Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-59057 |
|
Cross-Site Scripting (XSS) in react (CVE-2025-59057)
cross-site scripting in react (CVE-2025-59057). Confidential information can be exposed externally.
|
| CVE-2026-21884 |
|
Cross-Site Scripting (XSS) in react (CVE-2026-21884)
cross-site scripting in react (CVE-2026-21884). Confidential information can be exposed externally.
|
| CVE-2025-13761 |
|
Cross-Site Scripting (XSS) in gitlab (CVE-2025-13761)
cross-site scripting in gitlab (CVE-2025-13761). Confidential information can be exposed externally. Mitigation: upgrade to `18.6.3, 18.7.1` or later.
|
| CVE-2025-70974 |
|
Vulnerability in CVE-2025-70974 (CVE-2025-70974)
vulnerability in CVE-2025-70974 (CVE-2025-70974). Successful exploitation can lead to full system takeover.
|
| CVE-2025-65518 |
|
Vulnerability in dos (CVE-2025-65518)
vulnerability in dos (CVE-2025-65518). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21441 |
|
Vulnerability in urllib3 (CVE-2026-21441)
vulnerability in urllib3 (CVE-2026-21441). Risk of unauthorized operations or information disclosure. Exploitable via ``gzip``. Mitigation: upgrade to `2.6.3` or later.
|
| CVE-2026-22188 |
|
Vulnerability in dos (CVE-2026-22188)
vulnerability in dos (CVE-2026-22188). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-12543 |
|
Vulnerability in redhat (CVE-2025-12543)
vulnerability in redhat (CVE-2025-12543). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2025-69223 |
|
Vulnerability in aiohttp (CVE-2025-69223)
vulnerability in aiohttp (CVE-2025-69223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.13.3` or later.
|
| CVE-2025-68428 |
|
Vulnerability in path-traversal (CVE-2025-68428)
vulnerability in path-traversal (CVE-2025-68428). Confidential information can be exposed externally. Exploitable via ``addImage``.
|
| CVE-2026-0621 |
|
Vulnerability in @modelcontextprotocol/sdk (CVE-2026-0621)
vulnerability in @modelcontextprotocol/sdk (CVE-2026-0621). Risk of unauthorized operations or information disclosure. Exploitable via ``UriTemplate``. Mitigation: upgrade to `1.25.2` or later.
|
| CVE-2025-63396 |
|
Vulnerability in pytorch (CVE-2025-63396)
vulnerability in pytorch (CVE-2025-63396). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1, 2.8.0` or later.
|
| CVE-2025-67269 |
|
Vulnerability in c (CVE-2025-67269)
vulnerability in c (CVE-2025-67269). Risk of unauthorized operations or information disclosure. Exploitable via ``ffa1d6f40bca0b035fc7f5e563160ebb67199da7``.
|
| CVE-2025-67268 |
|
Vulnerability in c (CVE-2025-67268)
vulnerability in c (CVE-2025-67268). Successful exploitation can lead to full system takeover.
|
| CVE-2025-11157 |
|
Unsafe Deserialization in feast (CVE-2025-11157)
vulnerability in feast (CVE-2025-11157). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.54.0` or later.
|
| CVE-2023-54262 |
|
Vulnerability in c (CVE-2023-54262)
vulnerability in c (CVE-2023-54262). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54257 |
|
Vulnerability in c (CVE-2023-54257)
vulnerability in c (CVE-2023-54257). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54286 |
|
Vulnerability in c (CVE-2023-54286)
vulnerability in c (CVE-2023-54286). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-54238 |
|
Vulnerability in c (CVE-2023-54238)
vulnerability in c (CVE-2023-54238). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54219 |
|
Vulnerability in c (CVE-2023-54219)
vulnerability in c (CVE-2023-54219). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-54243 |
|
Vulnerability in c (CVE-2023-54243)
vulnerability in c (CVE-2023-54243). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54202 |
|
Vulnerability in c (CVE-2023-54202)
vulnerability in c (CVE-2023-54202). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54206 |
|
Vulnerability in c (CVE-2023-54206)
vulnerability in c (CVE-2023-54206). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54182 |
|
Vulnerability in c (CVE-2023-54182)
vulnerability in c (CVE-2023-54182). Data can be tampered with by attackers.
|
| CVE-2023-54164 |
|
Vulnerability in c (CVE-2023-54164)
vulnerability in c (CVE-2023-54164). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54165 |
|
Vulnerability in c (CVE-2023-54165)
vulnerability in c (CVE-2023-54165). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54166 |
|
Vulnerability in c (CVE-2023-54166)
vulnerability in c (CVE-2023-54166). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71339 |
|
Code Injection in picklescan (CVE-2025-71339)
code injection in picklescan (CVE-2025-71339). Confidential information can be exposed externally. Exploitable via ``numpy.f2py.crackfortran._eval_length``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2023-54322 |
|
Vulnerability in c (CVE-2023-54322)
vulnerability in c (CVE-2023-54322). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-54271 |
|
Vulnerability in c (CVE-2023-54271)
vulnerability in c (CVE-2023-54271). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-54149 |
|
Vulnerability in c (CVE-2023-54149)
vulnerability in c (CVE-2023-54149). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54142 |
|
Vulnerability in c (CVE-2023-54142)
vulnerability in c (CVE-2023-54142). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54127 |
|
Vulnerability in c (CVE-2023-54127)
vulnerability in c (CVE-2023-54127). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54124 |
|
Vulnerability in c (CVE-2023-54124)
vulnerability in c (CVE-2023-54124). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54094 |
|
Vulnerability in c (CVE-2023-54094)
vulnerability in c (CVE-2023-54094). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54063 |
|
Vulnerability in c (CVE-2023-54063)
vulnerability in c (CVE-2023-54063). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54067 |
|
Vulnerability in c (CVE-2023-54067)
vulnerability in c (CVE-2023-54067). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54068 |
|
Vulnerability in c (CVE-2023-54068)
vulnerability in c (CVE-2023-54068). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54074 |
|
Vulnerability in c (CVE-2023-54074)
vulnerability in c (CVE-2023-54074). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54050 |
|
Vulnerability in c (CVE-2023-54050)
vulnerability in c (CVE-2023-54050). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50757 |
|
Vulnerability in c (CVE-2022-50757)
vulnerability in c (CVE-2022-50757). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50755 |
|
Vulnerability in c (CVE-2022-50755)
vulnerability in c (CVE-2022-50755). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50747 |
|
Vulnerability in c (CVE-2022-50747)
vulnerability in c (CVE-2022-50747). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50717 |
|
Vulnerability in c (CVE-2022-50717)
vulnerability in c (CVE-2022-50717). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54026 |
|
Vulnerability in c (CVE-2023-54026)
vulnerability in c (CVE-2023-54026). Successful exploitation can lead to full system takeover.
|
| CVE-2023-54004 |
|
Vulnerability in c (CVE-2023-54004)
vulnerability in c (CVE-2023-54004). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50700 |
|
Vulnerability in c (CVE-2022-50700)
vulnerability in c (CVE-2022-50700). Successful exploitation can lead to full system takeover.
|
| CVE-2023-53988 |
|
Vulnerability in c (CVE-2023-53988)
vulnerability in c (CVE-2023-53988). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50697 |
|
Vulnerability in c (CVE-2022-50697)
vulnerability in c (CVE-2022-50697). Successful exploitation can lead to full system takeover.
|
| CVE-2025-68369 |
|
Vulnerability in c (CVE-2025-68369)
vulnerability in c (CVE-2025-68369). Risk of unauthorized operations or information disclosure.
|