Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-58214 |
|
Authorization Flaw in linuxfoundation (CVE-2026-58214)
vulnerability in linuxfoundation (CVE-2026-58214). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58213 |
|
Vulnerability in linuxfoundation (CVE-2026-58213)
vulnerability in linuxfoundation (CVE-2026-58213). Confidential information can be exposed externally.
|
| CVE-2026-58212 |
|
Vulnerability in CVE-2026-58212 (CVE-2026-58212)
vulnerability in CVE-2026-58212 (CVE-2026-58212). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58210 |
|
Vulnerability in linuxfoundation (CVE-2026-58210)
vulnerability in linuxfoundation (CVE-2026-58210). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58209 |
|
Authorization Flaw in linuxfoundation (CVE-2026-58209)
vulnerability in linuxfoundation (CVE-2026-58209). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55575 |
|
Vulnerability in liquidjs (CVE-2026-55575)
vulnerability in liquidjs (CVE-2026-55575). Risk of unauthorized operations or information disclosure. Exploitable via ``pop``. Mitigation: upgrade to `10.27.1` or later.
|
| CVE-2026-55404 |
|
Vulnerability in yt-dlp (CVE-2026-55404)
vulnerability in yt-dlp (CVE-2026-55404). Successful exploitation can lead to full system takeover. Exploitable via ``webpage_url``. Mitigation: upgrade to `2026.7.4` or later.
|
| CVE-2026-50813 |
|
Vulnerability in CVE-2026-50813 (CVE-2026-50813)
vulnerability in CVE-2026-50813 (CVE-2026-50813). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50812 |
|
Vulnerability in dos (CVE-2026-50812)
vulnerability in dos (CVE-2026-50812). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14362 |
|
Vulnerability in CVE-2026-14362 (CVE-2026-14362)
vulnerability in CVE-2026-14362 (CVE-2026-14362). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59938 |
|
Vulnerability in pypdf (CVE-2026-59938)
vulnerability in pypdf (CVE-2026-59938). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.0` or later.
|
| CVE-2026-59937 |
|
Vulnerability in pypdf (CVE-2026-59937)
vulnerability in pypdf (CVE-2026-59937). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.14.0` or later.
|
| CVE-2026-60102 |
|
OS Command Injection in c (CVE-2026-60102)
OS command injection in c (CVE-2026-60102). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59930 |
|
Vulnerability in mistune (CVE-2026-59930)
vulnerability in mistune (CVE-2026-59930). Risk of unauthorized operations or information disclosure. Exploitable via ``toc``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59929 |
|
Cross-Site Scripting (XSS) in mistune (CVE-2026-59929)
cross-site scripting in mistune (CVE-2026-59929). Risk of unauthorized operations or information disclosure. Exploitable via ``safe_url``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59928 |
|
Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59927 |
|
Vulnerability in mistune (CVE-2026-59927)
vulnerability in mistune (CVE-2026-59927). Risk of unauthorized operations or information disclosure. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59926 |
|
Cross-Site Scripting (XSS) in mistune (CVE-2026-59926)
cross-site scripting in mistune (CVE-2026-59926). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59925 |
|
Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59924 |
|
Path Traversal in mistune (CVE-2026-59924)
path traversal in mistune (CVE-2026-59924). Confidential information can be exposed externally. Exploitable via ``Include``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59923 |
|
Cross-Site Scripting (XSS) in mistune (CVE-2026-59923)
cross-site scripting in mistune (CVE-2026-59923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59922 |
|
Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59897 |
|
Vulnerability in hono (CVE-2026-59897)
vulnerability in hono (CVE-2026-59897). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.27` or later.
|
| CVE-2026-59896 |
|
Vulnerability in hono (CVE-2026-59896)
vulnerability in hono (CVE-2026-59896). Confidential information can be exposed externally. Exploitable via ``await``. Mitigation: upgrade to `4.12.27` or later.
|
| CVE-2026-59895 |
|
Cross-Site Scripting (XSS) in hono (CVE-2026-59895)
cross-site scripting in hono (CVE-2026-59895). Risk of unauthorized operations or information disclosure. Exploitable via ``class``. Mitigation: upgrade to `4.12.27` or later.
|
| CVE-2026-59892 |
|
Vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892)
vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892). Risk of unauthorized operations or information disclosure. Exploitable via ``URIError``. Mitigation: upgrade to `2.9.0` or later.
|
| CVE-2026-59890 |
|
Vulnerability in setuptools (CVE-2026-59890)
vulnerability in setuptools (CVE-2026-59890). Confidential information can be exposed externally. Exploitable via ``FileList``. Mitigation: upgrade to `83.0.0` or later.
|
| CVE-2026-59887 |
|
Vulnerability in linkify-it (CVE-2026-59887)
vulnerability in linkify-it (CVE-2026-59887). Risk of unauthorized operations or information disclosure. Exploitable via ``src_email_name``. Mitigation: upgrade to `5.0.2` or later.
|
| CVE-2026-59883 |
|
Information Disclosure in guzzlehttp/guzzle (CVE-2026-59883)
vulnerability in guzzlehttp/guzzle (CVE-2026-59883). Risk of unauthorized operations or information disclosure. Exploitable via ``CookieJar``. Mitigation: upgrade to `7.12.3` or later.
|
| CVE-2026-59882 |
|
Vulnerability in guzzlehttp/psr7 (CVE-2026-59882)
vulnerability in guzzlehttp/psr7 (CVE-2026-59882). Risk of unauthorized operations or information disclosure. Exploitable via ``SERVER_NAME``. Mitigation: upgrade to `2.12.3` or later.
|
| CVE-2026-59879 |
|
Vulnerability in immutable (CVE-2026-59879)
vulnerability in immutable (CVE-2026-59879). Risk of unauthorized operations or information disclosure. Exploitable via ``set``. Mitigation: upgrade to `5.1.8` or later.
|
| CVE-2026-59731 |
|
Vulnerability in astro (CVE-2026-59731)
vulnerability in astro (CVE-2026-59731). Confidential information can be exposed externally. Mitigation: upgrade to `6.4.8` or later.
|
| CVE-2026-59261 |
|
Vulnerability in openclaw (CVE-2026-59261)
vulnerability in openclaw (CVE-2026-59261). Confidential information can be exposed externally.
|
| CVE-2026-42505 |
|
Vulnerability in golang (CVE-2026-42505)
vulnerability in golang (CVE-2026-42505). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-39822 |
|
Vulnerability in golang (CVE-2026-39822)
vulnerability in golang (CVE-2026-39822). Successful exploitation can lead to full system takeover.
|
| CVE-2026-29009 |
|
Vulnerability in c (CVE-2026-29009)
vulnerability in c (CVE-2026-29009). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29008 |
|
Vulnerability in c (CVE-2026-29008)
vulnerability in c (CVE-2026-29008). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29007 |
|
Out-of-Bounds Read in c (CVE-2026-29007)
vulnerability in c (CVE-2026-29007). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-3110 |
|
Vulnerability in openvpn (CVE-2025-3110)
vulnerability in openvpn (CVE-2025-3110). Data can be tampered with by attackers.
|
| CVE-2026-9074 |
|
SQL Injection in sqli (CVE-2026-9074)
SQL injection in sqli (CVE-2026-9074). Confidential information can be exposed externally.
|
| CVE-2026-59880 |
|
Vulnerability in immutable (CVE-2026-59880)
vulnerability in immutable (CVE-2026-59880). Risk of unauthorized operations or information disclosure. Exploitable via ``Immutable.Map``. Mitigation: upgrade to `5.1.8` or later.
|
| CVE-2026-59877 |
|
Vulnerability in protobufjs (CVE-2026-59877)
vulnerability in protobufjs (CVE-2026-59877). Risk of unauthorized operations or information disclosure. Exploitable via ``parse``. Mitigation: upgrade to `8.6.6` or later.
|
| CVE-2026-59876 |
|
Vulnerability in protobufjs (CVE-2026-59876)
vulnerability in protobufjs (CVE-2026-59876). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `8.6.5` or later.
|
| CVE-2026-59875 |
|
Vulnerability in tar (CVE-2026-59875)
vulnerability in tar (CVE-2026-59875). Risk of unauthorized operations or information disclosure. Exploitable via ``NUL``. Mitigation: upgrade to `7.5.17` or later.
|
| CVE-2026-59874 |
|
Vulnerability in tar (CVE-2026-59874)
vulnerability in tar (CVE-2026-59874). Risk of unauthorized operations or information disclosure. Exploitable via ``poc.mjs``. Mitigation: upgrade to `7.5.18` or later.
|
| CVE-2026-59873 |
|
Vulnerability in tar (CVE-2026-59873)
vulnerability in tar (CVE-2026-59873). Risk of unauthorized operations or information disclosure. Exploitable via ``maxReadSize``. Mitigation: upgrade to `7.5.19` or later.
|
| CVE-2026-59871 |
|
Vulnerability in tar (CVE-2026-59871)
vulnerability in tar (CVE-2026-59871). Risk of unauthorized operations or information disclosure. Exploitable via ``pax.ts``. Mitigation: upgrade to `7.5.18` or later.
|
| CVE-2026-59870 |
|
Vulnerability in js-yaml (CVE-2026-59870)
vulnerability in js-yaml (CVE-2026-59870). Risk of unauthorized operations or information disclosure. Exploitable via ``YAML11_SCHEMA``. Mitigation: upgrade to `5.2.1` or later.
|
| CVE-2026-59869 |
|
Vulnerability in js-yaml (CVE-2026-59869)
vulnerability in js-yaml (CVE-2026-59869). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.3.0` or later.
|
| CVE-2026-59868 |
|
Vulnerability in js-yaml (CVE-2026-59868)
vulnerability in js-yaml (CVE-2026-59868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.2.0` or later.
|