Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-6798 Vulnerability in wordpress (CVE-2026-6798)
vulnerability in wordpress (CVE-2026-6798). Risk of unauthorized operations or information disclosure.
CVE-2026-46461 Vulnerability in dell (CVE-2026-46461)
vulnerability in dell (CVE-2026-46461). Successful exploitation can lead to full system takeover.
CVE-2026-3640 Vulnerability in wordpress (CVE-2026-3640)
vulnerability in wordpress (CVE-2026-3640). Risk of unauthorized operations or information disclosure.
GHSA-6wmf-9mj4-fx3x Vulnerability in mongoose-jsonify (GHSA-6wmf-9mj4-fx3x)
vulnerability in mongoose-jsonify (GHSA-6wmf-9mj4-fx3x). Risk of unauthorized operations or information disclosure.
GHSA-748x-3gxw-v7xv Vulnerability in assert-kit (GHSA-748x-3gxw-v7xv)
vulnerability in assert-kit (GHSA-748x-3gxw-v7xv). Risk of unauthorized operations or information disclosure.
GHSA-hr44-2g4q-fx38 Vulnerability in ethereum-gas-reporter (GHSA-hr44-2g4q-fx38)
vulnerability in ethereum-gas-reporter (GHSA-hr44-2g4q-fx38). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:21098-1 Vulnerability in python-aiohttp (openSUSE-SU-2026:21098-1)
vulnerability in python-aiohttp (openSUSE-SU-2026:21098-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `3.11.16-160000.5.1` or later.
SUSE-SU-2026:22173-1 Vulnerability in python-aiohttp (SUSE-SU-2026:22173-1)
vulnerability in python-aiohttp (SUSE-SU-2026:22173-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `3.11.16-160000.5.1` or later.
SUSE-SU-2026:2462-1 Vulnerability in ldns (SUSE-SU-2026:2462-1)
vulnerability in ldns (SUSE-SU-2026:2462-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.3-150600.3.3.1` or later.
SUSE-SU-2026:2461-1 Vulnerability in ldns (SUSE-SU-2026:2461-1)
vulnerability in ldns (SUSE-SU-2026:2461-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.0-150000.4.11.1` or later.
openSUSE-SU-2026:21096-1 Vulnerability in libsolv (openSUSE-SU-2026:21096-1)
vulnerability in libsolv (openSUSE-SU-2026:21096-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.39-160000.1.1` or later.
ROOT-APP-NPM-CVE-2025-2336 Vulnerability in @rootio/angular-sanitize (ROOT-APP-NPM-CVE-2025-2336)
vulnerability in @rootio/angular-sanitize (ROOT-APP-NPM-CVE-2025-2336). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.3-root.io.1` or later.
SUSE-SU-2026:22221-1 Vulnerability in libsolv (SUSE-SU-2026:22221-1)
vulnerability in libsolv (SUSE-SU-2026:22221-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.39-160000.1.1` or later.
SUSE-SU-2026:22172-1 Vulnerability in libsolv (SUSE-SU-2026:22172-1)
vulnerability in libsolv (SUSE-SU-2026:22172-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.7.39-160000.1.1` or later.
GHSA-chqj-php6-8x6m Vulnerability in build-tracker-n5p1 (GHSA-chqj-php6-8x6m)
vulnerability in build-tracker-n5p1 (GHSA-chqj-php6-8x6m). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:22171-1 Vulnerability in ansible-core (SUSE-SU-2026:22171-1)
vulnerability in ansible-core (SUSE-SU-2026:22171-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.18.3-160000.3.1` or later.
openSUSE-SU-2026:21097-1 Vulnerability in ansible-core (openSUSE-SU-2026:21097-1)
vulnerability in ansible-core (openSUSE-SU-2026:21097-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.18.3-160000.3.1` or later.
CVE-2026-9822 Vulnerability in wordpress (CVE-2026-9822)
vulnerability in wordpress (CVE-2026-9822). Confidential information can be exposed externally.
CVE-2026-9013 Vulnerability in wordpress (CVE-2026-9013)
vulnerability in wordpress (CVE-2026-9013). Risk of unauthorized operations or information disclosure.
CVE-2026-8713 Path Traversal in wordpress (CVE-2026-8713)
path traversal in wordpress (CVE-2026-8713). Data can be tampered with by attackers.
CVE-2026-7547 Path Traversal in wordpress (CVE-2026-7547)
path traversal in wordpress (CVE-2026-7547). Confidential information can be exposed externally.
CVE-2026-56131 Use-After-Free in libexpat-project (CVE-2026-56131)
vulnerability in libexpat-project (CVE-2026-56131). Risk of unauthorized operations or information disclosure.
CVE-2026-56132 Vulnerability in c (CVE-2026-56132)
vulnerability in c (CVE-2026-56132). Confidential information can be exposed externally.
CVE-2026-54414 Path Traversal in path-traversal (CVE-2026-54414)
path traversal in path-traversal (CVE-2026-54414). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.16.0` or later.
CVE-2026-4328 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-4328)
SSRF in wordpress (CVE-2026-4328). Risk of unauthorized operations or information disclosure.
CVE-2026-8118 Vulnerability in wordpress (CVE-2026-8118)
vulnerability in wordpress (CVE-2026-8118). Confidential information can be exposed externally.
CVE-2026-12430 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12430)
cross-site scripting in wordpress (CVE-2026-12430). Risk of unauthorized operations or information disclosure.
CVE-2026-7515 Vulnerability in wordpress (CVE-2026-7515)
vulnerability in wordpress (CVE-2026-7515). Successful exploitation can lead to full system takeover. Exploitable via ``doc_style``.
CVE-2026-12644 Vulnerability in ts-deepmerge (CVE-2026-12644)
vulnerability in ts-deepmerge (CVE-2026-12644). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0` or later.
CVE-2026-1856 Cross-Site Scripting (XSS) in wordpress (CVE-2026-1856)
cross-site scripting in wordpress (CVE-2026-1856). Risk of unauthorized operations or information disclosure.
CVE-2026-12157 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12157)
cross-site scripting in wordpress (CVE-2026-12157). Risk of unauthorized operations or information disclosure.
CVE-2026-11989 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-11989)
SSRF in wordpress (CVE-2026-11989). Risk of unauthorized operations or information disclosure.
CVE-2026-10034 Vulnerability in wordpress (CVE-2026-10034)
vulnerability in wordpress (CVE-2026-10034). Risk of unauthorized operations or information disclosure.
CVE-2026-10779 Vulnerability in wordpress (CVE-2026-10779)
vulnerability in wordpress (CVE-2026-10779). Risk of unauthorized operations or information disclosure.
CVE-2026-10720 Vulnerability in github.com/canonical/microceph/microceph (CVE-2026-10720)
vulnerability in github.com/canonical/microceph/microceph (CVE-2026-10720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.0-20260609072127-5c2760d8fb76` or later.
RLSA-2026:25930 Vulnerability in postfix (RLSA-2026:25930)
vulnerability in postfix (RLSA-2026:25930). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:3.8.5-10.el10_2` or later.
RLSA-2026:26228 Vulnerability in hplip (RLSA-2026:26228)
vulnerability in hplip (RLSA-2026:26228). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.23.12-10.el10_2.4` or later.
RLSA-2026:26332 Vulnerability in rsync (RLSA-2026:26332)
vulnerability in rsync (RLSA-2026:26332). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.4.4-1.el10_2` or later.
RLSA-2026:26456 Vulnerability in 389-ds-base (RLSA-2026:26456)
vulnerability in 389-ds-base (RLSA-2026:26456). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:3.2.0-7.el10_2` or later.
RLSA-2026:25999 Vulnerability in yggdrasil-worker-package-manager (RLSA-2026:25999)
vulnerability in yggdrasil-worker-package-manager (RLSA-2026:25999). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:0.2.3-7.el10_2` or later.
RLSA-2026:26532 Vulnerability in dracut (RLSA-2026:26532)
vulnerability in dracut (RLSA-2026:26532). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:107-7.el10_2` or later.
ROOT-APP-NPM-GHSA-wxgw-qj99-44c2 Vulnerability in @rootio/node-forge (ROOT-APP-NPM-GHSA-wxgw-qj99-44c2)
vulnerability in @rootio/node-forge (ROOT-APP-NPM-GHSA-wxgw-qj99-44c2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.10.0-root.io.2, 0.10.0-root.io.1, 0.10.0-root.io.3` or later.
SUSE-SU-2026:22220-1 Vulnerability in python-PyJWT (SUSE-SU-2026:22220-1)
vulnerability in python-PyJWT (SUSE-SU-2026:22220-1). Risk of unauthorized operations or information disclosure. Exploitable via ``PyJWKClient``. Mitigation: upgrade to `2.12.1-160000.2.1` or later.
SUSE-SU-2026:22170-1 Vulnerability in python-PyJWT (SUSE-SU-2026:22170-1)
vulnerability in python-PyJWT (SUSE-SU-2026:22170-1). Risk of unauthorized operations or information disclosure. Exploitable via ``PyJWKClient``. Mitigation: upgrade to `2.12.1-160000.2.1` or later.
openSUSE-SU-2026:21095-1 Vulnerability in python-PyJWT (openSUSE-SU-2026:21095-1)
vulnerability in python-PyJWT (openSUSE-SU-2026:21095-1). Risk of unauthorized operations or information disclosure. Exploitable via ``PyJWKClient``. Mitigation: upgrade to `2.12.1-160000.2.1` or later.
GHSA-chhh-8532-pg35 Vulnerability in new-ecro (GHSA-chhh-8532-pg35)
vulnerability in new-ecro (GHSA-chhh-8532-pg35). Risk of unauthorized operations or information disclosure.
GHSA-9243-vwcg-mpf3 Vulnerability in node-slot (GHSA-9243-vwcg-mpf3)
vulnerability in node-slot (GHSA-9243-vwcg-mpf3). Risk of unauthorized operations or information disclosure.
MAL-2026-6193 Vulnerability in ordered-btree (MAL-2026-6193)
vulnerability in ordered-btree (MAL-2026-6193). Risk of unauthorized operations or information disclosure.
MAL-2026-6184 Vulnerability in @qlab/component-intelligence (MAL-2026-6184)
vulnerability in @qlab/component-intelligence (MAL-2026-6184). Risk of unauthorized operations or information disclosure.
GHSA-hrp4-xprg-wqxw Vulnerability in nodepathbalance54 (GHSA-hrp4-xprg-wqxw)
vulnerability in nodepathbalance54 (GHSA-hrp4-xprg-wqxw). Risk of unauthorized operations or information disclosure. Exploitable via ``nodeaxionweb``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →