Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-44948 Vulnerability in path-traversal (CVE-2026-44948)
vulnerability in path-traversal (CVE-2026-44948). Risk of unauthorized operations or information disclosure.
CVE-2022-31008 Vulnerability in rabbit_common (CVE-2022-31008)
vulnerability in rabbit_common (CVE-2022-31008). Confidential information can be exposed externally. Mitigation: upgrade to `3.8.32` or later.
CVE-2026-49451 Vulnerability in Microsoft.OpenAPI (CVE-2026-49451)
vulnerability in Microsoft.OpenAPI (CVE-2026-49451). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.5.4` or later.
GHSA-gwv3-x257-r43c Vulnerability in brock-loader (GHSA-gwv3-x257-r43c)
vulnerability in brock-loader (GHSA-gwv3-x257-r43c). Risk of unauthorized operations or information disclosure.
GHSA-gh2m-x2qr-m2cm Vulnerability in brock-react-alerts (GHSA-gh2m-x2qr-m2cm)
vulnerability in brock-react-alerts (GHSA-gh2m-x2qr-m2cm). Risk of unauthorized operations or information disclosure.
GHSA-x8q6-66jr-wmp3 Vulnerability in quoting (GHSA-x8q6-66jr-wmp3)
vulnerability in quoting (GHSA-x8q6-66jr-wmp3). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:2716-1 Vulnerability in pacemaker (SUSE-SU-2026:2716-1)
vulnerability in pacemaker (SUSE-SU-2026:2716-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.7+20231219.0f7f88312-150600.6.15.1` or later.
CVE-2026-4360 Vulnerability in CVE-2026-4360 (CVE-2026-4360)
vulnerability in CVE-2026-4360 (CVE-2026-4360). Risk of unauthorized operations or information disclosure.
CVE-2026-35097 Vulnerability in CVE-2026-35097 (CVE-2026-35097)
vulnerability in CVE-2026-35097 (CVE-2026-35097). Risk of unauthorized operations or information disclosure.
CVE-2025-53648 SQL Injection in apache (CVE-2025-53648)
SQL injection in apache (CVE-2025-53648). Risk of unauthorized operations or information disclosure.
CVE-2026-48192 Code Injection in CVE-2026-48192 (CVE-2026-48192)
code injection in CVE-2026-48192 (CVE-2026-48192). Data can be tampered with by attackers.
CVE-2026-35096 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-35096)
vulnerability in csrf (CVE-2026-35096). Risk of unauthorized operations or information disclosure.
CVE-2026-35095 Vulnerability in CVE-2026-35095 (CVE-2026-35095)
vulnerability in CVE-2026-35095 (CVE-2026-35095). Risk of unauthorized operations or information disclosure.
CVE-2026-35098 Vulnerability in CVE-2026-35098 (CVE-2026-35098)
vulnerability in CVE-2026-35098 (CVE-2026-35098). Risk of unauthorized operations or information disclosure.
CVE-2026-8452 KEV [KEV] Buffer Overflow in Citrix dos (CVE-2026-8452)
vulnerability in Citrix dos (CVE-2026-8452). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2026-14178 Use-After-Free in CVE-2026-14178 (CVE-2026-14178)
vulnerability in CVE-2026-14178 (CVE-2026-14178). Risk of unauthorized operations or information disclosure.
CVE-2026-8655 Buffer Overflow in dos (CVE-2026-8655)
vulnerability in dos (CVE-2026-8655). Successful exploitation can lead to full system takeover.
CVE-2026-14241 Buffer Overflow in c (CVE-2026-14241)
vulnerability in c (CVE-2026-14241). Successful exploitation can lead to full system takeover.
CVE-2026-58012 Vulnerability in dos (CVE-2026-58012)
vulnerability in dos (CVE-2026-58012). Risk of unauthorized operations or information disclosure. Exploitable via ``G_REGEX_RAW``.
CVE-2026-58116 Code Injection in hiyouga (CVE-2026-58116)
code injection in hiyouga (CVE-2026-58116). Successful exploitation can lead to full system takeover.
CVE-2026-58016 Vulnerability in c (CVE-2026-58016)
vulnerability in c (CVE-2026-58016). Risk of unauthorized operations or information disclosure.
CVE-2026-58015 Path Traversal in path-traversal (CVE-2026-58015)
path traversal in path-traversal (CVE-2026-58015). Confidential information can be exposed externally.
CVE-2026-58374 Vulnerability in c (CVE-2026-58374)
vulnerability in c (CVE-2026-58374). Risk of unauthorized operations or information disclosure.
CVE-2026-58011 Out-of-Bounds Read in c (CVE-2026-58011)
vulnerability in c (CVE-2026-58011). Risk of unauthorized operations or information disclosure.
