Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-19012 |
|
Vulnerability in dos (CVE-2026-19012)
vulnerability in dos (CVE-2026-19012). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19016 |
|
Path Traversal in CVE-2026-19016 (CVE-2026-19016)
path traversal in CVE-2026-19016 (CVE-2026-19016). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19014 |
|
Vulnerability in CVE-2026-19014 (CVE-2026-19014)
vulnerability in CVE-2026-19014 (CVE-2026-19014). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15970 |
|
Vulnerability in CVE-2026-15970 (CVE-2026-15970)
vulnerability in CVE-2026-15970 (CVE-2026-15970). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15972 |
|
Vulnerability in dos (CVE-2026-15972)
vulnerability in dos (CVE-2026-15972). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19113 |
|
Vulnerability in dos (CVE-2026-19113)
vulnerability in dos (CVE-2026-19113). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19015 |
|
Vulnerability in CVE-2026-19015 (CVE-2026-19015)
vulnerability in CVE-2026-19015 (CVE-2026-19015). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66061 |
|
Vulnerability in CVE-2026-66061 (CVE-2026-66061)
vulnerability in CVE-2026-66061 (CVE-2026-66061). Data can be tampered with by attackers.
|
| CVE-2026-66060 |
|
Vulnerability in CVE-2026-66060 (CVE-2026-66060)
vulnerability in CVE-2026-66060 (CVE-2026-66060). Data can be tampered with by attackers.
|
| CVE-2026-59717 |
|
Open Redirect in CVE-2026-59717 (CVE-2026-59717)
vulnerability in CVE-2026-59717 (CVE-2026-59717). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54338 |
|
Vulnerability in jupyterhub (CVE-2026-54338)
vulnerability in jupyterhub (CVE-2026-54338). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5.0` or later.
|
| CVE-2026-50540 |
|
Vulnerability in CVE-2026-50540 (CVE-2026-50540)
vulnerability in CVE-2026-50540 (CVE-2026-50540). Confidential information can be exposed externally.
|
| CVE-2026-47664 |
|
Vulnerability in CVE-2026-47664 (CVE-2026-47664)
vulnerability in CVE-2026-47664 (CVE-2026-47664). Risk of unauthorized operations or information disclosure. Exploitable via ``exportUrl``.
|
| CVE-2026-47663 |
|
Vulnerability in CVE-2026-47663 (CVE-2026-47663)
vulnerability in CVE-2026-47663 (CVE-2026-47663). Risk of unauthorized operations or information disclosure. Exploitable via ``read``.
|
| CVE-2026-47662 |
|
Vulnerability in CVE-2026-47662 (CVE-2026-47662)
vulnerability in CVE-2026-47662 (CVE-2026-47662). Risk of unauthorized operations or information disclosure. Exploitable via ``read``.
|
| CVE-2026-65819 |
|
Out-of-Bounds Read in CVE-2026-65819 (CVE-2026-65819)
vulnerability in CVE-2026-65819 (CVE-2026-65819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62296 |
|
Vulnerability in CVE-2026-62296 (CVE-2026-62296)
vulnerability in CVE-2026-62296 (CVE-2026-62296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62295 |
|
Vulnerability in CVE-2026-62295 (CVE-2026-62295)
vulnerability in CVE-2026-62295 (CVE-2026-62295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62293 |
|
Vulnerability in CVE-2026-62293 (CVE-2026-62293)
vulnerability in CVE-2026-62293 (CVE-2026-62293). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61808 |
|
Vulnerability in CVE-2026-61808 (CVE-2026-61808)
vulnerability in CVE-2026-61808 (CVE-2026-61808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47661 |
|
Path Traversal in path-traversal (CVE-2026-47661)
path traversal in path-traversal (CVE-2026-47661). Risk of unauthorized operations or information disclosure. Exploitable via ``file``.
|
| CVE-2026-47660 |
|
Vulnerability in CVE-2026-47660 (CVE-2026-47660)
vulnerability in CVE-2026-47660 (CVE-2026-47660). Risk of unauthorized operations or information disclosure. Exploitable via ``oauthMetadataUrl``.
|
| CVE-2026-47659 |
|
Path Traversal in path-traversal (CVE-2026-47659)
path traversal in path-traversal (CVE-2026-47659). Risk of unauthorized operations or information disclosure. Exploitable via ``file``.
|
| CVE-2025-71409 |
|
Vulnerability in cisa (CVE-2025-71409)
vulnerability in cisa (CVE-2025-71409). Data can be tampered with by attackers.
|
| CVE-2026-71870 |
|
Vulnerability in pypdf (CVE-2026-71870)
vulnerability in pypdf (CVE-2026-71870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
|
| CVE-2026-70561 |
|
Vulnerability in CVE-2026-70561 (CVE-2026-70561)
vulnerability in CVE-2026-70561 (CVE-2026-70561). Confidential information can be exposed externally.
|
| CVE-2026-69127 |
|
Vulnerability in CVE-2026-69127 (CVE-2026-69127)
vulnerability in CVE-2026-69127 (CVE-2026-69127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66000 |
|
Authorization Flaw in CVE-2026-66000 (CVE-2026-66000)
vulnerability in CVE-2026-66000 (CVE-2026-66000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48098 |
|
OS Command Injection in CVE-2026-48098 (CVE-2026-48098)
OS command injection in CVE-2026-48098 (CVE-2026-48098). Confidential information can be exposed externally. Exploitable via ``sudo``.
|
| CVE-2026-48097 |
|
OS Command Injection in CVE-2026-48097 (CVE-2026-48097)
OS command injection in CVE-2026-48097 (CVE-2026-48097). Successful exploitation can lead to full system takeover. Exploitable via ``PATH``.
|
| CVE-2026-19231 |
|
Vulnerability in sqli (CVE-2026-19231)
vulnerability in sqli (CVE-2026-19231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19230 |
|
Cross-Site Scripting (XSS) in CVE-2026-19230 (CVE-2026-19230)
cross-site scripting in CVE-2026-19230 (CVE-2026-19230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17435 |
|
Vulnerability in CVE-2026-17435 (CVE-2026-17435)
vulnerability in CVE-2026-17435 (CVE-2026-17435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11430 |
|
Vulnerability in CVE-2026-11430 (CVE-2026-11430)
vulnerability in CVE-2026-11430 (CVE-2026-11430). Risk of unauthorized operations or information disclosure. Exploitable via `POST /scheduler/webhook`.
|
| CVE-2025-71413 |
|
Vulnerability in CVE-2025-71413 (CVE-2025-71413)
vulnerability in CVE-2025-71413 (CVE-2025-71413). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71412 |
|
Vulnerability in CVE-2025-71412 (CVE-2025-71412)
vulnerability in CVE-2025-71412 (CVE-2025-71412). Data can be tampered with by attackers.
|
| CVE-2025-71411 |
|
Vulnerability in CVE-2025-71411 (CVE-2025-71411)
vulnerability in CVE-2025-71411 (CVE-2025-71411). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71410 |
|
Vulnerability in CVE-2025-71410 (CVE-2025-71410)
vulnerability in CVE-2025-71410 (CVE-2025-71410). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-63235 |
|
Vulnerability in dos (CVE-2025-63235)
vulnerability in dos (CVE-2025-63235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71852 |
|
Vulnerability in pypdf (CVE-2026-71852)
vulnerability in pypdf (CVE-2026-71852). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
|
| CVE-2026-71851 |
|
Vulnerability in crypto-js (CVE-2026-71851)
vulnerability in crypto-js (CVE-2026-71851). Successful exploitation can lead to full system takeover. Exploitable via ``crypto``. Mitigation: upgrade to `4.0.0` or later.
|
| CVE-2026-71850 |
|
Vulnerability in hono (CVE-2026-71850)
vulnerability in hono (CVE-2026-71850). Confidential information can be exposed externally. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71849 |
|
Information Disclosure in hono (CVE-2026-71849)
vulnerability in hono (CVE-2026-71849). Risk of unauthorized operations or information disclosure. Exploitable via ``Connection``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71848 |
|
Vulnerability in hono (CVE-2026-71848)
vulnerability in hono (CVE-2026-71848). Risk of unauthorized operations or information disclosure. Exploitable via ``languageDetector``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71847 |
|
Use-After-Free in json (CVE-2026-71847)
vulnerability in json (CVE-2026-71847). Risk of unauthorized operations or information disclosure. Exploitable via ``state.start``. Mitigation: upgrade to `2.21.2` or later.
|
| CVE-2026-64637 |
|
Privilege Escalation in CVE-2026-64637 (CVE-2026-64637)
vulnerability in CVE-2026-64637 (CVE-2026-64637). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64636 |
|
SQL Injection in sqli (CVE-2026-64636)
SQL injection in sqli (CVE-2026-64636). Confidential information can be exposed externally.
|
| CVE-2026-47364 |
|
Information Disclosure in CVE-2026-47364 (CVE-2026-47364)
vulnerability in CVE-2026-47364 (CVE-2026-47364). Confidential information can be exposed externally.
|
| CVE-2026-47362 |
|
Vulnerability in CVE-2026-47362 (CVE-2026-47362)
vulnerability in CVE-2026-47362 (CVE-2026-47362). Confidential information can be exposed externally.
|
| CVE-2026-44965 |
|
Vulnerability in CVE-2026-44965 (CVE-2026-44965)
vulnerability in CVE-2026-44965 (CVE-2026-44965). Risk of unauthorized operations or information disclosure.
|