Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-77680 |
|
Vulnerability in c (CVE-2026-77680)
vulnerability in c (CVE-2026-77680). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55099 |
|
Vulnerability in icalendar (CVE-2026-55099)
vulnerability in icalendar (CVE-2026-55099). Risk of unauthorized operations or information disclosure. Exploitable via ``Component.__eq__``. Mitigation: upgrade to `7.1.3` or later.
|
| CVE-2026-75596 |
|
Vulnerability in CVE-2026-75596 (CVE-2026-75596)
vulnerability in CVE-2026-75596 (CVE-2026-75596). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66046 |
|
Vulnerability in c (CVE-2026-66046)
vulnerability in c (CVE-2026-66046). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54284 |
|
Vulnerability in sqlparse (CVE-2026-54284)
vulnerability in sqlparse (CVE-2026-54284). Risk of unauthorized operations or information disclosure. Exploitable via ``sqlparse``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-71491 |
|
Vulnerability in sqlparse (CVE-2026-71491)
vulnerability in sqlparse (CVE-2026-71491). Risk of unauthorized operations or information disclosure. Exploitable via ``group_comments``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-71848 |
|
Vulnerability in hono (CVE-2026-71848)
vulnerability in hono (CVE-2026-71848). Risk of unauthorized operations or information disclosure. Exploitable via ``languageDetector``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71488 |
|
Vulnerability in league/commonmark (CVE-2026-71488)
vulnerability in league/commonmark (CVE-2026-71488). Risk of unauthorized operations or information disclosure. Exploitable via ``CommonMarkConverter``. Mitigation: upgrade to `2.9.0` or later.
|
| CVE-2026-71321 |
|
Vulnerability in nuxt (CVE-2026-71321)
vulnerability in nuxt (CVE-2026-71321). Risk of unauthorized operations or information disclosure. Exploitable via `POST /__nuxt_island/`. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-58059 |
|
Vulnerability in CVE-2026-58059 (CVE-2026-58059)
vulnerability in CVE-2026-58059 (CVE-2026-58059). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55968 |
|
Vulnerability in apache (CVE-2026-55968)
vulnerability in apache (CVE-2026-55968). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73413 |
|
Vulnerability in shescape (CVE-2026-73413)
vulnerability in shescape (CVE-2026-73413). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.1` or later.
|
| CVE-2026-73643 |
|
Vulnerability in js-yaml (CVE-2026-73643)
vulnerability in js-yaml (CVE-2026-73643). Risk of unauthorized operations or information disclosure. Exploitable via ``maxDepth``. Mitigation: upgrade to `5.2.2` or later.
|
| CVE-2026-64644 |
|
Vulnerability in next (CVE-2026-64644)
vulnerability in next (CVE-2026-64644). Risk of unauthorized operations or information disclosure. Exploitable via ``config.images.remotePatterns``. Mitigation: upgrade to `16.2.11` or later.
|
| CVE-2026-59885 |
|
Vulnerability in pyasn1 (CVE-2026-59885)
vulnerability in pyasn1 (CVE-2026-59885). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.4` or later.
|
| CVE-2026-57480 |
|
Vulnerability in CVE-2026-57480 (CVE-2026-57480)
vulnerability in CVE-2026-57480 (CVE-2026-57480). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59928 |
|
Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59925 |
|
Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59922 |
|
Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59880 |
|
Vulnerability in immutable (CVE-2026-59880)
vulnerability in immutable (CVE-2026-59880). Risk of unauthorized operations or information disclosure. Exploitable via ``Immutable.Map``. Mitigation: upgrade to `5.1.8` or later.
|
| CVE-2026-59870 |
|
Vulnerability in js-yaml (CVE-2026-59870)
vulnerability in js-yaml (CVE-2026-59870). Risk of unauthorized operations or information disclosure. Exploitable via ``YAML11_SCHEMA``. Mitigation: upgrade to `5.2.1` or later.
|
| CVE-2026-59869 |
|
Vulnerability in js-yaml (CVE-2026-59869)
vulnerability in js-yaml (CVE-2026-59869). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0` or later.
|
| CVE-2026-59868 |
|
Vulnerability in js-yaml (CVE-2026-59868)
vulnerability in js-yaml (CVE-2026-59868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.0` or later.
|
| CVE-2026-13311 |
|
Vulnerability in shell-quote (CVE-2026-13311)
vulnerability in shell-quote (CVE-2026-13311). Risk of unauthorized operations or information disclosure. Exploitable via `GET /ping`. Mitigation: upgrade to `1.9.0` or later.
|
| CVE-2026-49851 |
|
Vulnerability in mistune (CVE-2026-49851)
vulnerability in mistune (CVE-2026-49851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-48516 |
|
Vulnerability in MessagePack (CVE-2026-48516)
vulnerability in MessagePack (CVE-2026-48516). Risk of unauthorized operations or information disclosure. Exploitable via ``MessagePackSecurity.UntrustedData``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48511 |
|
Vulnerability in MessagePack (CVE-2026-48511)
vulnerability in MessagePack (CVE-2026-48511). Risk of unauthorized operations or information disclosure. Exploitable via ``ExpandoObjectFormatter.Deserialize``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48502 |
|
Vulnerability in MessagePack (CVE-2026-48502)
vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-55206 |
|
Vulnerability in py7zr (CVE-2026-55206)
vulnerability in py7zr (CVE-2026-55206). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.3` or later.
|
| CVE-2026-49293 |
|
Vulnerability in js-toml (CVE-2026-49293)
vulnerability in js-toml (CVE-2026-49293). Risk of unauthorized operations or information disclosure. Exploitable via ``parseBigInt``. Mitigation: upgrade to `1.1.1` or later.
|
| CVE-2026-49460 |
|
Vulnerability in pypdf (CVE-2026-49460)
vulnerability in pypdf (CVE-2026-49460). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.2` or later.
|
| CVE-2026-53539 |
|
Vulnerability in python-multipart (CVE-2026-53539)
vulnerability in python-multipart (CVE-2026-53539). Risk of unauthorized operations or information disclosure. Exploitable via ``QuerystringParser``. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2026-53550 |
|
Vulnerability in js-yaml (CVE-2026-53550)
vulnerability in js-yaml (CVE-2026-53550). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.15.0` or later.
|
| CVE-2026-44378 |
|
Vulnerability in c (CVE-2026-44378)
vulnerability in c (CVE-2026-44378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.12.0` or later.
|
| CVE-2026-48959 |
|
Vulnerability in c (CVE-2026-48959)
vulnerability in c (CVE-2026-48959). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42304 |
|
Vulnerability in Twisted (CVE-2026-42304)
vulnerability in Twisted (CVE-2026-42304). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.4.0rc2` or later.
|
| CVE-2026-42245 |
|
Vulnerability in net-imap (CVE-2026-42245)
vulnerability in net-imap (CVE-2026-42245). Risk of unauthorized operations or information disclosure. Exploitable via ``ResponseReader``. Mitigation: upgrade to `0.4.24` or later.
|
| CVE-2026-34230 |
|
Vulnerability in rack (CVE-2026-34230)
vulnerability in rack (CVE-2026-34230). Risk of unauthorized operations or information disclosure. Exploitable via ``expanded_accept_encoding``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34827 |
|
Vulnerability in rack (CVE-2026-34827)
vulnerability in rack (CVE-2026-34827). Risk of unauthorized operations or information disclosure. Exploitable via ``name``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34573 |
|
Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-23684 |
|
Vulnerability in dos (CVE-2024-23684)
vulnerability in dos (CVE-2024-23684). Risk of unauthorized operations or information disclosure.
|