CVE-2026-58013 Vulnerability in c (CVE-2026-58013)
vulnerability in c (CVE-2026-58013). Risk of unauthorized operations or information disclosure.
CVE-2026-58014 Vulnerability in c (CVE-2026-58014)
vulnerability in c (CVE-2026-58014). Risk of unauthorized operations or information disclosure.
CVE-2026-8451 Out-of-Bounds Read in citrix (CVE-2026-8451)
vulnerability in citrix (CVE-2026-8451). Confidential information can be exposed externally.
CVE-2026-8403 Cross-Site Scripting (XSS) in CVE-2026-8403 (CVE-2026-8403)
cross-site scripting in CVE-2026-8403 (CVE-2026-8403). Risk of unauthorized operations or information disclosure.
CVE-2026-53433 Vulnerability in dos (CVE-2026-53433)
vulnerability in dos (CVE-2026-53433). Risk of unauthorized operations or information disclosure.
CVE-2026-13474 Vulnerability in dos (CVE-2026-13474)
vulnerability in dos (CVE-2026-13474). Risk of unauthorized operations or information disclosure.
CVE-2026-58010 Vulnerability in c (CVE-2026-58010)
vulnerability in c (CVE-2026-58010). Risk of unauthorized operations or information disclosure.
CVE-2026-4629 Vulnerability in privilege-escalation (CVE-2026-4629)
vulnerability in privilege-escalation (CVE-2026-4629). Confidential information can be exposed externally.
CVE-2026-47105 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-53432 Vulnerability in junegunn (CVE-2026-53432)
vulnerability in junegunn (CVE-2026-53432). Risk of unauthorized operations or information disclosure.
CVE-2026-10816 Vulnerability in citrix (CVE-2026-10816)
vulnerability in citrix (CVE-2026-10816). Confidential information can be exposed externally.
CVE-2026-12388 Vulnerability in redhat (CVE-2026-12388)
vulnerability in redhat (CVE-2026-12388). Confidential information can be exposed externally.
CVE-2026-10817 Out-of-Bounds Read in citrix (CVE-2026-10817)
vulnerability in citrix (CVE-2026-10817). Confidential information can be exposed externally.
CVE-2026-14209 Vulnerability in redhat (CVE-2026-14209)
vulnerability in redhat (CVE-2026-14209). Risk of unauthorized operations or information disclosure.
CVE-2026-44949 Vulnerability in CVE-2026-44949 (CVE-2026-44949)
vulnerability in CVE-2026-44949 (CVE-2026-44949). Risk of unauthorized operations or information disclosure.
CVE-2026-44947 Vulnerability in CVE-2026-44947 (CVE-2026-44947)
vulnerability in CVE-2026-44947 (CVE-2026-44947). Risk of unauthorized operations or information disclosure.
CVE-2026-27957 OS Command Injection in CVE-2026-27957 (CVE-2026-27957)
OS command injection in CVE-2026-27957 (CVE-2026-27957). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.0.0-beta.464` or later.
CVE-2026-27956 Vulnerability in CVE-2026-27956 (CVE-2026-27956)
vulnerability in CVE-2026-27956 (CVE-2026-27956). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/servers/{server_uuid}/domains`. Mitigation: upgrade to `4.0.0-beta.464` or later.
CVE-2026-27955 OS Command Injection in c (CVE-2026-27955)
OS command injection in c (CVE-2026-27955). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.0-beta.464` or later.
CVE-2026-27883 Vulnerability in CVE-2026-27883 (CVE-2026-27883)
vulnerability in CVE-2026-27883 (CVE-2026-27883). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/deployments/{uuid}`. Mitigation: upgrade to `4.0.0-beta.464` or later.
CVE-2026-27882 Vulnerability in CVE-2026-27882 (CVE-2026-27882)
vulnerability in CVE-2026-27882 (CVE-2026-27882). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.0-beta.461` or later.
CVE-2026-27881 Vulnerability in CVE-2026-27881 (CVE-2026-27881)
vulnerability in CVE-2026-27881 (CVE-2026-27881). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v1/deployments/{uuid}`. Mitigation: upgrade to `4.0.0-beta.464` or later.
openSUSE-SU-2026:21185-1 Vulnerability in stgit (openSUSE-SU-2026:21185-1)
vulnerability in stgit (openSUSE-SU-2026:21185-1). Risk of unauthorized operations or information disclosure. Exploitable via ``gix``. Mitigation: upgrade to `2.6.0-bp160.1.1` or later.
MINI-4fpr-3f2x-mv4w MINI-4fpr-3f2x-mv4w
MINI-mr5c-85x9-68jm MINI-mr5c-85x9-68jm
GHSA-8mpj-272v-jhv7 Vulnerability in ts-linting-builder (GHSA-8mpj-272v-jhv7)
vulnerability in ts-linting-builder (GHSA-8mpj-272v-jhv7). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →