Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: cwe-180 Clear
ID Title
CVE-2026-72917 Vulnerability in CVE-2026-72917 (CVE-2026-72917)
vulnerability in CVE-2026-72917 (CVE-2026-72917). Confidential information can be exposed externally. Exploitable via `POST /api/system/recover-account`.
CVE-2026-69246 Vulnerability in guzzlehttp/guzzle (CVE-2026-69246)
vulnerability in guzzlehttp/guzzle (CVE-2026-69246). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `7.15.2` or later.
CVE-2026-69245 Vulnerability in guzzlehttp/guzzle (CVE-2026-69245)
vulnerability in guzzlehttp/guzzle (CVE-2026-69245). Risk of unauthorized operations or information disclosure. Exploitable via ``Domain``. Mitigation: upgrade to `7.15.2` or later.
CVE-2026-73420 Vulnerability in @auth/core (CVE-2026-73420)
vulnerability in @auth/core (CVE-2026-73420). Risk of unauthorized operations or information disclosure. Exploitable via ``normalizeIdentifier``. Mitigation: upgrade to `0.41.3` or later.
CVE-2026-48721 Vulnerability in c (CVE-2026-48721)
vulnerability in c (CVE-2026-48721). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2026.05.06.15.42.stable` or later.
CVE-2026-39409 Vulnerability in hono (CVE-2026-39409)
vulnerability in hono (CVE-2026-39409). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.12` or later.
CVE-2026-39364 Vulnerability in vitejs (CVE-2026-39364)
vulnerability in vitejs (CVE-2026-39364). Confidential information can be exposed externally. Mitigation: upgrade to `7.3.2` or later.
CVE-2026-34786 Vulnerability in rack (CVE-2026-34786)
vulnerability in rack (CVE-2026-34786). Risk of unauthorized operations or information disclosure. Exploitable via ``header_rules``. Mitigation: upgrade to `3.2.6` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →