Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-83 Clear
ID Title
CVE-2026-45118 Vulnerability in CVE-2026-45118 (CVE-2026-45118)
vulnerability in CVE-2026-45118 (CVE-2026-45118). Confidential information can be exposed externally. Exploitable via `Referer header`.
CVE-2026-45733 Cross-Site Scripting (XSS) in CVE-2026-45733 (CVE-2026-45733)
cross-site scripting in CVE-2026-45733 (CVE-2026-45733). Confidential information can be exposed externally.
CVE-2026-15920 Vulnerability in django (CVE-2026-15920)
vulnerability in django (CVE-2026-15920). Risk of unauthorized operations or information disclosure. Exploitable via ``URLField``.
CVE-2026-62324 Cross-Site Scripting (XSS) in jodit (CVE-2026-62324)
cross-site scripting in jodit (CVE-2026-62324). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeHTMLElement``. Mitigation: upgrade to `4.12.31` or later.
CVE-2026-59727 Cross-Site Scripting (XSS) in astro (CVE-2026-59727)
cross-site scripting in astro (CVE-2026-59727). Risk of unauthorized operations or information disclosure. Exploitable via ``attrs``. Mitigation: upgrade to `7.0.4` or later.
CVE-2026-58263 Cross-Site Scripting (XSS) in jodit (CVE-2026-58263)
cross-site scripting in jodit (CVE-2026-58263). Risk of unauthorized operations or information disclosure. Exploitable via ``onerror``. Mitigation: upgrade to `4.12.28` or later.
CVE-2026-49276 Vulnerability in getkirby/cms (CVE-2026-49276)
vulnerability in getkirby/cms (CVE-2026-49276). Risk of unauthorized operations or information disclosure. Exploitable via ``writer``. Mitigation: upgrade to `5.4.4` or later.
CVE-2026-48591 Cross-Site Scripting (XSS) in earmark (CVE-2026-48591)
cross-site scripting in earmark (CVE-2026-48591). Risk of unauthorized operations or information disclosure.
CVE-2026-53841 Cross-Site Scripting (XSS) in openclaw (CVE-2026-53841)
cross-site scripting in openclaw (CVE-2026-53841). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2026.5.12` or later.
CVE-2026-53722 Cross-Site Scripting (XSS) in nuxt (CVE-2026-53722)
cross-site scripting in nuxt (CVE-2026-53722). Risk of unauthorized operations or information disclosure. Exploitable via ``href``. Mitigation: upgrade to `3.21.7` or later.
CVE-2026-8245 Vulnerability in concrete5/concrete5 (CVE-2026-8245)
vulnerability in concrete5/concrete5 (CVE-2026-8245). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.5.1` or later.
CVE-2026-45669 Vulnerability in nuxt (CVE-2026-45669)
vulnerability in nuxt (CVE-2026-45669). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `4.4.6` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →