Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-58052 |
|
Vulnerability in 7-zip (CVE-2026-58052)
vulnerability in 7-zip (CVE-2026-58052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55487 |
|
Vulnerability in pnpm (CVE-2026-55487)
vulnerability in pnpm (CVE-2026-55487). Successful exploitation can lead to full system takeover. Exploitable via ``bf1b731ee6``. Mitigation: upgrade to `10.34.2` or later.
|
| CVE-2026-3472 |
|
Vulnerability in mattermost (CVE-2026-3472)
vulnerability in mattermost (CVE-2026-3472). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53949 |
|
Information Disclosure in ghost (CVE-2026-53949)
vulnerability in ghost (CVE-2026-53949). Risk of unauthorized operations or information disclosure. Exploitable via ``filter``. Mitigation: upgrade to `6.21.2` or later.
|
| CVE-2026-48721 |
|
Vulnerability in c (CVE-2026-48721)
vulnerability in c (CVE-2026-48721). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2026.05.06.15.42.stable` or later.
|
| CVE-2026-57281 |
|
Vulnerability in jenkins (CVE-2026-57281)
vulnerability in jenkins (CVE-2026-57281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57280 |
|
Vulnerability in jenkins (CVE-2026-57280)
vulnerability in jenkins (CVE-2026-57280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54762 |
|
Vulnerability in github.com/traefik/traefik/v3 (CVE-2026-54762)
vulnerability in github.com/traefik/traefik/v3 (CVE-2026-54762). Confidential information can be exposed externally. Mitigation: upgrade to `3.7.5` or later.
|
| CVE-2025-71322 |
|
Vulnerability in picklescan (CVE-2025-71322)
vulnerability in picklescan (CVE-2025-71322). Successful exploitation can lead to full system takeover. Exploitable via ``pty``. Mitigation: upgrade to `0.0.33` or later.
|
| CVE-2026-12457 |
|
Vulnerability in google (CVE-2026-12457)
vulnerability in google (CVE-2026-12457). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12438 |
|
Vulnerability in google (CVE-2026-12438)
vulnerability in google (CVE-2026-12438). Successful exploitation can lead to full system takeover.
|
| CVE-2025-48571 |
|
Vulnerability in google (CVE-2025-48571)
vulnerability in google (CVE-2025-48571). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54013 |
|
Cross-Site Scripting (XSS) in open-webui (CVE-2026-54013)
cross-site scripting in open-webui (CVE-2026-54013). Confidential information can be exposed externally. Exploitable via `GET /api/v1/models/model/profile/image`. Mitigation: upgrade to `0.9.6` or later.
|
| CVE-2026-53853 |
|
OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns
OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns
|
| CVE-2026-53845 |
|
Vulnerability in openclaw (CVE-2026-53845)
vulnerability in openclaw (CVE-2026-53845). Risk of unauthorized operations or information disclosure. Exploitable via ``runBeforeToolCallHook``. Mitigation: upgrade to `2026.5.6` or later.
|
| CVE-2026-49859 |
|
Vulnerability in deno (CVE-2026-49859)
vulnerability in deno (CVE-2026-49859). Risk of unauthorized operations or information disclosure. Exploitable via ``localhost``. Mitigation: upgrade to `2.8.1` or later.
|
| CVE-2026-12315 |
|
Vulnerability in mozilla (CVE-2026-12315)
vulnerability in mozilla (CVE-2026-12315). Confidential information can be exposed externally.
|
| CVE-2026-12316 |
|
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152.
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152.
|
| CVE-2026-12302 |
|
Vulnerability in mozilla (CVE-2026-12302)
vulnerability in mozilla (CVE-2026-12302). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12294 |
|
Vulnerability in mozilla (CVE-2026-12294)
vulnerability in mozilla (CVE-2026-12294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12295 |
|
Vulnerability in mozilla (CVE-2026-12295)
vulnerability in mozilla (CVE-2026-12295). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12296 |
|
Vulnerability in mozilla (CVE-2026-12296)
vulnerability in mozilla (CVE-2026-12296). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65899 |
|
Vulnerability in dompurify (CVE-2026-65899)
vulnerability in dompurify (CVE-2026-65899). Risk of unauthorized operations or information disclosure. Exploitable via ``TRUSTED_TYPES_POLICY``. Mitigation: upgrade to `3.4.9` or later.
|
| CVE-2026-49458 |
|
Vulnerability in dompurify (CVE-2026-49458)
vulnerability in dompurify (CVE-2026-49458). Risk of unauthorized operations or information disclosure. Exploitable via ``instanceof``. Mitigation: upgrade to `3.4.6` or later.
