CVE-2026-65361 - This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se

CVE-2026-65360 - A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPa

CVE-2026-65359 - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 a

CVE-2026-65358 - A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadO

CVE-2026-65357 - The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26

CVE-2026-65355 - An information disclosure issue was addressed with improved state management. This issue is fixed in

CVE-2026-65354 - A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iP

CVE-2026-65353 - An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6

CVE-2026-65352 - An information disclosure issue was addressed with improved state management. This issue is fixed in

CVE-2026-65348 - A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and

CVE-2026-65345 - A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and

CVE-2026-65344 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS

CVE-2026-65342 - A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate

CVE-2026-64790 - A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga

CVE-2026-64761 - A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS

CVE-2026-64756 - A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPad

CVE-2026-64753 - A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27,

CVE-2026-64752 - A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS

CVE-2026-64736 - An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iO

CVE-2026-64717 - A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and

CVE-2026-64714 - A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18

CVE-2026-64712 - This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se

CVE-2026-64701 - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia

CVE-2026-53719 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-53718 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-53716 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-53715 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-53714 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-53713 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-43815 - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia

CVE-2026-43808 - A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.

CVE-2026-43791 - A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Gold

CVE-2026-43790 - The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27,

CVE-2026-43789 - An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Gol

CVE-2026-43788 - An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golde

CVE-2026-43787 - A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS

CVE-2026-43786 - This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat

CVE-2026-43785 - A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iP

CVE-2026-43783 - A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A mal

CVE-2026-43762 - The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS

CVE-2026-43761 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac

CVE-2026-43741 - A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate

CVE-2026-43737 - An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and i

CVE-2026-43719 - A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS G

CVE-2026-43702 - The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26

CVE-2026-43697 - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Gold

CVE-2026-43696 - An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS

CVE-2026-43695 - An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a

CVE-2026-43692 - A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Gold

CVE-2026-43691 - A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga

CVE-2026-43690 - A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, m

CVE-2026-43689 - A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and

CVE-2026-43688 - A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2

CVE-2026-43687 - The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26

CVE-2026-43686 - A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.

CVE-2026-43684 - A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.

CVE-2026-43683 - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Gold

CVE-2026-43677 - An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in m

CVE-2026-43674 - An authentication issue was addressed with improved state management. This issue is fixed in iOS 27

CVE-2026-43664 - This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 2

CVE-2026-28968 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS

CVE-2026-28966 - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS

CVE-2026-28960 - A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10

CVE-2026-28938 - A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 2

CVE-2026-28937 - This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate

CVE-2026-28935 - The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS

CVE-2026-28934 - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden G

CVE-2026-28933 - A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS S

CVE-2026-28899 - A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS

CVE-2026-28836 - A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8.

CVE-2026-20683 - An authentication issue was addressed with improved state management. This issue is fixed in iOS 27

CVE-2026-19290 - IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allo

CVE-2026-19280 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a P

CVE-2026-19273 - IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM

CVE-2026-19086 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a P

CVE-2026-18069 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file syst

CVE-2026-14277 - IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary

CVE-2026-14276 - IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authentica

CVE-2026-14275 - IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authentica

CVE-2026-13293 - IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3

CVE-2026-13287 - IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3

CVE-2026-13285 - IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A re

CVE-2026-13277 - IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open

CVE-2026-13276 - IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0

CVE-2026-13275 - IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3

CVE-2026-13272 - IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perfo

CVE-2026-13260 - IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insuffi

CVE-2026-13107 - IBM Business Automation Workflow containers and traditional may use programming model artifacts that

CVE-2026-12767 - IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may

CVE-2026-12766 - IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may

CVE-2026-12765 - IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may

CVE-2026-12763 - IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's

CVE-2026-90816 - A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file liba

CVE-2026-90815 - A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue

CVE-2026-90814 - A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability

CVE-2026-90813 - A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the functio

CVE-2026-82028 - Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-

CVE-2026-73497 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-73496 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

CVE-2026-65838 - Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthor

CVE-2026-55244 - ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROM_PY in asteval/ast

CVE-2026-55209 - resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior

CVE-2026-55093 - Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.16

CVE-2026-54632 - SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPack

CVE-2026-54629 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file

CVE-2026-54628 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-

CVE-2026-54559 - PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm

CVE-2026-54447 - garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages act

CVE-2026-54334 - UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file sys

CVE-2026-54333 - UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file sys

CVE-2026-54247 - Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in da

CVE-2026-54246 - Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.13, the routesrv

CVE-2026-53717 - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based

CVE-2026-50006 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards una

CVE-2026-47253 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, the clear_plugin_cache(plugi

CVE-2026-19816 - A flaw was found in PackageKit. PackageKit skips the polkit authorization check for transactions car

CVE-2026-19624 - A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection proper

CVE-2026-18251 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to im

CVE-2026-18119 - Concrete CMS below 9.5.3 did not sanitize custom style values in the Block Design dialog before writ

CVE-2026-18065 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensiti

CVE-2026-17628 - IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the pass

CVE-2026-17467 - IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensiti

CVE-2026-17463 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 C

CVE-2026-17416 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a

CVE-2026-17156 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a

CVE-2026-17133 - IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a

CVE-2026-17047 - IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information

CVE-2026-16702 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 C

CVE-2026-16673 - IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacke

CVE-2026-16466 - IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacke

CVE-2026-16435 - IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability

CVE-2026-16432 - IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote a

CVE-2026-16428 - IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacke

CVE-2026-16338 - IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacke

CVE-2026-16335 - IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacke

CVE-2026-16190 - IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability.

CVE-2026-16189 - IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log ent

CVE-2026-16188 - IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log ent

CVE-2026-16187 - IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication

CVE-2026-16186 - IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulner

CVE-2026-16185 - IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication

CVE-2026-16148 - The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with k_work_

CVE-2026-16147 - The ITE IT82xx2 USB device-controller driver (drivers/usb/udc/udc_it82xx2.c) mishandles multi-packet

CVE-2026-15955 - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an

CVE-2026-15924 - Zephyr's TLS socket layer in subsys/net/lib/sockets/sockets_tls.c keeps a single process-global arra

CVE-2026-15887 - IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when

CVE-2026-15634 - IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vul

CVE-2026-15412 - IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could a

CVE-2026-15396 - IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vul

CVE-2026-90812 - A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impac

CVE-2026-90811 - A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the funct

CVE-2026-90810 - A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted ele

CVE-2026-90809 - A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function Ex

CVE-2026-90808 - A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guar

CVE-2026-89023 - ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vuln

CVE-2026-89021 - MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI

CVE-2026-89020 - MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overfl

CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity C

CVE-2026-82519 - Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vuln

CVE-2026-82049 - In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to

CVE-2026-82035 - PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font

CVE-2026-77884 - Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from th

CVE-2026-59178 - ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to v

CVE-2026-19543 - IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2

CVE-2026-18515 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the fil

CVE-2026-18151 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive informa

CVE-2026-15893 - net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a randomized ND reachable time f

CVE-2013-1446 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Was assi

CVE-2026-91081 - Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint t

CVE-2026-91080 - webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, all

CVE-2026-91079 - Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print serv

CVE-2026-91021 - Trilium Notes, version v0.103.0 and earlier, contains a stored cross-site scripting (XSS) vulnerabil

CVE-2026-90946 - DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenti

CVE-2026-90945 - Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be over

CVE-2026-90944 - Krayin CRM through 2.2.6 exposes the POST /admin/mail/inbound-parse endpoint without authentication,

CVE-2026-90942 - Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /

CVE-2026-90807 - A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forward

CVE-2026-90806 - A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the fun

CVE-2026-90805 - A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07e

CVE-2026-86836 - In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interf

CVE-2026-85921 - Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locall

CVE-2026-85892 - Concurrent execution using shared resource with improper synchronization ('race condition') in Micro

CVE-2026-73494 - blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0

CVE-2026-70658 - Pay is a payments engine for Ruby on Rails 6.0 and higher. Prior to 11.6.2, Pay::Webhooks::PaddleBil

CVE-2026-57583 - OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of componen

CVE-2026-57581 - DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-pre

CVE-2026-57578 - DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-pre

CVE-2026-57577 - DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-pre

CVE-2026-57570 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-55866 - SpiceDB is an open source database system for creating and managing security-critical application pe

CVE-2026-55847 - Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to

CVE-2026-55846 - Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to

CVE-2026-55832 - Tract is a tiny, no-nonsense, self-contained TensorFlow and ONNX inference toolkit. Prior to 0.21.17

CVE-2026-55253 - LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to l

CVE-2026-55091 - flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to

CVE-2026-54723 - devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.

CVE-2026-54567 - Flask-Reuploaded provides file uploads for Flask. From 1.5.0 until 1.6.0, UploadSet.save(storage, na

CVE-2026-54182 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54181 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54180 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54178 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54177 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54176 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54175 - backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of

CVE-2026-54150 - next-video is a library for adding video to Next.js applications. Prior to 2.8.1, the GET endpoint e

CVE-2026-54087 - EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, Fi

CVE-2026-53752 - docx4j is an open source Java library for creating, editing, and saving OpenXML packages, including

CVE-2026-53659 - http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0

CVE-2026-53495 - containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, container

CVE-2026-50276 - dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not e

CVE-2026-50270 - dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enf

CVE-2026-50157 - Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until

CVE-2026-49400 - October System provides the system module for October Content Management System. Prior to versions 3

CVE-2026-49250 - Conform, a type-safe form validation library, allows the parsing of nested objects in the form of ob

CVE-2026-47256 - OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instr

CVE-2026-46696 - October System provides the system module for October Content Management System. Versions prior to 3

CVE-2026-44162 - fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the in_s3

CVE-2026-34151 - XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn

CVE-2026-19542 - Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one p

CVE-2026-19499 - Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past the end of th

CVE-2026-90804 - A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_w

CVE-2026-90803 - A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is t

CVE-2026-90802 - A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file

CVE-2026-90801 - A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of

CVE-2026-90796 - A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown

CVE-2026-84445 - gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with

CVE-2026-76461 - A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could

CVE-2026-76443 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Em

CVE-2026-76442 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Em

CVE-2026-76441 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Em

CVE-2026-76440 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Em

CVE-2026-61701 - Laravel MagicLink creates links for authentication without a password or for accessing private conte

CVE-2026-59960 - Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.

CVE-2026-57579 - Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15

CVE-2026-57497 - webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNex

CVE-2026-55837 - dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.20.0, the local OAut

CVE-2026-55451 - gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2

CVE-2026-55416 - Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026

CVE-2026-55102 - hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, eve

CVE-2026-55073 - WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications tha

CVE-2026-55072 - Pimcore is an Open Source Data & Experience Management Platform. Prior to 2026.1.5, an authenticated

CVE-2026-54452 - safeurl is a server-side request forgery protection library. Prior to 0.2.4, the privateNetworks lis

CVE-2026-54156 - node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-glo

CVE-2026-54155 - node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the UserNameIde

CVE-2026-53496 - ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load() and the async

CVE-2026-20353 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Em

CVE-2026-15923 - The Zephyr SDIO subsystem function sdio_io_rw_extended_helper() in subsys/sd/sdio.c finishes transfe

CVE-2026-90996 - A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a ze

CVE-2026-90995 - A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to conn

CVE-2026-90994 - A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's