Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-58214 Authorization Flaw in linuxfoundation (CVE-2026-58214)
vulnerability in linuxfoundation (CVE-2026-58214). Risk of unauthorized operations or information disclosure.
CVE-2026-58213 Vulnerability in linuxfoundation (CVE-2026-58213)
vulnerability in linuxfoundation (CVE-2026-58213). Confidential information can be exposed externally.
CVE-2026-58212 Vulnerability in CVE-2026-58212 (CVE-2026-58212)
vulnerability in CVE-2026-58212 (CVE-2026-58212). Risk of unauthorized operations or information disclosure.
CVE-2026-58210 Vulnerability in linuxfoundation (CVE-2026-58210)
vulnerability in linuxfoundation (CVE-2026-58210). Risk of unauthorized operations or information disclosure.
CVE-2026-58209 Authorization Flaw in linuxfoundation (CVE-2026-58209)
vulnerability in linuxfoundation (CVE-2026-58209). Risk of unauthorized operations or information disclosure.
CVE-2026-55575 Vulnerability in liquidjs (CVE-2026-55575)
vulnerability in liquidjs (CVE-2026-55575). Risk of unauthorized operations or information disclosure. Exploitable via ``pop``. Mitigation: upgrade to `10.27.1` or later.
CVE-2026-55404 Vulnerability in yt-dlp (CVE-2026-55404)
vulnerability in yt-dlp (CVE-2026-55404). Successful exploitation can lead to full system takeover. Exploitable via ``webpage_url``. Mitigation: upgrade to `2026.7.4` or later.
CVE-2026-50813 Vulnerability in CVE-2026-50813 (CVE-2026-50813)
vulnerability in CVE-2026-50813 (CVE-2026-50813). Risk of unauthorized operations or information disclosure.
CVE-2026-50812 Vulnerability in dos (CVE-2026-50812)
vulnerability in dos (CVE-2026-50812). Risk of unauthorized operations or information disclosure.
CVE-2026-14362 Vulnerability in CVE-2026-14362 (CVE-2026-14362)
vulnerability in CVE-2026-14362 (CVE-2026-14362). Risk of unauthorized operations or information disclosure.
CVE-2026-59938 Vulnerability in pypdf (CVE-2026-59938)
vulnerability in pypdf (CVE-2026-59938). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.0` or later.
CVE-2026-59937 Vulnerability in pypdf (CVE-2026-59937)
vulnerability in pypdf (CVE-2026-59937). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.0` or later.
CVE-2026-60102 OS Command Injection in c (CVE-2026-60102)
OS command injection in c (CVE-2026-60102). Successful exploitation can lead to full system takeover.
CVE-2026-59930 Vulnerability in mistune (CVE-2026-59930)
vulnerability in mistune (CVE-2026-59930). Risk of unauthorized operations or information disclosure. Exploitable via ``toc``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59929 Cross-Site Scripting (XSS) in mistune (CVE-2026-59929)
cross-site scripting in mistune (CVE-2026-59929). Risk of unauthorized operations or information disclosure. Exploitable via ``safe_url``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59928 Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59927 Vulnerability in mistune (CVE-2026-59927)
vulnerability in mistune (CVE-2026-59927). Risk of unauthorized operations or information disclosure. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59926 Cross-Site Scripting (XSS) in mistune (CVE-2026-59926)
cross-site scripting in mistune (CVE-2026-59926). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59925 Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59924 Path Traversal in mistune (CVE-2026-59924)
path traversal in mistune (CVE-2026-59924). Confidential information can be exposed externally. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59923 Cross-Site Scripting (XSS) in mistune (CVE-2026-59923)
cross-site scripting in mistune (CVE-2026-59923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59922 Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59897 Vulnerability in hono (CVE-2026-59897)
vulnerability in hono (CVE-2026-59897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.27` or later.
CVE-2026-59896 Vulnerability in hono (CVE-2026-59896)
vulnerability in hono (CVE-2026-59896). Confidential information can be exposed externally. Exploitable via ``await``. Mitigation: upgrade to `4.12.27` or later.
CVE-2026-59895 Cross-Site Scripting (XSS) in hono (CVE-2026-59895)
cross-site scripting in hono (CVE-2026-59895). Risk of unauthorized operations or information disclosure. Exploitable via ``class``. Mitigation: upgrade to `4.12.27` or later.
CVE-2026-59892 Vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892)
vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892). Risk of unauthorized operations or information disclosure. Exploitable via ``URIError``. Mitigation: upgrade to `2.9.0` or later.
CVE-2026-59890 Vulnerability in setuptools (CVE-2026-59890)
vulnerability in setuptools (CVE-2026-59890). Confidential information can be exposed externally. Exploitable via ``FileList``. Mitigation: upgrade to `83.0.0` or later.
CVE-2026-59887 Vulnerability in linkify-it (CVE-2026-59887)
vulnerability in linkify-it (CVE-2026-59887). Risk of unauthorized operations or information disclosure. Exploitable via ``src_email_name``. Mitigation: upgrade to `5.0.2` or later.
CVE-2026-59883 Information Disclosure in guzzlehttp/guzzle (CVE-2026-59883)
vulnerability in guzzlehttp/guzzle (CVE-2026-59883). Risk of unauthorized operations or information disclosure. Exploitable via ``CookieJar``. Mitigation: upgrade to `7.12.3` or later.
CVE-2026-59882 Vulnerability in guzzlehttp/psr7 (CVE-2026-59882)
vulnerability in guzzlehttp/psr7 (CVE-2026-59882). Risk of unauthorized operations or information disclosure. Exploitable via ``SERVER_NAME``. Mitigation: upgrade to `2.12.3` or later.
CVE-2026-59879 Vulnerability in immutable (CVE-2026-59879)
vulnerability in immutable (CVE-2026-59879). Risk of unauthorized operations or information disclosure. Exploitable via ``set``. Mitigation: upgrade to `5.1.8` or later.
CVE-2026-59731 Vulnerability in astro (CVE-2026-59731)
vulnerability in astro (CVE-2026-59731). Confidential information can be exposed externally. Mitigation: upgrade to `6.4.8` or later.
CVE-2026-59261 Vulnerability in openclaw (CVE-2026-59261)
vulnerability in openclaw (CVE-2026-59261). Confidential information can be exposed externally.
CVE-2026-42505 Vulnerability in golang (CVE-2026-42505)
vulnerability in golang (CVE-2026-42505). Risk of unauthorized operations or information disclosure.
CVE-2026-39822 Vulnerability in golang (CVE-2026-39822)
vulnerability in golang (CVE-2026-39822). Successful exploitation can lead to full system takeover.
CVE-2026-29009 Vulnerability in c (CVE-2026-29009)
vulnerability in c (CVE-2026-29009). Risk of unauthorized operations or information disclosure.
CVE-2026-29008 Vulnerability in c (CVE-2026-29008)
vulnerability in c (CVE-2026-29008). Risk of unauthorized operations or information disclosure.
CVE-2026-29007 Out-of-Bounds Read in c (CVE-2026-29007)
vulnerability in c (CVE-2026-29007). Risk of unauthorized operations or information disclosure.
CVE-2025-3110 Vulnerability in openvpn (CVE-2025-3110)
vulnerability in openvpn (CVE-2025-3110). Data can be tampered with by attackers.
CVE-2026-9074 SQL Injection in sqli (CVE-2026-9074)
SQL injection in sqli (CVE-2026-9074). Confidential information can be exposed externally.
CVE-2026-59880 Vulnerability in immutable (CVE-2026-59880)
vulnerability in immutable (CVE-2026-59880). Risk of unauthorized operations or information disclosure. Exploitable via ``Immutable.Map``. Mitigation: upgrade to `5.1.8` or later.
CVE-2026-59877 Vulnerability in protobufjs (CVE-2026-59877)
vulnerability in protobufjs (CVE-2026-59877). Risk of unauthorized operations or information disclosure. Exploitable via ``parse``. Mitigation: upgrade to `8.6.6` or later.
CVE-2026-59876 Vulnerability in protobufjs (CVE-2026-59876)
vulnerability in protobufjs (CVE-2026-59876). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `8.6.5` or later.
CVE-2026-59875 Vulnerability in tar (CVE-2026-59875)
vulnerability in tar (CVE-2026-59875). Risk of unauthorized operations or information disclosure. Exploitable via ``NUL``. Mitigation: upgrade to `7.5.17` or later.
CVE-2026-59874 Vulnerability in tar (CVE-2026-59874)
vulnerability in tar (CVE-2026-59874). Risk of unauthorized operations or information disclosure. Exploitable via ``poc.mjs``. Mitigation: upgrade to `7.5.18` or later.
CVE-2026-59873 Vulnerability in tar (CVE-2026-59873)
vulnerability in tar (CVE-2026-59873). Risk of unauthorized operations or information disclosure. Exploitable via ``maxReadSize``. Mitigation: upgrade to `7.5.19` or later.
CVE-2026-59871 Vulnerability in tar (CVE-2026-59871)
vulnerability in tar (CVE-2026-59871). Risk of unauthorized operations or information disclosure. Exploitable via ``pax.ts``. Mitigation: upgrade to `7.5.18` or later.
CVE-2026-59870 Vulnerability in js-yaml (CVE-2026-59870)
vulnerability in js-yaml (CVE-2026-59870). Risk of unauthorized operations or information disclosure. Exploitable via ``YAML11_SCHEMA``. Mitigation: upgrade to `5.2.1` or later.
CVE-2026-59869 Vulnerability in js-yaml (CVE-2026-59869)
vulnerability in js-yaml (CVE-2026-59869). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0` or later.
CVE-2026-59868 Vulnerability in js-yaml (CVE-2026-59868)
vulnerability in js-yaml (CVE-2026-59868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →