Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2025-52023 Vulnerability in aptsys (CVE-2025-52023)
vulnerability in aptsys (CVE-2025-52023). Risk of unauthorized operations or information disclosure.
CVE-2025-52022 Vulnerability in aptsys (CVE-2025-52022)
vulnerability in aptsys (CVE-2025-52022). Risk of unauthorized operations or information disclosure.
CVE-2025-71177 Cross-Site Scripting (XSS) in lavalite (CVE-2025-71177)
cross-site scripting in lavalite (CVE-2025-71177). Risk of unauthorized operations or information disclosure.
CVE-2026-22982 Vulnerability in c (CVE-2026-22982)
vulnerability in c (CVE-2026-22982). Risk of unauthorized operations or information disclosure.
CVE-2026-0994 Vulnerability in protobuf (CVE-2026-0994)
vulnerability in protobuf (CVE-2026-0994). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.29.6` or later.
CVE-2026-24049 Path Traversal in wheel (CVE-2026-24049)
path traversal in wheel (CVE-2026-24049). Data can be tampered with by attackers. Mitigation: upgrade to `0.46.2` or later.
CVE-2026-24001 Vulnerability in kpdecker (CVE-2026-24001)
vulnerability in kpdecker (CVE-2026-24001). Risk of unauthorized operations or information disclosure. Exploitable via ``parsePatch``.
CVE-2026-23960 Cross-Site Scripting (XSS) in argo-workflows (CVE-2026-23960)
cross-site scripting in argo-workflows (CVE-2026-23960). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.17, 3.7.8` or later.
CVE-2026-22807 Code Injection in vllm (CVE-2026-22807)
code injection in vllm (CVE-2026-22807). Successful exploitation can lead to full system takeover. Exploitable via ``auto_map``. Mitigation: upgrade to `0.14.0` or later.
CVE-2021-47817 Cross-Site Scripting (XSS) in open-emr (CVE-2021-47817)
cross-site scripting in open-emr (CVE-2021-47817). Risk of unauthorized operations or information disclosure.
CVE-2026-23956 Vulnerability in seroval (CVE-2026-23956)
vulnerability in seroval (CVE-2026-23956). Risk of unauthorized operations or information disclosure. Exploitable via ``Seroval``. Mitigation: upgrade to `1.4.1` or later.
CVE-2026-22977 Vulnerability in c (CVE-2026-22977)
vulnerability in c (CVE-2026-22977). Risk of unauthorized operations or information disclosure.
CVE-2026-22976 Vulnerability in c (CVE-2026-22976)
vulnerability in c (CVE-2026-22976). Risk of unauthorized operations or information disclosure.
CVE-2025-55130 Vulnerability in node-min (CVE-2025-55130)
vulnerability in node-min (CVE-2025-55130). Confidential information can be exposed externally. Mitigation: upgrade to `20.20.0, 22.22.0, 24.13.0, 25.3.0` or later.
CVE-2025-59465 Vulnerability in node (CVE-2025-59465)
vulnerability in node (CVE-2025-59465). Risk of unauthorized operations or information disclosure. Exploitable via ``HPACK``. Mitigation: upgrade to `20.20.0, 22.22.0, 24.13.0, 25.3.0` or later.
CVE-2025-55131 Vulnerability in node-min (CVE-2025-55131)
vulnerability in node-min (CVE-2025-55131). Confidential information can be exposed externally. Exploitable via ``Buffer.alloc``. Mitigation: upgrade to `20.20.0, 22.22.0, 24.13.0, 25.3.0` or later.
CVE-2025-56005 Unsafe Deserialization in dabeaz (CVE-2025-56005)
vulnerability in dabeaz (CVE-2025-56005). Successful exploitation can lead to full system takeover. Exploitable via ``picklefile``.
CVE-2026-23950 Vulnerability in isaacs (CVE-2026-23950)
vulnerability in isaacs (CVE-2026-23950). Data can be tampered with by attackers. Exploitable via ``PathReservations``.
CVE-2026-23745 Path Traversal in isaacs (CVE-2026-23745)
path traversal in isaacs (CVE-2026-23745). Confidential information can be exposed externally. Mitigation: upgrade to `7.5.3` or later.
CVE-2021-47839 Cross-Site Scripting (XSS) in CVE-2021-47839 (CVE-2021-47839)
cross-site scripting in CVE-2021-47839 (CVE-2021-47839). Risk of unauthorized operations or information disclosure.
CVE-2021-47836 Cross-Site Scripting (XSS) in CVE-2021-47836 (CVE-2021-47836)
cross-site scripting in CVE-2021-47836 (CVE-2021-47836). Risk of unauthorized operations or information disclosure.
CVE-2026-23490 Vulnerability in pyasn1 (CVE-2026-23490)
vulnerability in pyasn1 (CVE-2026-23490). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.2` or later.
CVE-2026-22774 Vulnerability in dos (CVE-2026-22774)
vulnerability in dos (CVE-2026-22774). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.6.2` or later.
CVE-2026-22775 Vulnerability in dos (CVE-2026-22775)
vulnerability in dos (CVE-2026-22775). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.6.2` or later.
CVE-2026-0897 Vulnerability in keras (CVE-2026-0897)
vulnerability in keras (CVE-2026-0897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.1` or later.
CVE-2025-71164 Cross-Site Scripting (XSS) in typesettercms (CVE-2025-71164)
cross-site scripting in typesettercms (CVE-2025-71164). Risk of unauthorized operations or information disclosure.
CVE-2025-71165 Cross-Site Scripting (XSS) in typesettercms (CVE-2025-71165)
cross-site scripting in typesettercms (CVE-2025-71165). Risk of unauthorized operations or information disclosure.
CVE-2025-71166 Cross-Site Scripting (XSS) in typesettercms (CVE-2025-71166)
cross-site scripting in typesettercms (CVE-2025-71166). Risk of unauthorized operations or information disclosure.
CVE-2026-22858 Out-of-Bounds Read in c (CVE-2026-22858)
vulnerability in c (CVE-2026-22858). Confidential information can be exposed externally. Mitigation: upgrade to `3.20.1` or later.
CVE-2025-71123 Vulnerability in c (CVE-2025-71123)
vulnerability in c (CVE-2025-71123). Successful exploitation can lead to full system takeover.
CVE-2025-71132 Vulnerability in c (CVE-2025-71132)
vulnerability in c (CVE-2025-71132). Risk of unauthorized operations or information disclosure.
CVE-2025-71128 Vulnerability in csharp (CVE-2025-71128)
vulnerability in csharp (CVE-2025-71128). Risk of unauthorized operations or information disclosure.
CVE-2025-71113 Vulnerability in c (CVE-2025-71113)
vulnerability in c (CVE-2025-71113). Risk of unauthorized operations or information disclosure.
CVE-2026-21267 OS Command Injection in c (CVE-2026-21267)
OS command injection in c (CVE-2026-21267). Successful exploitation can lead to full system takeover.
CVE-2025-68800 Vulnerability in c (CVE-2025-68800)
vulnerability in c (CVE-2025-68800). Successful exploitation can lead to full system takeover.
CVE-2025-68809 Vulnerability in c (CVE-2025-68809)
vulnerability in c (CVE-2025-68809). Data can be tampered with by attackers.
CVE-2025-71098 Vulnerability in c (CVE-2025-71098)
vulnerability in c (CVE-2025-71098). Risk of unauthorized operations or information disclosure.
CVE-2025-71100 Vulnerability in c (CVE-2025-71100)
vulnerability in c (CVE-2025-71100). Risk of unauthorized operations or information disclosure.
CVE-2025-71085 Vulnerability in c (CVE-2025-71085)
vulnerability in c (CVE-2025-71085). Risk of unauthorized operations or information disclosure. Exploitable via ``netlabelctl``.
CVE-2025-71088 Vulnerability in c (CVE-2025-71088)
vulnerability in c (CVE-2025-71088). Risk of unauthorized operations or information disclosure.
CVE-2025-71082 Vulnerability in c (CVE-2025-71082)
vulnerability in c (CVE-2025-71082). Successful exploitation can lead to full system takeover.
CVE-2025-68815 Vulnerability in c (CVE-2025-68815)
vulnerability in c (CVE-2025-68815). Successful exploitation can lead to full system takeover.
CVE-2025-68798 Vulnerability in c (CVE-2025-68798)
vulnerability in c (CVE-2025-68798). Risk of unauthorized operations or information disclosure.
CVE-2025-68787 Vulnerability in c (CVE-2025-68787)
vulnerability in c (CVE-2025-68787). Risk of unauthorized operations or information disclosure.
CVE-2025-68776 Vulnerability in c (CVE-2025-68776)
vulnerability in c (CVE-2025-68776). Risk of unauthorized operations or information disclosure.
CVE-2025-71066 Vulnerability in Kernel (CVE-2025-71066)
vulnerability in Kernel (CVE-2025-71066). Successful exploitation can lead to full system takeover. Exploitable via ``ets_qdisc_dequeue``. Mitigation: upgrade to `5.10.248, 5.15.198, 6.1.160, 6.6.120, 6.12.64, 6.18.3` or later.
CVE-2025-55462 Vulnerability in eramba (CVE-2025-55462)
vulnerability in eramba (CVE-2025-55462). Confidential information can be exposed externally.
CVE-2026-22200 Vulnerability in enhancesoft (CVE-2026-22200)
vulnerability in enhancesoft (CVE-2026-22200). Confidential information can be exposed externally.
CVE-2026-22610 Cross-Site Scripting (XSS) in @angular/compiler (CVE-2026-22610)
cross-site scripting in @angular/compiler (CVE-2026-22610). Risk of unauthorized operations or information disclosure. Exploitable via ``href``.
CVE-2026-22029 Cross-Site Scripting (XSS) in react (CVE-2026-22029)
cross-site scripting in react (CVE-2026-22029). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →