Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55520 |
|
Vulnerability in Protego (CVE-2026-55520)
vulnerability in Protego (CVE-2026-55520). Risk of unauthorized operations or information disclosure. Exploitable via ``robots.txt``. Mitigation: upgrade to `0.6.2` or later.
|
| CVE-2026-80205 |
|
Vulnerability in dos (CVE-2026-80205)
vulnerability in dos (CVE-2026-80205). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70656 |
|
Vulnerability in CVE-2026-70656 (CVE-2026-70656)
vulnerability in CVE-2026-70656 (CVE-2026-70656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62672 |
|
Vulnerability in CVE-2026-62672 (CVE-2026-62672)
vulnerability in CVE-2026-62672 (CVE-2026-62672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59893 |
|
Vulnerability in sqlparse (CVE-2026-59893)
vulnerability in sqlparse (CVE-2026-59893). Risk of unauthorized operations or information disclosure. Exploitable via ``SQL_REGEX``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-54284 |
|
Vulnerability in sqlparse (CVE-2026-54284)
vulnerability in sqlparse (CVE-2026-54284). Risk of unauthorized operations or information disclosure. Exploitable via ``sqlparse``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-67991 |
|
Vulnerability in dos (CVE-2026-67991)
vulnerability in dos (CVE-2026-67991). Confidential information can be exposed externally.
|
| CVE-2026-67422 |
|
Vulnerability in pymdown-extensions (CVE-2026-67422)
vulnerability in pymdown-extensions (CVE-2026-67422). Risk of unauthorized operations or information disclosure. Exploitable via ``caret``. Mitigation: upgrade to `10.16.1` or later.
|
| CVE-2026-70493 |
|
Vulnerability in open-webui (CVE-2026-70493)
vulnerability in open-webui (CVE-2026-70493). Risk of unauthorized operations or information disclosure. Exploitable via ``ENABLE_KB_EXEC``. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-69207 |
|
Vulnerability in hono (CVE-2026-69207)
vulnerability in hono (CVE-2026-69207). Risk of unauthorized operations or information disclosure. Exploitable via ``OPTIONS``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-62237 |
|
Vulnerability in dos (CVE-2026-62237)
vulnerability in dos (CVE-2026-62237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57584 |
|
Vulnerability in phalcon/cphalcon (CVE-2026-57584)
vulnerability in phalcon/cphalcon (CVE-2026-57584). Risk of unauthorized operations or information disclosure. Exploitable via ``URI_SOURCE_GET_URL``. Mitigation: upgrade to `5.15.0` or later.
|
| CVE-2026-49485 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.4.2` or later.
|
| CVE-2026-59928 |
|
Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59925 |
|
Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59922 |
|
Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-58578 |
|
Vulnerability in dos (CVE-2026-58578)
vulnerability in dos (CVE-2026-58578). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48801 |
|
Vulnerability in linkify-it (CVE-2026-48801)
vulnerability in linkify-it (CVE-2026-48801). Risk of unauthorized operations or information disclosure. Exploitable via ``LinkifyIt.prototype.match``. Mitigation: upgrade to `5.0.1` or later.
|
| CVE-2026-49851 |
|
Vulnerability in mistune (CVE-2026-49851)
vulnerability in mistune (CVE-2026-49851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-49293 |
|
Vulnerability in js-toml (CVE-2026-49293)
vulnerability in js-toml (CVE-2026-49293). Risk of unauthorized operations or information disclosure. Exploitable via ``parseBigInt``. Mitigation: upgrade to `1.1.1` or later.
|
| CVE-2026-55470 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-55470)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-55470). Risk of unauthorized operations or information disclosure. Exploitable via ``RegexTimeout``. Mitigation: upgrade to `6.9.10` or later.
|
| CVE-2026-48125 |
|
Vulnerability in ua-parser-js (CVE-2026-48125)
vulnerability in ua-parser-js (CVE-2026-48125). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.10` or later.
|
| CVE-2026-54268 |
|
Vulnerability in @angular/common (CVE-2026-54268)
vulnerability in @angular/common (CVE-2026-54268). Risk of unauthorized operations or information disclosure. Exploitable via ``formatDate``.
|
| CVE-2026-52778 |
|
Code Injection in yeswiki/yeswiki (CVE-2026-52778)
code injection in yeswiki/yeswiki (CVE-2026-52778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.6.6` or later.
