Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64394 |
|
Vulnerability in c (CVE-2026-64394)
vulnerability in c (CVE-2026-64394). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64378 |
|
Vulnerability in c (CVE-2026-64378)
vulnerability in c (CVE-2026-64378). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64359 |
|
Vulnerability in c (CVE-2026-64359)
vulnerability in c (CVE-2026-64359). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64349 |
|
Vulnerability in c (CVE-2026-64349)
vulnerability in c (CVE-2026-64349). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64352 |
|
Vulnerability in c (CVE-2026-64352)
vulnerability in c (CVE-2026-64352). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64320 |
|
Vulnerability in c (CVE-2026-64320)
vulnerability in c (CVE-2026-64320). Confidential information can be exposed externally.
|
| CVE-2026-64311 |
|
Vulnerability in c (CVE-2026-64311)
vulnerability in c (CVE-2026-64311). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64313 |
|
Vulnerability in c (CVE-2026-64313)
vulnerability in c (CVE-2026-64313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64304 |
|
Vulnerability in c (CVE-2026-64304)
vulnerability in c (CVE-2026-64304). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64285 |
|
Vulnerability in c (CVE-2026-64285)
vulnerability in c (CVE-2026-64285). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64268 |
|
Out-of-Bounds Write in c (CVE-2026-64268)
out-of-bounds write in c (CVE-2026-64268). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64272 |
|
Vulnerability in c (CVE-2026-64272)
vulnerability in c (CVE-2026-64272). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73568 |
|
Vulnerability in libp2p (CVE-2026-73568)
vulnerability in libp2p (CVE-2026-73568). Risk of unauthorized operations or information disclosure. Exploitable via ``length``.
|
| CVE-2026-73647 |
|
Vulnerability in quasar (CVE-2026-73647)
vulnerability in quasar (CVE-2026-73647). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.22.0` or later.
|
| CVE-2026-73413 |
|
Vulnerability in shescape (CVE-2026-73413)
vulnerability in shescape (CVE-2026-73413). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.1` or later.
|
| CVE-2026-73411 |
|
Vulnerability in shescape (CVE-2026-73411)
vulnerability in shescape (CVE-2026-73411). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.
|
| CVE-2026-73414 |
|
OS Command Injection in shescape (CVE-2026-73414)
OS command injection in shescape (CVE-2026-73414). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.
|
| CVE-2026-73412 |
|
OS Command Injection in shescape (CVE-2026-73412)
OS command injection in shescape (CVE-2026-73412). Risk of unauthorized operations or information disclosure. Exploitable via ``shell``. Mitigation: upgrade to `3.0.1` or later.
|
| CVE-2025-71408 |
|
Vulnerability in nltk (CVE-2025-71408)
vulnerability in nltk (CVE-2025-71408). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.3` or later.
|
| CVE-2026-73567 |
|
Vulnerability in sm-crypto (CVE-2026-73567)
vulnerability in sm-crypto (CVE-2026-73567). Confidential information can be exposed externally. Exploitable via ``SecureRandom``. Mitigation: upgrade to `0.5.0` or later.
|
| CVE-2026-73561 |
|
Vulnerability in @anephenix/hub (CVE-2026-73561)
vulnerability in @anephenix/hub (CVE-2026-73561). Risk of unauthorized operations or information disclosure. Exploitable via ``setInterval``. Mitigation: upgrade to `0.2.16` or later.
|
| CVE-2026-73644 |
|
Vulnerability in org.openidentityplatform.opendj:opendj-server-legacy (CVE-2026-73644)
vulnerability in org.openidentityplatform.opendj:opendj-server-legacy (CVE-2026-73644). Confidential information can be exposed externally. Mitigation: upgrade to `5.1.2` or later.
|
| CVE-2026-66037 |
|
Vulnerability in c (CVE-2026-66037)
vulnerability in c (CVE-2026-66037). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66038 |
|
Vulnerability in c (CVE-2026-66038)
vulnerability in c (CVE-2026-66038). Confidential information can be exposed externally.
|
| CVE-2026-57531 |
|
Cross-Site Scripting (XSS) in CVE-2026-57531 (CVE-2026-57531)
cross-site scripting in CVE-2026-57531 (CVE-2026-57531). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57530 |
|
Cross-Site Scripting (XSS) in CVE-2026-57530 (CVE-2026-57530)
cross-site scripting in CVE-2026-57530 (CVE-2026-57530). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66032 |
|
Vulnerability in c (CVE-2026-66032)
vulnerability in c (CVE-2026-66032). Successful exploitation can lead to full system takeover.
|
| CVE-2026-66033 |
|
Out-of-Bounds Read in c (CVE-2026-66033)
vulnerability in c (CVE-2026-66033). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66035 |
|
Vulnerability in c (CVE-2026-66035)
vulnerability in c (CVE-2026-66035). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65707 |
|
SQL Injection in sqli (CVE-2026-65707)
SQL injection in sqli (CVE-2026-65707). Confidential information can be exposed externally.
|
| CVE-2026-73643 |
|
Vulnerability in js-yaml (CVE-2026-73643)
vulnerability in js-yaml (CVE-2026-73643). Risk of unauthorized operations or information disclosure. Exploitable via ``maxDepth``. Mitigation: upgrade to `5.2.2` or later.
|
| CVE-2026-73429 |
|
Vulnerability in russh (CVE-2026-73429)
vulnerability in russh (CVE-2026-73429). Risk of unauthorized operations or information disclosure. Exploitable via ``russh``. Mitigation: upgrade to `0.62.4` or later.
|
| CVE-2026-73489 |
|
Vulnerability in russh (CVE-2026-73489)
vulnerability in russh (CVE-2026-73489). Risk of unauthorized operations or information disclosure. Exploitable via ``russh``. Mitigation: upgrade to `0.61.0` or later.
|
| CVE-2026-73430 |
|
Vulnerability in russh (CVE-2026-73430)
vulnerability in russh (CVE-2026-73430). Risk of unauthorized operations or information disclosure. Exploitable via ``russh``. Mitigation: upgrade to `0.62.4` or later.
|
| CVE-2026-73646 |
|
Path Traversal in postcss (CVE-2026-73646)
path traversal in postcss (CVE-2026-73646). Confidential information can be exposed externally. Exploitable via ``loadFile``. Mitigation: upgrade to `8.5.18` or later.
|
| CVE-2026-73649 |
|
Code Injection in velocityjs (CVE-2026-73649)
code injection in velocityjs (CVE-2026-73649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.7` or later.
|
| CVE-2026-61632 |
|
Path Traversal in pymdown-extensions (CVE-2026-61632)
path traversal in pymdown-extensions (CVE-2026-61632). Risk of unauthorized operations or information disclosure. Exploitable via ``b64``. Mitigation: upgrade to `11.0.0` or later.
|
| CVE-2026-73428 |
|
Cross-Site Scripting (XSS) in trix (CVE-2026-73428)
cross-site scripting in trix (CVE-2026-73428). Risk of unauthorized operations or information disclosure. Exploitable via ``HTMLParser``. Mitigation: upgrade to `2.1.18` or later.
|
| CVE-2026-64254 |
|
Vulnerability in c (CVE-2026-64254)
vulnerability in c (CVE-2026-64254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64248 |
|
Vulnerability in c (CVE-2026-64248)
vulnerability in c (CVE-2026-64248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64250 |
|
Vulnerability in c (CVE-2026-64250)
vulnerability in c (CVE-2026-64250). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64232 |
|
Vulnerability in c (CVE-2026-64232)
vulnerability in c (CVE-2026-64232). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64233 |
|
Vulnerability in c (CVE-2026-64233)
vulnerability in c (CVE-2026-64233). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64210 |
|
Vulnerability in c (CVE-2026-64210)
vulnerability in c (CVE-2026-64210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59940 |
|
Unsafe Deserialization in seroval (CVE-2026-59940)
vulnerability in seroval (CVE-2026-59940). Successful exploitation can lead to full system takeover. Exploitable via ``seroval``. Mitigation: upgrade to `1.5.3` or later.
|
| CVE-2026-59949 |
|
Vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949)
vulnerability in at.yawk.lz4:lz4-java (CVE-2026-59949). Risk of unauthorized operations or information disclosure. Exploitable via ``off``. Mitigation: upgrade to `1.11.1` or later.
|
| CVE-2026-55730 |
|
Cross-Site Scripting (XSS) in CVE-2026-55730 (CVE-2026-55730)
cross-site scripting in CVE-2026-55730 (CVE-2026-55730). Risk of unauthorized operations or information disclosure. Exploitable via ``project``.
|
| CVE-2026-12496 |
|
Cross-Site Scripting (XSS) in CVE-2026-12496 (CVE-2026-12496)
cross-site scripting in CVE-2026-12496 (CVE-2026-12496). Risk of unauthorized operations or information disclosure. Exploitable via `POST /da`.
|
| CVE-2026-45813 |
|
Vulnerability in c (CVE-2026-45813)
vulnerability in c (CVE-2026-45813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7007 |
|
Vulnerability in c (CVE-2026-7007)
vulnerability in c (CVE-2026-7007). Risk of unauthorized operations or information disclosure.
|