Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-66063 Path Traversal in goshs.de/goshs/v2 (CVE-2026-66063)
path traversal in goshs.de/goshs/v2 (CVE-2026-66063). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5-0.20260727065949-f3ef599e4091` or later.
CVE-2026-64863 Vulnerability in goshs.de/goshs/v2 (CVE-2026-64863)
vulnerability in goshs.de/goshs/v2 (CVE-2026-64863). Data can be tampered with by attackers. Exploitable via ``MOVE``. Mitigation: upgrade to `2.1.4` or later.
CVE-2026-54719 Vulnerability in github.com/patrickhener/goshs (CVE-2026-54719)
vulnerability in github.com/patrickhener/goshs (CVE-2026-54719). Confidential information can be exposed externally. Exploitable via `GET /protected/secret.txt`. Mitigation: upgrade to `2.1.1` or later.
CVE-2026-62325 Vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-62325)
vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-62325). Confidential information can be exposed externally. Exploitable via ``PasswordHandler``. Mitigation: upgrade to `2.1.4` or later.
CVE-2026-54654 Code Injection in datamodel-code-generator (CVE-2026-54654)
code injection in datamodel-code-generator (CVE-2026-54654). Successful exploitation can lead to full system takeover. Exploitable via ``comment``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-55389 Path Traversal in datamodel-code-generator (CVE-2026-55389)
path traversal in datamodel-code-generator (CVE-2026-55389). Confidential information can be exposed externally. Exploitable via ``_get_ref_body``. Mitigation: upgrade to `0.62.0` or later.
CVE-2026-54653 Code Injection in datamodel-code-generator (CVE-2026-54653)
code injection in datamodel-code-generator (CVE-2026-54653). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-55391 Vulnerability in datamodel-code-generator (CVE-2026-55391)
vulnerability in datamodel-code-generator (CVE-2026-55391). Confidential information can be exposed externally. Exploitable via ``httpx``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-54656 Code Injection in datamodel-code-generator (CVE-2026-54656)
code injection in datamodel-code-generator (CVE-2026-54656). Successful exploitation can lead to full system takeover. Exploitable via ``validators``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-54690 SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54690)
SSRF in datamodel-code-generator (CVE-2026-54690). Confidential information can be exposed externally. Exploitable via ``None``. Mitigation: upgrade to `0.61.0` or later.
CVE-2026-55415 Code Injection in datamodel-code-generator (CVE-2026-55415)
code injection in datamodel-code-generator (CVE-2026-55415). Successful exploitation can lead to full system takeover. Exploitable via ``customTypePath``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-54621 Code Injection in datamodel-code-generator (CVE-2026-54621)
code injection in datamodel-code-generator (CVE-2026-54621). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.1` or later.
CVE-2026-54655 Code Injection in datamodel-code-generator (CVE-2026-54655)
code injection in datamodel-code-generator (CVE-2026-54655). Successful exploitation can lead to full system takeover. Exploitable via ``_get_python_type_override``. Mitigation: upgrade to `0.60.2` or later.
CVE-2026-55403 Information Disclosure in datamodel-code-generator (CVE-2026-55403)
vulnerability in datamodel-code-generator (CVE-2026-55403). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `0.63.0` or later.
CVE-2026-6881 SQL Injection in sqli (CVE-2026-6881)
SQL injection in sqli (CVE-2026-6881). Risk of unauthorized operations or information disclosure.
CVE-2026-15057 Out-of-Bounds Write in dos (CVE-2026-15057)
out-of-bounds write in dos (CVE-2026-15057). Risk of unauthorized operations or information disclosure.
CVE-2026-15280 Path Traversal in ibm (CVE-2026-15280)
path traversal in ibm (CVE-2026-15280). Confidential information can be exposed externally.
CVE-2026-14996 Vulnerability in ibm (CVE-2026-14996)
vulnerability in ibm (CVE-2026-14996). Confidential information can be exposed externally.
CVE-2026-15325 Vulnerability in ibm (CVE-2026-15325)
vulnerability in ibm (CVE-2026-15325). Confidential information can be exposed externally.
CVE-2026-15064 Vulnerability in ibm (CVE-2026-15064)
vulnerability in ibm (CVE-2026-15064). Confidential information can be exposed externally.
CVE-2026-14981 Vulnerability in dos (CVE-2026-14981)
vulnerability in dos (CVE-2026-14981). Risk of unauthorized operations or information disclosure.
CVE-2026-15328 Vulnerability in ibm (CVE-2026-15328)
vulnerability in ibm (CVE-2026-15328). Confidential information can be exposed externally.
CVE-2026-14959 OS Command Injection in ibm (CVE-2026-14959)
OS command injection in ibm (CVE-2026-14959). Successful exploitation can lead to full system takeover.
CVE-2026-14974 Unsafe Deserialization in deserialization (CVE-2026-14974)
vulnerability in deserialization (CVE-2026-14974). Successful exploitation can lead to full system takeover.