|
| CVE-2026-49459 |
|
Vulnerability in dompurify (CVE-2026-49459)
vulnerability in dompurify (CVE-2026-49459). Risk of unauthorized operations or information disclosure. Exploitable via ``_forceRemove``. Mitigation: upgrade to `3.4.6` or later.
|
| CVE-2026-12214 |
|
Vulnerability in CVE-2026-12214 (CVE-2026-12214)
vulnerability in CVE-2026-12214 (CVE-2026-12214). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12027 |
|
Vulnerability in google (CVE-2026-12027)
vulnerability in google (CVE-2026-12027). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12031 |
|
Vulnerability in google (CVE-2026-12031)
vulnerability in google (CVE-2026-12031). Successful exploitation can lead to full system takeover.
|
| CVE-2025-24284 |
|
This issue was addressed with improved checks to prevent unauthorized actions. This issue is...
This issue was addressed with improved checks to prevent unauthorized actions. This issue is...
|
| CVE-2025-30431 |
|
Vulnerability in apple (CVE-2025-30431)
vulnerability in apple (CVE-2025-30431). Confidential information can be exposed externally.
|
| CVE-2026-48546 |
|
Vulnerability in CVE-2026-48546 (CVE-2026-48546)
vulnerability in CVE-2026-48546 (CVE-2026-48546). Confidential information can be exposed externally.
|
| CVE-2026-50545 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50545)
vulnerability in github.com/fission/fission (CVE-2026-50545). Successful exploitation can lead to full system takeover. Exploitable via ``Environment.spec.runtime.podSpec``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-50564 |
|
Privilege Escalation in github.com/fission/fission (CVE-2026-50564)
vulnerability in github.com/fission/fission (CVE-2026-50564). Successful exploitation can lead to full system takeover. Exploitable via ``Environment``. Mitigation: upgrade to `1.24.0` or later.
|
| CVE-2026-48037 |
|
Vulnerability in @hulumi/baseline (CVE-2026-48037)
vulnerability in @hulumi/baseline (CVE-2026-48037). Risk of unauthorized operations or information disclosure. Exploitable via ``AccountFoundation``. Mitigation: upgrade to `1.4.0` or later.
|
| CVE-2026-48033 |
|
Vulnerability in @hulumi/policies (CVE-2026-48033)
vulnerability in @hulumi/policies (CVE-2026-48033). Risk of unauthorized operations or information disclosure. Exploitable via ``SecureBucket``. Mitigation: upgrade to `1.4.0` or later.
|
| CVE-2026-45656 |
|
Vulnerability in microsoft (CVE-2026-45656)
vulnerability in microsoft (CVE-2026-45656). Successful exploitation can lead to full system takeover.
|
| CVE-2026-45595 |
|
Vulnerability in microsoft (CVE-2026-45595)
vulnerability in microsoft (CVE-2026-45595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45588 |
|
Vulnerability in microsoft (CVE-2026-45588)
vulnerability in microsoft (CVE-2026-45588). Confidential information can be exposed externally.
|
| CVE-2026-45459 |
|
Vulnerability in microsoft (CVE-2026-45459)
vulnerability in microsoft (CVE-2026-45459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48575 |
|
Vulnerability in microsoft (CVE-2026-48575)
vulnerability in microsoft (CVE-2026-48575). Confidential information can be exposed externally.
|
| CVE-2026-48568 |
|
Vulnerability in microsoft (CVE-2026-48568)
vulnerability in microsoft (CVE-2026-48568). Confidential information can be exposed externally.
|
| CVE-2026-48570 |
|
Vulnerability in microsoft (CVE-2026-48570)
vulnerability in microsoft (CVE-2026-48570). Confidential information can be exposed externally.
|
| CVE-2026-47656 |
|
Vulnerability in microsoft (CVE-2026-47656)
vulnerability in microsoft (CVE-2026-47656). Confidential information can be exposed externally.
|
| CVE-2026-45655 |
|
Vulnerability in microsoft (CVE-2026-45655)
vulnerability in microsoft (CVE-2026-45655). Confidential information can be exposed externally.
|
| CVE-2026-11695 |
|
Vulnerability in google (CVE-2026-11695)
vulnerability in google (CVE-2026-11695). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11684 |
|
Vulnerability in google (CVE-2026-11684)
vulnerability in google (CVE-2026-11684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11288 |
|
Vulnerability in google (CVE-2026-11288)
vulnerability in google (CVE-2026-11288). Confidential information can be exposed externally.
|
| CVE-2026-11292 |
|
Vulnerability in google (CVE-2026-11292)
vulnerability in google (CVE-2026-11292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11282 |
|
Vulnerability in google (CVE-2026-11282)
vulnerability in google (CVE-2026-11282). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11263 |
|
Vulnerability in google (CVE-2026-11263)
vulnerability in google (CVE-2026-11263). Confidential information can be exposed externally.
|