|
| CVE-2026-11478 |
|
Vulnerability in c (CVE-2026-11478)
vulnerability in c (CVE-2026-11478). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44496 |
|
Vulnerability in axios (CVE-2026-44496)
vulnerability in axios (CVE-2026-44496). Risk of unauthorized operations or information disclosure. Exploitable via ``document.cookie``. Mitigation: upgrade to `0.32.0` or later.
|
| CVE-2026-8888 |
|
Vulnerability in dos (CVE-2026-8888)
vulnerability in dos (CVE-2026-8888). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-45756 |
|
Vulnerability in symfony/json-path (CVE-2026-45756)
vulnerability in symfony/json-path (CVE-2026-45756). Risk of unauthorized operations or information disclosure. Exploitable via ``JsonPath``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45305 |
|
Vulnerability in symfony/yaml (CVE-2026-45305)
vulnerability in symfony/yaml (CVE-2026-45305). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45133 |
|
Vulnerability in symfony/yaml (CVE-2026-45133)
vulnerability in symfony/yaml (CVE-2026-45133). Risk of unauthorized operations or information disclosure. Exploitable via ``Parser``. Mitigation: upgrade to `8.0.12` or later.
|
| CVE-2026-45617 |
|
Vulnerability in liquidjs (CVE-2026-45617)
vulnerability in liquidjs (CVE-2026-45617). Risk of unauthorized operations or information disclosure. Exploitable via ``strip_html``. Mitigation: upgrade to `10.26.0` or later.
|
| CVE-2026-9496 |
|
Vulnerability in pacote (CVE-2026-9496)
vulnerability in pacote (CVE-2026-9496). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `21.5.1` or later.
|
| CVE-2026-47138 |
|
Vulnerability in parse-server (CVE-2026-47138)
vulnerability in parse-server (CVE-2026-47138). Risk of unauthorized operations or information disclosure. Exploitable via ``clientSDK``. Mitigation: upgrade to `8.6.77` or later.
|
| CVE-2026-45409 |
|
Vulnerability in idna (CVE-2026-45409)
vulnerability in idna (CVE-2026-45409). Risk of unauthorized operations or information disclosure. Exploitable via ``valid_contexto``. Mitigation: upgrade to `3.15` or later.
|
| CVE-2026-45367 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-45367)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-45367). Risk of unauthorized operations or information disclosure. Exploitable via ``funcMatches``. Mitigation: upgrade to `6.9.7` or later.
|
| CVE-2026-34939 |
|
Vulnerability in praison (CVE-2026-34939)
vulnerability in praison (CVE-2026-34939). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4926 |
|
Vulnerability in c (CVE-2026-4926)
vulnerability in c (CVE-2026-4926). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-28356 |
|
Vulnerability in dos (CVE-2026-28356)
vulnerability in dos (CVE-2026-28356). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.2` or later.
|
| CVE-2025-69873 |
|
Vulnerability in dos (CVE-2025-69873)
vulnerability in dos (CVE-2025-69873). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24001 |
|
Vulnerability in kpdecker (CVE-2026-24001)
vulnerability in kpdecker (CVE-2026-24001). Risk of unauthorized operations or information disclosure. Exploitable via ``parsePatch``.
|
| CVE-2026-23956 |
|
Vulnerability in seroval (CVE-2026-23956)
vulnerability in seroval (CVE-2026-23956). Risk of unauthorized operations or information disclosure. Exploitable via ``Seroval``. Mitigation: upgrade to `1.4.1` or later.
|
| CVE-2026-0621 |
|
Vulnerability in @modelcontextprotocol/sdk (CVE-2026-0621)
vulnerability in @modelcontextprotocol/sdk (CVE-2026-0621). Risk of unauthorized operations or information disclosure. Exploitable via ``UriTemplate``. Mitigation: upgrade to `1.25.2` or later.
|
| CVE-2015-8315 |
|
Vulnerability in dos (CVE-2015-8315)
vulnerability in dos (CVE-2015-8315). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-8854 |
|
Vulnerability in dos (CVE-2015-8854)
vulnerability in dos (CVE-2015-8854). Risk of unauthorized operations or information disclosure.
|