2026-46244). Confidential information can be exposed externally.
|
| CVE-2026-36612 |
|
Vulnerability in CVE-2026-36612 (CVE-2026-36612)
vulnerability in CVE-2026-36612 (CVE-2026-36612). Confidential information can be exposed externally.
|