Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: cwe Tag: cwe-789 Clear
ID Title
CVE-2026-77354 Vulnerability in github.com/getkin/kin-openapi (CVE-2026-77354)
vulnerability in github.com/getkin/kin-openapi (CVE-2026-77354). Risk of unauthorized operations or information disclosure. Exploitable via `GET /whatever`. Mitigation: upgrade to `0.142.0` or later.
CVE-2026-44253 Vulnerability in CVE-2026-44253 (CVE-2026-44253)
vulnerability in CVE-2026-44253 (CVE-2026-44253). Risk of unauthorized operations or information disclosure.
CVE-2026-17535 Out-of-Bounds Read in dos (CVE-2026-17535)
vulnerability in dos (CVE-2026-17535). Risk of unauthorized operations or information disclosure.
CVE-2026-44630 Vulnerability in apache (CVE-2026-44630)
vulnerability in apache (CVE-2026-44630). Risk of unauthorized operations or information disclosure.
CVE-2026-71314 Vulnerability in nuxt (CVE-2026-71314)
vulnerability in nuxt (CVE-2026-71314). Risk of unauthorized operations or information disclosure. Exploitable via ``ssrRenderList``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-54638 Vulnerability in github.com/gotd/td (CVE-2026-54638)
vulnerability in github.com/gotd/td (CVE-2026-54638). Risk of unauthorized operations or information disclosure. Exploitable via ``dataLen``. Mitigation: upgrade to `0.145.1` or later.
CVE-2026-54890 Vulnerability in c (CVE-2026-54890)
vulnerability in c (CVE-2026-54890). Risk of unauthorized operations or information disclosure.
CVE-2026-47667 Vulnerability in c (CVE-2026-47667)
vulnerability in c (CVE-2026-47667). Risk of unauthorized operations or information disclosure. Exploitable via ``fread``.
CVE-2026-44453 Vulnerability in dos (CVE-2026-44453)
vulnerability in dos (CVE-2026-44453). Risk of unauthorized operations or information disclosure.
CVE-2026-55407 Vulnerability in buffa (CVE-2026-55407)
vulnerability in buffa (CVE-2026-55407). Risk of unauthorized operations or information disclosure. Exploitable via ``decode_unknown_field``. Mitigation: upgrade to `0.8.0` or later.
CVE-2026-59204 Vulnerability in pillow (CVE-2026-59204)
vulnerability in pillow (CVE-2026-59204). Risk of unauthorized operations or information disclosure. Exploitable via ``total_component_width``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-55782 Vulnerability in cpp (CVE-2026-55782)
vulnerability in cpp (CVE-2026-55782). Risk of unauthorized operations or information disclosure.
CVE-2026-55781 Vulnerability in cpp (CVE-2026-55781)
vulnerability in cpp (CVE-2026-55781). Risk of unauthorized operations or information disclosure.
CVE-2026-40006 Vulnerability in apache (CVE-2026-40006)
vulnerability in apache (CVE-2026-40006). Risk of unauthorized operations or information disclosure.
CVE-2026-14683 Vulnerability in CVE-2026-14683 (CVE-2026-14683)
vulnerability in CVE-2026-14683 (CVE-2026-14683). Risk of unauthorized operations or information disclosure.
CVE-2026-14684 Vulnerability in CVE-2026-14684 (CVE-2026-14684)
vulnerability in CVE-2026-14684 (CVE-2026-14684). Risk of unauthorized operations or information disclosure.
CVE-2026-11946 Vulnerability in CVE-2026-11946 (CVE-2026-11946)
vulnerability in CVE-2026-11946 (CVE-2026-11946). Risk of unauthorized operations or information disclosure.
CVE-2026-33592 Vulnerability in CVE-2026-33592 (CVE-2026-33592)
vulnerability in CVE-2026-33592 (CVE-2026-33592). Risk of unauthorized operations or information disclosure.
CVE-2026-54448 Vulnerability in github.com/aquasecurity/trivy (CVE-2026-54448)
vulnerability in github.com/aquasecurity/trivy (CVE-2026-54448). Risk of unauthorized operations or information disclosure. Exploitable via ``archive.LoadArchiveFiles``. Mitigation: upgrade to `0.71.0` or later.
CVE-2026-48502 Vulnerability in MessagePack (CVE-2026-48502)
vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.
CVE-2026-47734 Vulnerability in dulwich (CVE-2026-47734)
vulnerability in dulwich (CVE-2026-47734). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.5` or later.
CVE-2026-42946 Vulnerability in nginx (CVE-2026-42946)
vulnerability in nginx (CVE-2026-42946). Confidential information can be exposed externally. Mitigation: upgrade to `1.30.1` or later.
CVE-2026-42189 Vulnerability in russh (CVE-2026-42189)
vulnerability in russh (CVE-2026-42189). Risk of unauthorized operations or information disclosure. Exploitable via ``read_userauth_info_response``. Mitigation: upgrade to `0.60.1` or later.
CVE-2026-42582 Vulnerability in io.netty:netty-codec-http3 (CVE-2026-42582)
vulnerability in io.netty:netty-codec-http3 (CVE-2026-42582). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.13.Final` or later.
CVE-2026-43868 Vulnerability in thrift (CVE-2026-43868)
vulnerability in thrift (CVE-2026-43868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.0` or later.
CVE-2026-42154 Vulnerability in github.com/prometheus/prometheus (CVE-2026-42154)
vulnerability in github.com/prometheus/prometheus (CVE-2026-42154). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.3` or later.
CVE-2026-42440 Vulnerability in org.apache.opennlp:opennlp-tools (CVE-2026-42440)
vulnerability in org.apache.opennlp:opennlp-tools (CVE-2026-42440). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.0-M3` or later.
CVE-2026-25985 Vulnerability in imagemagick (CVE-2026-25985)
vulnerability in imagemagick (CVE-2026-25985). Risk of unauthorized operations or information disclosure.
CVE-2026-22188 Vulnerability in dos (CVE-2026-22188)
vulnerability in dos (CVE-2026-22188). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →