Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Tag: cwe-248 Clear
ID Title
CVE-2026-82417 Vulnerability in express (CVE-2026-82417)
vulnerability in express (CVE-2026-82417). Risk of unauthorized operations or information disclosure. Exploitable via ``qs.stringify``. Mitigation: upgrade to `6.16.0` or later.
CVE-2026-77078 Vulnerability in dos (CVE-2026-77078)
vulnerability in dos (CVE-2026-77078). Risk of unauthorized operations or information disclosure.
CVE-2026-54553 Information Disclosure in starlette-admin (CVE-2026-54553)
vulnerability in starlette-admin (CVE-2026-54553). Risk of unauthorized operations or information disclosure. Exploitable via ``metadata``. Mitigation: upgrade to `0.16.1` or later.
CVE-2026-23938 Vulnerability in dos (CVE-2026-23938)
vulnerability in dos (CVE-2026-23938). Risk of unauthorized operations or information disclosure.
CVE-2026-73088 Vulnerability in CVE-2026-73088 (CVE-2026-73088)
vulnerability in CVE-2026-73088 (CVE-2026-73088). Risk of unauthorized operations or information disclosure.
CVE-2026-62909 Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
CVE-2026-73418 Vulnerability in @auth/core (CVE-2026-73418)
vulnerability in @auth/core (CVE-2026-73418). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.41.3` or later.
CVE-2026-55780 Vulnerability in cpp (CVE-2026-55780)
vulnerability in cpp (CVE-2026-55780). Risk of unauthorized operations or information disclosure.
CVE-2026-59892 Vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892)
vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892). Risk of unauthorized operations or information disclosure. Exploitable via ``URIError``. Mitigation: upgrade to `2.9.0` or later.
CVE-2026-59875 Vulnerability in tar (CVE-2026-59875)
vulnerability in tar (CVE-2026-59875). Risk of unauthorized operations or information disclosure. Exploitable via ``NUL``. Mitigation: upgrade to `7.5.17` or later.
CVE-2026-53530 Vulnerability in ratex-parser (CVE-2026-53530)
vulnerability in ratex-parser (CVE-2026-53530). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_symbol_inner``. Mitigation: upgrade to `0.1.11` or later.
CVE-2026-14631 Vulnerability in webpack-dev-server (CVE-2026-14631)
vulnerability in webpack-dev-server (CVE-2026-14631). Risk of unauthorized operations or information disclosure. Exploitable via ``Host``. Mitigation: upgrade to `5.2.6` or later.
CVE-2026-52739 Vulnerability in zebra-state (CVE-2026-52739)
vulnerability in zebra-state (CVE-2026-52739). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `7.0.0` or later.
CVE-2026-52738 Vulnerability in zebra-state (CVE-2026-52738)
vulnerability in zebra-state (CVE-2026-52738). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `7.0.0` or later.
CVE-2026-52731 Vulnerability in zebra-rpc (CVE-2026-52731)
vulnerability in zebra-rpc (CVE-2026-52731). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `8.0.0` or later.
CVE-2026-14181 Vulnerability in dos (CVE-2026-14181)
vulnerability in dos (CVE-2026-14181). Risk of unauthorized operations or information disclosure.
CVE-2026-54775 Vulnerability in CoreWCF.Kafka (CVE-2026-54775)
vulnerability in CoreWCF.Kafka (CVE-2026-54775). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.1` or later.
CVE-2026-55517 Vulnerability in deno (CVE-2026-55517)
vulnerability in deno (CVE-2026-55517). Risk of unauthorized operations or information disclosure. Exploitable via ``WebSocket``. Mitigation: upgrade to `2.7.5` or later.
CVE-2026-48068 Vulnerability in @grpc/grpc-js (CVE-2026-48068)
vulnerability in @grpc/grpc-js (CVE-2026-48068). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.4` or later.
CVE-2026-48069 Vulnerability in @grpc/grpc-js (CVE-2026-48069)
vulnerability in @grpc/grpc-js (CVE-2026-48069). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.14.4` or later.
CVE-2026-48038 Vulnerability in joi (CVE-2026-48038)
vulnerability in joi (CVE-2026-48038). Risk of unauthorized operations or information disclosure. Exploitable via ``RangeError``. Mitigation: upgrade to `17.13.4` or later.
CVE-2026-34986 Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986)
vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.5` or later.
CVE-2026-44905 Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza....
Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the cryptographic verification pipeline of Vanetza. When processing incoming V2X messages, the ASN.1 decoder accepts the structure as syntactically val...
CVE-2026-43988 Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When pro...
Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fi...
CVE-2026-46545 Vulnerability in nimiq-primitives (CVE-2026-46545)
vulnerability in nimiq-primitives (CVE-2026-46545). Risk of unauthorized operations or information disclosure. Exploitable via ``RequestChunk``. Mitigation: upgrade to `1.5.0` or later.
CVE-2026-45554 Vulnerability in nicegui (CVE-2026-45554)
vulnerability in nicegui (CVE-2026-45554). Risk of unauthorized operations or information disclosure. Exploitable via ``RuntimeError``. Mitigation: upgrade to `3.12.0` or later.
CVE-2026-44001 Vulnerability in vm2 (CVE-2026-44001)
vulnerability in vm2 (CVE-2026-44001). Risk of unauthorized operations or information disclosure. Exploitable via ``onRejected``. Mitigation: upgrade to `3.11.0` or later.
CVE-2026-42544 Vulnerability in granian (CVE-2026-42544)
vulnerability in granian (CVE-2026-42544). Risk of unauthorized operations or information disclosure. Exploitable via ``Err``. Mitigation: upgrade to `2.7.4` or later.
CVE-2026-42545 Vulnerability in granian (CVE-2026-42545)
vulnerability in granian (CVE-2026-42545). Risk of unauthorized operations or information disclosure. Exploitable via ``Location``. Mitigation: upgrade to `2.7.4` or later.
CVE-2026-41585 Vulnerability in zebra-rpc (CVE-2026-41585)
vulnerability in zebra-rpc (CVE-2026-41585). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `6.0.2` or later.
CVE-2026-46689 Vulnerability in scim_proto (CVE-2026-46689)
vulnerability in scim_proto (CVE-2026-46689). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``. Mitigation: upgrade to `1.9.3` or later.
CVE-2026-7183 Vulnerability in cpp (CVE-2026-7183)
vulnerability in cpp (CVE-2026-7183). Risk of unauthorized operations or information disclosure.
CVE-2026-34752 Vulnerability in haraka-project (CVE-2026-34752)
vulnerability in haraka-project (CVE-2026-34752). Risk of unauthorized operations or information disclosure.
CVE-2026-33939 Vulnerability in dos (CVE-2026-33939)
vulnerability in dos (CVE-2026-33939). Risk of unauthorized operations or information disclosure. Exploitable via ``undefined``.
CVE-2026-2229 Vulnerability in c (CVE-2026-2229)
vulnerability in c (CVE-2026-2229). Risk of unauthorized operations or information disclosure.
CVE-2026-31812 Vulnerability in dos (CVE-2026-31812)
vulnerability in dos (CVE-2026-31812). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.11.14` or later.
CVE-2025-59465 Vulnerability in node (CVE-2025-59465)
vulnerability in node (CVE-2025-59465). Risk of unauthorized operations or information disclosure. Exploitable via ``HPACK``. Mitigation: upgrade to `20.20.0, 22.22.0, 24.13.0, 25.3.0` or later.
CVE-2018-7852 Vulnerability in c (CVE-2018-7852)
vulnerability in c (CVE-2018-7852). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →