Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-77354 |
|
Vulnerability in github.com/getkin/kin-openapi (CVE-2026-77354)
vulnerability in github.com/getkin/kin-openapi (CVE-2026-77354). Risk of unauthorized operations or information disclosure. Exploitable via `GET /whatever`. Mitigation: upgrade to `0.142.0` or later.
|
| CVE-2026-44253 |
|
Vulnerability in CVE-2026-44253 (CVE-2026-44253)
vulnerability in CVE-2026-44253 (CVE-2026-44253). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17535 |
|
Out-of-Bounds Read in dos (CVE-2026-17535)
vulnerability in dos (CVE-2026-17535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44630 |
|
Vulnerability in apache (CVE-2026-44630)
vulnerability in apache (CVE-2026-44630). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71314 |
|
Vulnerability in nuxt (CVE-2026-71314)
vulnerability in nuxt (CVE-2026-71314). Risk of unauthorized operations or information disclosure. Exploitable via ``ssrRenderList``. Mitigation: upgrade to `3.21.10` or later.
|
| CVE-2026-54638 |
|
Vulnerability in github.com/gotd/td (CVE-2026-54638)
vulnerability in github.com/gotd/td (CVE-2026-54638). Risk of unauthorized operations or information disclosure. Exploitable via ``dataLen``. Mitigation: upgrade to `0.145.1` or later.
|
| CVE-2026-54890 |
|
Vulnerability in c (CVE-2026-54890)
vulnerability in c (CVE-2026-54890). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47667 |
|
Vulnerability in c (CVE-2026-47667)
vulnerability in c (CVE-2026-47667). Risk of unauthorized operations or information disclosure. Exploitable via ``fread``.
|
| CVE-2026-44453 |
|
Vulnerability in dos (CVE-2026-44453)
vulnerability in dos (CVE-2026-44453). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55407 |
|
Vulnerability in buffa (CVE-2026-55407)
vulnerability in buffa (CVE-2026-55407). Risk of unauthorized operations or information disclosure. Exploitable via ``decode_unknown_field``. Mitigation: upgrade to `0.8.0` or later.
|
| CVE-2026-59204 |
|
Vulnerability in pillow (CVE-2026-59204)
vulnerability in pillow (CVE-2026-59204). Risk of unauthorized operations or information disclosure. Exploitable via ``total_component_width``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-55782 |
|
Vulnerability in cpp (CVE-2026-55782)
vulnerability in cpp (CVE-2026-55782). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55781 |
|
Vulnerability in cpp (CVE-2026-55781)
vulnerability in cpp (CVE-2026-55781). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40006 |
|
Vulnerability in apache (CVE-2026-40006)
vulnerability in apache (CVE-2026-40006). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14683 |
|
Vulnerability in CVE-2026-14683 (CVE-2026-14683)
vulnerability in CVE-2026-14683 (CVE-2026-14683). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14684 |
|
Vulnerability in CVE-2026-14684 (CVE-2026-14684)
vulnerability in CVE-2026-14684 (CVE-2026-14684). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11946 |
|
Vulnerability in CVE-2026-11946 (CVE-2026-11946)
vulnerability in CVE-2026-11946 (CVE-2026-11946). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33592 |
|
Vulnerability in CVE-2026-33592 (CVE-2026-33592)
vulnerability in CVE-2026-33592 (CVE-2026-33592). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54448 |
|
Vulnerability in github.com/aquasecurity/trivy (CVE-2026-54448)
vulnerability in github.com/aquasecurity/trivy (CVE-2026-54448). Risk of unauthorized operations or information disclosure. Exploitable via ``archive.LoadArchiveFiles``. Mitigation: upgrade to `0.71.0` or later.
|
| CVE-2026-48502 |
|
Vulnerability in MessagePack (CVE-2026-48502)
vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-47734 |
|
Vulnerability in dulwich (CVE-2026-47734)
vulnerability in dulwich (CVE-2026-47734). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.5` or later.
|
| CVE-2026-42946 |
|
Vulnerability in nginx (CVE-2026-42946)
vulnerability in nginx (CVE-2026-42946). Confidential information can be exposed externally. Mitigation: upgrade to `1.30.1` or later.
|
| CVE-2026-42189 |
|
Vulnerability in russh (CVE-2026-42189)
vulnerability in russh (CVE-2026-42189). Risk of unauthorized operations or information disclosure. Exploitable via ``read_userauth_info_response``. Mitigation: upgrade to `0.60.1` or later.
|
| CVE-2026-42582 |
|
Vulnerability in io.netty:netty-codec-http3 (CVE-2026-42582)
vulnerability in io.netty:netty-codec-http3 (CVE-2026-42582). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.13.Final` or later.
|
| CVE-2026-43868 |
|
Vulnerability in thrift (CVE-2026-43868)
vulnerability in thrift (CVE-2026-43868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.0` or later.
|
| CVE-2026-42154 |
|
Vulnerability in github.com/prometheus/prometheus (CVE-2026-42154)
vulnerability in github.com/prometheus/prometheus (CVE-2026-42154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.3` or later.
|
| CVE-2026-42440 |
|
Vulnerability in org.apache.opennlp:opennlp-tools (CVE-2026-42440)
vulnerability in org.apache.opennlp:opennlp-tools (CVE-2026-42440). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.0-M3` or later.
|
| CVE-2026-25985 |
|
Vulnerability in imagemagick (CVE-2026-25985)
vulnerability in imagemagick (CVE-2026-25985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-22188 |
|
Vulnerability in dos (CVE-2026-22188)
vulnerability in dos (CVE-2026-22188). Risk of unauthorized operations or information disclosure.
|