Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-66063 |
|
Path Traversal in goshs.de/goshs/v2 (CVE-2026-66063)
path traversal in goshs.de/goshs/v2 (CVE-2026-66063). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.5-0.20260727065949-f3ef599e4091` or later.
|
| CVE-2026-64863 |
|
Vulnerability in goshs.de/goshs/v2 (CVE-2026-64863)
vulnerability in goshs.de/goshs/v2 (CVE-2026-64863). Data can be tampered with by attackers. Exploitable via ``MOVE``. Mitigation: upgrade to `2.1.4` or later.
|
| CVE-2026-54719 |
|
Vulnerability in github.com/patrickhener/goshs (CVE-2026-54719)
vulnerability in github.com/patrickhener/goshs (CVE-2026-54719). Confidential information can be exposed externally. Exploitable via `GET /protected/secret.txt`. Mitigation: upgrade to `2.1.1` or later.
|
| CVE-2026-62325 |
|
Vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-62325)
vulnerability in github.com/patrickhener/goshs/v2 (CVE-2026-62325). Confidential information can be exposed externally. Exploitable via ``PasswordHandler``. Mitigation: upgrade to `2.1.4` or later.
|
| CVE-2026-54654 |
|
Code Injection in datamodel-code-generator (CVE-2026-54654)
code injection in datamodel-code-generator (CVE-2026-54654). Successful exploitation can lead to full system takeover. Exploitable via ``comment``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-55389 |
|
Path Traversal in datamodel-code-generator (CVE-2026-55389)
path traversal in datamodel-code-generator (CVE-2026-55389). Confidential information can be exposed externally. Exploitable via ``_get_ref_body``. Mitigation: upgrade to `0.62.0` or later.
|
| CVE-2026-54653 |
|
Code Injection in datamodel-code-generator (CVE-2026-54653)
code injection in datamodel-code-generator (CVE-2026-54653). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-55391 |
|
Vulnerability in datamodel-code-generator (CVE-2026-55391)
vulnerability in datamodel-code-generator (CVE-2026-55391). Confidential information can be exposed externally. Exploitable via ``httpx``. Mitigation: upgrade to `0.63.0` or later.
|
| CVE-2026-54656 |
|
Code Injection in datamodel-code-generator (CVE-2026-54656)
code injection in datamodel-code-generator (CVE-2026-54656). Successful exploitation can lead to full system takeover. Exploitable via ``validators``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-54690 |
|
SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54690)
SSRF in datamodel-code-generator (CVE-2026-54690). Confidential information can be exposed externally. Exploitable via ``None``. Mitigation: upgrade to `0.61.0` or later.
|
| CVE-2026-55415 |
|
Code Injection in datamodel-code-generator (CVE-2026-55415)
code injection in datamodel-code-generator (CVE-2026-55415). Successful exploitation can lead to full system takeover. Exploitable via ``customTypePath``. Mitigation: upgrade to `0.63.0` or later.
|
| CVE-2026-54621 |
|
Code Injection in datamodel-code-generator (CVE-2026-54621)
code injection in datamodel-code-generator (CVE-2026-54621). Successful exploitation can lead to full system takeover. Exploitable via ``import``. Mitigation: upgrade to `0.60.1` or later.
|
| CVE-2026-54655 |
|
Code Injection in datamodel-code-generator (CVE-2026-54655)
code injection in datamodel-code-generator (CVE-2026-54655). Successful exploitation can lead to full system takeover. Exploitable via ``_get_python_type_override``. Mitigation: upgrade to `0.60.2` or later.
|
| CVE-2026-55403 |
|
Information Disclosure in datamodel-code-generator (CVE-2026-55403)
vulnerability in datamodel-code-generator (CVE-2026-55403). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `0.63.0` or later.
|
| CVE-2026-6881 |
|
SQL Injection in sqli (CVE-2026-6881)
SQL injection in sqli (CVE-2026-6881). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15057 |
|
Out-of-Bounds Write in dos (CVE-2026-15057)
out-of-bounds write in dos (CVE-2026-15057). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15280 |
|
Path Traversal in ibm (CVE-2026-15280)
path traversal in ibm (CVE-2026-15280). Confidential information can be exposed externally.
|
| CVE-2026-14996 |
|
Vulnerability in ibm (CVE-2026-14996)
vulnerability in ibm (CVE-2026-14996). Confidential information can be exposed externally.
|
| CVE-2026-15325 |
|
Vulnerability in ibm (CVE-2026-15325)
vulnerability in ibm (CVE-2026-15325). Confidential information can be exposed externally.
|
| CVE-2026-15064 |
|
Vulnerability in ibm (CVE-2026-15064)
vulnerability in ibm (CVE-2026-15064). Confidential information can be exposed externally.
|
| CVE-2026-14981 |
|
Vulnerability in dos (CVE-2026-14981)
vulnerability in dos (CVE-2026-14981). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15328 |
|
Vulnerability in ibm (CVE-2026-15328)
vulnerability in ibm (CVE-2026-15328). Confidential information can be exposed externally.
|
| CVE-2026-14959 |
|
OS Command Injection in ibm (CVE-2026-14959)
OS command injection in ibm (CVE-2026-14959). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14974 |
|
Unsafe Deserialization in deserialization (CVE-2026-14974)
vulnerability in deserialization (CVE-2026-14974). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14958 |
|
OS Command Injection in ibm (CVE-2026-14958)
OS command injection in ibm (CVE-2026-14958). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14976 |
|
Vulnerability in ibm (CVE-2026-14976)
vulnerability in ibm (CVE-2026-14976). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14973 |
|
Path Traversal in ibm (CVE-2026-14973)
path traversal in ibm (CVE-2026-14973). Confidential information can be exposed externally.
|
| CVE-2026-14893 |
|
Vulnerability in CVE-2026-14893 (CVE-2026-14893)
vulnerability in CVE-2026-14893 (CVE-2026-14893). Data can be tampered with by attackers.
|
| CVE-2026-14528 |
|
Vulnerability in ibm (CVE-2026-14528)
vulnerability in ibm (CVE-2026-14528). Confidential information can be exposed externally.
|
| CVE-2026-14515 |
|
Cross-Site Scripting (XSS) in ibm (CVE-2026-14515)
cross-site scripting in ibm (CVE-2026-14515). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13463 |
|
Vulnerability in ibm (CVE-2026-13463)
vulnerability in ibm (CVE-2026-13463). Confidential information can be exposed externally.
|
| CVE-2026-14512 |
|
Unsafe Deserialization in c (CVE-2026-14512)
vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13442 |
|
Vulnerability in langflow (CVE-2026-13442)
vulnerability in langflow (CVE-2026-13442). Confidential information can be exposed externally.
|
| CVE-2026-14446 |
|
Vulnerability in privilege-escalation (CVE-2026-14446)
vulnerability in privilege-escalation (CVE-2026-14446). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54691 |
|
SSRF (Server-Side Request Forgery) in datamodel-code-generator (CVE-2026-54691)
SSRF in datamodel-code-generator (CVE-2026-54691). Confidential information can be exposed externally. Exploitable via ``http.get_body``. Mitigation: upgrade to `0.61.0` or later.
|
| CVE-2026-55390 |
|
Path Traversal in datamodel-code-generator (CVE-2026-55390)
path traversal in datamodel-code-generator (CVE-2026-55390). Confidential information can be exposed externally. Exploitable via ``schemaLocation``. Mitigation: upgrade to `0.62.0` or later.
|
| CVE-2026-49446 |
|
Vulnerability in github.com/azukaar/cosmos-server (CVE-2026-49446)
vulnerability in github.com/azukaar/cosmos-server (CVE-2026-49446). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenMiddleware``. Mitigation: upgrade to `0.22.19` or later.
|
| CVE-2026-49447 |
|
Authentication Bypass in github.com/azukaar/cosmos-server (CVE-2026-49447)
authentication bypass in github.com/azukaar/cosmos-server (CVE-2026-49447). Risk of unauthorized operations or information disclosure. Exploitable via `GET /cosmos/api/constellation/public-devices`. Mitigation: upgrade to `0.22.19` or later.
|
| CVE-2026-57511 |
|
Vulnerability in CVE-2026-57511 (CVE-2026-57511)
vulnerability in CVE-2026-57511 (CVE-2026-57511). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57510 |
|
Vulnerability in CVE-2026-57510 (CVE-2026-57510)
vulnerability in CVE-2026-57510 (CVE-2026-57510). Successful exploitation can lead to full system takeover.
|
| CVE-2026-3158 |
|
Vulnerability in ibm (CVE-2026-3158)
vulnerability in ibm (CVE-2026-3158). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3157 |
|
Vulnerability in ibm (CVE-2026-3157)
vulnerability in ibm (CVE-2026-3157). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1918 |
|
Vulnerability in ibm (CVE-2026-1918)
vulnerability in ibm (CVE-2026-1918). Confidential information can be exposed externally.
|
| CVE-2026-16192 |
|
Vulnerability in dos (CVE-2026-16192)
vulnerability in dos (CVE-2026-16192). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16184 |
|
Vulnerability in ibm (CVE-2026-16184)
vulnerability in ibm (CVE-2026-16184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16107 |
|
Vulnerability in CVE-2026-16107 (CVE-2026-16107)
vulnerability in CVE-2026-16107 (CVE-2026-16107). Confidential information can be exposed externally.
|
| CVE-2026-11391 |
|
Tanium addressed a SQL injection vulnerability in Patch.
Tanium addressed a SQL injection vulnerability in Patch.
|
| CVE-2026-7769 |
|
SQL Injection in sqli (CVE-2026-7769)
SQL injection in sqli (CVE-2026-7769). Confidential information can be exposed externally.
|
| CVE-2026-7362 |
|
Vulnerability in ibm (CVE-2026-7362)
vulnerability in ibm (CVE-2026-7362). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66745 |
|
Code Injection in CVE-2026-66745 (CVE-2026-66745)
code injection in CVE-2026-66745 (CVE-2026-66745). Successful exploitation can lead to full system takeover.
|