Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-8169 |
|
Vulnerability in CVE-2026-8169 (CVE-2026-8169)
vulnerability in CVE-2026-8169 (CVE-2026-8169). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26483 |
|
Cross-Site Scripting (XSS) in CVE-2026-26483 (CVE-2026-26483)
cross-site scripting in CVE-2026-26483 (CVE-2026-26483). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55639 |
|
Out-of-Bounds Read in neutrinolabs (CVE-2026-55639)
vulnerability in neutrinolabs (CVE-2026-55639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55626 |
|
Authentication Bypass in neutrinolabs (CVE-2026-55626)
authentication bypass in neutrinolabs (CVE-2026-55626). Confidential information can be exposed externally.
|
| CVE-2026-48812 |
|
Authentication Bypass in laravel (CVE-2026-48812)
authentication bypass in laravel (CVE-2026-48812). Confidential information can be exposed externally. Exploitable via ``token_type``.
|
| CVE-2026-45295 |
|
Vulnerability in laravel (CVE-2026-45295)
vulnerability in laravel (CVE-2026-45295). Risk of unauthorized operations or information disclosure. Exploitable via `GET /thread/read/{conversation_id}/{thread_id}`.
|
| CVE-2026-44228 |
|
Cross-Site Scripting (XSS) in bestpractical (CVE-2026-44228)
cross-site scripting in bestpractical (CVE-2026-44228). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44227 |
|
Cross-Site Scripting (XSS) in bestpractical (CVE-2026-44227)
cross-site scripting in bestpractical (CVE-2026-44227). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39878 |
|
Cross-Site Scripting (XSS) in CVE-2026-39878 (CVE-2026-39878)
cross-site scripting in CVE-2026-39878 (CVE-2026-39878). Confidential information can be exposed externally. Mitigation: upgrade to `1.11.40` or later.
|
| CVE-2026-34239 |
|
Vulnerability in CVE-2026-34239 (CVE-2026-34239)
vulnerability in CVE-2026-34239 (CVE-2026-34239). Risk of unauthorized operations or information disclosure.
|
| GHSA-42h9-826w-cgv3 |
|
Vulnerability in axios (GHSA-42h9-826w-cgv3)
vulnerability in axios (GHSA-42h9-826w-cgv3). Risk of unauthorized operations or information disclosure. Exploitable via ``formDataToJSON``. Mitigation: upgrade to `1.18.0` or later.
|
| GHSA-xj6q-8x83-jv6g |
|
Vulnerability in axios (GHSA-xj6q-8x83-jv6g)
vulnerability in axios (GHSA-xj6q-8x83-jv6g). Risk of unauthorized operations or information disclosure. Exploitable via ``auth``. Mitigation: upgrade to `1.15.2` or later.
|
| GHSA-pmv8-rq9r-6j72 |
|
Vulnerability in axios (GHSA-pmv8-rq9r-6j72)
vulnerability in axios (GHSA-pmv8-rq9r-6j72). Risk of unauthorized operations or information disclosure. Exploitable via ``formDataToJSON``. Mitigation: upgrade to `1.18.0` or later.
|
| CVE-2026-64207 |
|
Vulnerability in linux (CVE-2026-64207)
vulnerability in linux (CVE-2026-64207). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64206 |
|
Vulnerability in linux (CVE-2026-64206)
vulnerability in linux (CVE-2026-64206). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64205 |
|
Vulnerability in linux (CVE-2026-64205)
vulnerability in linux (CVE-2026-64205). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64192 |
|
Vulnerability in linux (CVE-2026-64192)
vulnerability in linux (CVE-2026-64192). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64191 |
|
Out-of-Bounds Read in c (CVE-2026-64191)
vulnerability in c (CVE-2026-64191). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64190 |
|
Vulnerability in c (CVE-2026-64190)
vulnerability in c (CVE-2026-64190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64189 |
|
Vulnerability in c (CVE-2026-64189)
vulnerability in c (CVE-2026-64189). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64188 |
|
Use-After-Free in c (CVE-2026-64188)
vulnerability in c (CVE-2026-64188). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64187 |
|
Vulnerability in c (CVE-2026-64187)
vulnerability in c (CVE-2026-64187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58484 |
|
Path Traversal in network-ai (CVE-2026-58484)
path traversal in network-ai (CVE-2026-58484). Data can be tampered with by attackers. Exploitable via ``path``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58482 |
|
Cross-Site Request Forgery (CSRF) in ssrf (CVE-2026-58482)
vulnerability in ssrf (CVE-2026-58482). Data can be tampered with by attackers. Exploitable via `POST /approvals/`. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58481 |
|
Path Traversal in network-ai (CVE-2026-58481)
path traversal in network-ai (CVE-2026-58481). Confidential information can be exposed externally. Exploitable via ``AgentRuntime``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58414 |
|
Path Traversal in network-ai (CVE-2026-58414)
path traversal in network-ai (CVE-2026-58414). Confidential information can be exposed externally. Exploitable via ``lstatSync``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-58413 |
|
Path Traversal in network-ai (CVE-2026-58413)
path traversal in network-ai (CVE-2026-58413). Confidential information can be exposed externally. Exploitable via ``backupId``. Mitigation: upgrade to `5.12.2` or later.
|
| CVE-2026-55645 |
|
Out-of-Bounds Read in dos (CVE-2026-55645)
vulnerability in dos (CVE-2026-55645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55238 |
|
Vulnerability in dos (CVE-2026-55238)
vulnerability in dos (CVE-2026-55238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54538 |
|
Vulnerability in neutrinolabs (CVE-2026-54538)
vulnerability in neutrinolabs (CVE-2026-54538). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50743 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-50743)
vulnerability in csrf (CVE-2026-50743). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47276 |
|
Vulnerability in CVE-2026-47276 (CVE-2026-47276)
vulnerability in CVE-2026-47276 (CVE-2026-47276). Risk of unauthorized operations or information disclosure. Exploitable via ``user_properties``.
|
| CVE-2026-47275 |
|
Vulnerability in c (CVE-2026-47275)
vulnerability in c (CVE-2026-47275). Risk of unauthorized operations or information disclosure. Exploitable via ``prop``.
|
| CVE-2026-46555 |
|
Path Traversal in path-traversal (CVE-2026-46555)
path traversal in path-traversal (CVE-2026-46555). Confidential information can be exposed externally. Exploitable via `Host header`.
|
| CVE-2026-44978 |
|
Vulnerability in dos (CVE-2026-44978)
vulnerability in dos (CVE-2026-44978). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44178 |
|
Vulnerability in dos (CVE-2026-44178)
vulnerability in dos (CVE-2026-44178). Successful exploitation can lead to full system takeover.
|
| CVE-2026-42218 |
|
Vulnerability in neutrinolabs (CVE-2026-42218)
vulnerability in neutrinolabs (CVE-2026-42218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42210 |
|
Authentication Bypass in CVE-2026-42210 (CVE-2026-42210)
authentication bypass in CVE-2026-42210 (CVE-2026-42210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41521 |
|
Vulnerability in dos (CVE-2026-41521)
vulnerability in dos (CVE-2026-41521). Confidential information can be exposed externally.
|
| CVE-2026-41252 |
|
Vulnerability in dos (CVE-2026-41252)
vulnerability in dos (CVE-2026-41252). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39879 |
|
Vulnerability in c (CVE-2026-39879)
vulnerability in c (CVE-2026-39879). Risk of unauthorized operations or information disclosure. Exploitable via ``afsql_dd_run_query``.
|
| CVE-2026-39385 |
|
Vulnerability in CVE-2026-39385 (CVE-2026-39385)
vulnerability in CVE-2026-39385 (CVE-2026-39385). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.52.0` or later.
|
| CVE-2026-35591 |
|
Vulnerability in libvips (CVE-2026-35591)
vulnerability in libvips (CVE-2026-35591). Successful exploitation can lead to full system takeover. Exploitable via ``tiffload``.
|
| CVE-2026-35590 |
|
Vulnerability in libvips (CVE-2026-35590)
vulnerability in libvips (CVE-2026-35590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-35217 |
|
Out-of-Bounds Read in CVE-2026-35217 (CVE-2026-35217)
vulnerability in CVE-2026-35217 (CVE-2026-35217). Risk of unauthorized operations or information disclosure. Exploitable via ``SUBSCRIBE``.
|
| CVE-2026-35048 |
|
Vulnerability in CVE-2026-35048 (CVE-2026-35048)
vulnerability in CVE-2026-35048 (CVE-2026-35048). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33328 |
|
Vulnerability in libvips (CVE-2026-33328)
vulnerability in libvips (CVE-2026-33328). Risk of unauthorized operations or information disclosure. Exploitable via ``gifload``.
|
| CVE-2026-33327 |
|
Vulnerability in libvips (CVE-2026-33327)
vulnerability in libvips (CVE-2026-33327). Successful exploitation can lead to full system takeover. Exploitable via ``vipsload``.
|
| CVE-2026-32825 |
|
Vulnerability in rails (CVE-2026-32825)
vulnerability in rails (CVE-2026-32825). Confidential information can be exposed externally.
|
| CVE-2026-32824 |
|
Open Redirect in CVE-2026-32824 (CVE-2026-32824)
vulnerability in CVE-2026-32824 (CVE-2026-32824). Confidential information can be exposed externally. Exploitable via ``forwardToUrl``.
|