Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-72916 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-72916 (CVE-2026-72916)
SSRF in CVE-2026-72916 (CVE-2026-72916). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48059 |
|
Vulnerability in io.netty:netty-codec-haproxy (CVE-2026-48059)
vulnerability in io.netty:netty-codec-haproxy (CVE-2026-48059). Risk of unauthorized operations or information disclosure. Exploitable via ``PP2_TYPE_SSL``. Mitigation: upgrade to `4.1.135.Final` or later.
|
| CVE-2026-50131 |
|
SSRF (Server-Side Request Forgery) in @fedify/fedify (CVE-2026-50131)
SSRF in @fedify/fedify (CVE-2026-50131). Confidential information can be exposed externally. Mitigation: upgrade to `2.2.4` or later.
|
| CVE-2026-42579 |
|
Vulnerability in io.netty:netty-codec-dns (CVE-2026-42579)
vulnerability in io.netty:netty-codec-dns (CVE-2026-42579). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.codec.dns.DnsCodecUtil``. Mitigation: upgrade to `4.1.133.Final` or later.
|
| CVE-2026-6918 |
|
Out-of-Bounds Read in eclipse (CVE-2026-6918)
vulnerability in eclipse (CVE-2026-6918). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33218 |
|
Vulnerability in nats (CVE-2026-33218)
vulnerability in nats (CVE-2026-33218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.15, 2.12.6` or later.
|
| CVE-2026-27889 |
|
Vulnerability in nats (CVE-2026-27889)
vulnerability in nats (CVE-2026-27889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.14, 2.12.5` or later.
|
| CVE-2026-25679 |
|
Vulnerability in stdlib (CVE-2026-25679)
vulnerability in stdlib (CVE-2026-25679). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.25.8, 1.26.1` or later.
|
| CVE-2026-21527 |
|
Vulnerability in microsoft (CVE-2026-21527)
vulnerability in microsoft (CVE-2026-21527). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-27043 |
|
Vulnerability in libpython (CVE-2023-27043)
vulnerability in libpython (CVE-2023-27043). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.20, 3.10.15, 3.11.10, 3.12.6, 3.9.20` or later.
|