Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-72917 |
|
Vulnerability in CVE-2026-72917 (CVE-2026-72917)
vulnerability in CVE-2026-72917 (CVE-2026-72917). Confidential information can be exposed externally. Exploitable via `POST /api/system/recover-account`.
|
| CVE-2026-69246 |
|
Vulnerability in guzzlehttp/guzzle (CVE-2026-69246)
vulnerability in guzzlehttp/guzzle (CVE-2026-69246). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `7.15.2` or later.
|
| CVE-2026-69245 |
|
Vulnerability in guzzlehttp/guzzle (CVE-2026-69245)
vulnerability in guzzlehttp/guzzle (CVE-2026-69245). Risk of unauthorized operations or information disclosure. Exploitable via ``Domain``. Mitigation: upgrade to `7.15.2` or later.
|
| CVE-2026-73420 |
|
Vulnerability in @auth/core (CVE-2026-73420)
vulnerability in @auth/core (CVE-2026-73420). Risk of unauthorized operations or information disclosure. Exploitable via ``normalizeIdentifier``. Mitigation: upgrade to `0.41.3` or later.
|
| CVE-2026-48721 |
|
Vulnerability in c (CVE-2026-48721)
vulnerability in c (CVE-2026-48721). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2026.05.06.15.42.stable` or later.
|
| CVE-2026-39409 |
|
Vulnerability in hono (CVE-2026-39409)
vulnerability in hono (CVE-2026-39409). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.12` or later.
|
| CVE-2026-39364 |
|
Vulnerability in vitejs (CVE-2026-39364)
vulnerability in vitejs (CVE-2026-39364). Confidential information can be exposed externally. Mitigation: upgrade to `7.3.2` or later.
|
| CVE-2026-34786 |
|
Vulnerability in rack (CVE-2026-34786)
vulnerability in rack (CVE-2026-34786). Risk of unauthorized operations or information disclosure. Exploitable via ``header_rules``. Mitigation: upgrade to `3.2.6` or later.
|