CVE-2026-14958 OS Command Injection in ibm (CVE-2026-14958)
OS command injection in ibm (CVE-2026-14958). Successful exploitation can lead to full system takeover.
CVE-2026-14976 Vulnerability in ibm (CVE-2026-14976)
vulnerability in ibm (CVE-2026-14976). Successful exploitation can lead to full system takeover.
CVE-2026-14973 Path Traversal in ibm (CVE-2026-14973)
path traversal in ibm (CVE-2026-14973). Confidential information can be exposed externally.
CVE-2026-14893 Vulnerability in CVE-2026-14893 (CVE-2026-14893)
vulnerability in CVE-2026-14893 (CVE-2026-14893). Data can be tampered with by attackers.
CVE-2026-14528 Vulnerability in ibm (CVE-2026-14528)
vulnerability in ibm (CVE-2026-14528). Confidential information can be exposed externally.
CVE-2026-14515 Cross-Site Scripting (XSS) in ibm (CVE-2026-14515)
cross-site scripting in ibm (CVE-2026-14515). Risk of unauthorized operations or information disclosure.
CVE-2026-13463 Vulnerability in ibm (CVE-2026-13463)
vulnerability in ibm (CVE-2026-13463). Confidential information can be exposed externally.
CVE-2026-14512 Unsafe Deserialization in c (CVE-2026-14512)
vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.
CVE-2026-13442 Vulnerability in langflow (CVE-2026-13442)
vulnerability in langflow (CVE-2026-13442). Confidential information can be exposed externally.
CVE-2026-14446 Vulnerability in privilege-escalation (CVE-2026-14446)
vulnerability in privilege-escalation (CVE-2026-14446). Successful exploitation can lead to full system takeover.
CVE-2026-54691 SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54691)
SSRF in datamodel-code-generator (CVE-2026-54691). Confidential information can be exposed externally. Exploitable via ``http.get_body``. Mitigation: upgrade to `0.61.0` or later.
CVE-2026-55390 Path Traversal in datamodel-code-generator (CVE-2026-55390)
path traversal in datamodel-code-generator (CVE-2026-55390). Confidential information can be exposed externally. Exploitable via ``schemaLocation``. Mitigation: upgrade to `0.62.0` or later.
CVE-2026-49446 Vulnerability in github.com/azukaar/cosmos-server (CVE-2026-49446)
vulnerability in github.com/azukaar/cosmos-server (CVE-2026-49446). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenMiddleware``. Mitigation: upgrade to `0.22.19` or later.
CVE-2026-49447 Authentication Bypass in github.com/azukaar/cosmos-server (CVE-2026-49447)
authentication bypass in github.com/azukaar/cosmos-server (CVE-2026-49447). Risk of unauthorized operations or information disclosure. Exploitable via `GET /cosmos/api/constellation/public-devices`. Mitigation: upgrade to `0.22.19` or later.
CVE-2026-57511 Vulnerability in CVE-2026-57511 (CVE-2026-57511)
vulnerability in CVE-2026-57511 (CVE-2026-57511). Risk of unauthorized operations or information disclosure.
CVE-2026-57510 Vulnerability in CVE-2026-57510 (CVE-2026-57510)
vulnerability in CVE-2026-57510 (CVE-2026-57510). Successful exploitation can lead to full system takeover.
CVE-2026-3158 Vulnerability in ibm (CVE-2026-3158)
vulnerability in ibm (CVE-2026-3158). Risk of unauthorized operations or information disclosure.
CVE-2026-3157 Vulnerability in ibm (CVE-2026-3157)
vulnerability in ibm (CVE-2026-3157). Risk of unauthorized operations or information disclosure.
CVE-2026-1918 Vulnerability in ibm (CVE-2026-1918)
vulnerability in ibm (CVE-2026-1918). Confidential information can be exposed externally.
CVE-2026-16192 Vulnerability in dos (CVE-2026-16192)
vulnerability in dos (CVE-2026-16192). Risk of unauthorized operations or information disclosure.
CVE-2026-16184 Vulnerability in ibm (CVE-2026-16184)
vulnerability in ibm (CVE-2026-16184). Risk of unauthorized operations or information disclosure.
CVE-2026-16107 Vulnerability in CVE-2026-16107 (CVE-2026-16107)
vulnerability in CVE-2026-16107 (CVE-2026-16107). Confidential information can be exposed externally.
CVE-2026-11391 Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
CVE-2026-7769 SQL Injection in sqli (CVE-2026-7769)
SQL injection in sqli (CVE-2026-7769). Confidential information can be exposed externally.
CVE-2026-7362 Vulnerability in ibm (CVE-2026-7362)
vulnerability in ibm (CVE-2026-7362). Risk of unauthorized operations or information disclosure.
CVE-2026-66745 Code Injection in CVE-2026-66745 (CVE-2026-66745)
code injection in CVE-2026-66745 (CVE-2026-66745). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →