Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MINI-frfh-fpw5-6fcc |
|
MINI-frfh-fpw5-6fcc |
| MINI-mp68-fh2p-3fhp |
|
MINI-mp68-fh2p-3fhp |
| MINI-gcpx-2fm7-c67c |
|
MINI-gcpx-2fm7-c67c |
| CVE-2026-53539 |
|
Vulnerability in python-multipart (CVE-2026-53539)
vulnerability in python-multipart (CVE-2026-53539). Risk of unauthorized operations or information disclosure. Exploitable via ``QuerystringParser``. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2026-53540 |
|
Vulnerability in python-multipart (CVE-2026-53540)
vulnerability in python-multipart (CVE-2026-53540). Risk of unauthorized operations or information disclosure. Exploitable via ``MultipartParser``. Mitigation: upgrade to `0.0.31` or later.
|
| MINI-w9ph-v866-c555 |
|
MINI-w9ph-v866-c555 |
| MINI-52hf-3754-wp59 |
|
MINI-52hf-3754-wp59 |
| MINI-r25j-fj79-p64h |
|
MINI-r25j-fj79-p64h |
| MINI-rmqh-xwrw-h2ff |
|
MINI-rmqh-xwrw-h2ff |
| MINI-qxjm-g835-4rgp |
|
MINI-qxjm-g835-4rgp |
| CVE-2026-53538 |
|
Vulnerability in python-multipart (CVE-2026-53538)
vulnerability in python-multipart (CVE-2026-53538). Risk of unauthorized operations or information disclosure. Exploitable via ``QuerystringParser``. Mitigation: upgrade to `0.0.30` or later.
|
| MINI-76fv-2425-fwr8 |
|
MINI-76fv-2425-fwr8 |
| CVE-2026-53537 |
|
Vulnerability in python-multipart (CVE-2026-53537)
vulnerability in python-multipart (CVE-2026-53537). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_options_header``. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2026-54257 |
|
Vulnerability in electron (CVE-2026-54257)
vulnerability in electron (CVE-2026-54257). Risk of unauthorized operations or information disclosure. Exploitable via ``Buffer``. Mitigation: upgrade to `42.3.3` or later.
|
| CVE-2026-49853 |
|
Information Disclosure in tornado (CVE-2026-49853)
vulnerability in tornado (CVE-2026-49853). Confidential information can be exposed externally. Exploitable via `Host header`. Mitigation: upgrade to `6.5.6` or later.
|
| CVE-2026-49855 |
|
Vulnerability in tornado (CVE-2026-49855)
vulnerability in tornado (CVE-2026-49855). Risk of unauthorized operations or information disclosure. Exploitable via ``HTTPServer``. Mitigation: upgrade to `6.5.6` or later.
|
| GHSA-gwv6-f7j6-4xc8 |
|
Vulnerability in postcss-minify-selector (GHSA-gwv6-f7j6-4xc8)
vulnerability in postcss-minify-selector (GHSA-gwv6-f7j6-4xc8). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54444 |
|
Vulnerability in CVE-2026-54444 (CVE-2026-54444)
vulnerability in CVE-2026-54444 (CVE-2026-54444). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54296 |
|
Vulnerability in CVE-2026-54296 (CVE-2026-54296)
vulnerability in CVE-2026-54296 (CVE-2026-54296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54295 |
|
Vulnerability in CVE-2026-54295 (CVE-2026-54295)
vulnerability in CVE-2026-54295 (CVE-2026-54295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54294 |
|
Vulnerability in CVE-2026-54294 (CVE-2026-54294)
vulnerability in CVE-2026-54294 (CVE-2026-54294). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54292 |
|
Vulnerability in CVE-2026-54292 (CVE-2026-54292)
vulnerability in CVE-2026-54292 (CVE-2026-54292). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53705 |
|
Vulnerability in CVE-2026-53705 (CVE-2026-53705)
vulnerability in CVE-2026-53705 (CVE-2026-53705). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53704 |
|
Out-of-Bounds Read in CVE-2026-53704 (CVE-2026-53704)
vulnerability in CVE-2026-53704 (CVE-2026-53704). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53703 |
|
Out-of-Bounds Read in CVE-2026-53703 (CVE-2026-53703)
vulnerability in CVE-2026-53703 (CVE-2026-53703). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52722 |
|
Vulnerability in CVE-2026-52722 (CVE-2026-52722)
vulnerability in CVE-2026-52722 (CVE-2026-52722). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52721 |
|
Out-of-Bounds Read in CVE-2026-52721 (CVE-2026-52721)
vulnerability in CVE-2026-52721 (CVE-2026-52721). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52720 |
|
Vulnerability in CVE-2026-52720 (CVE-2026-52720)
vulnerability in CVE-2026-52720 (CVE-2026-52720). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52719 |
|
Out-of-Bounds Read in CVE-2026-52719 (CVE-2026-52719)
vulnerability in CVE-2026-52719 (CVE-2026-52719). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52718 |
|
Vulnerability in dos (CVE-2026-52718)
vulnerability in dos (CVE-2026-52718). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50892 |
|
Vulnerability in nginx (CVE-2026-50892)
vulnerability in nginx (CVE-2026-50892). Confidential information can be exposed externally.
|
| CVE-2026-50891 |
|
Vulnerability in github.com/mickael-kerjean/filestash (CVE-2026-50891)
vulnerability in github.com/mickael-kerjean/filestash (CVE-2026-50891). Confidential information can be exposed externally.
|
| CVE-2026-50890 |
|
SQL Injection in sqli (CVE-2026-50890)
SQL injection in sqli (CVE-2026-50890). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50889 |
|
Vulnerability in dos (CVE-2026-50889)
vulnerability in dos (CVE-2026-50889). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50888 |
|
SSRF (Server-Side Request Forgery) in koillection/koillection (CVE-2026-50888)
SSRF in koillection/koillection (CVE-2026-50888). Confidential information can be exposed externally. Mitigation: upgrade to `1.8.4` or later.
|
| CVE-2026-50887 |
|
SSRF (Server-Side Request Forgery) in shlinkio/shlink (CVE-2026-50887)
SSRF in shlinkio/shlink (CVE-2026-50887). Confidential information can be exposed externally.
|
| CVE-2026-50886 |
|
Vulnerability in grumpydictator/firefly-iii (CVE-2026-50886)
vulnerability in grumpydictator/firefly-iii (CVE-2026-50886). Confidential information can be exposed externally.
|
| CVE-2026-50885 |
|
Vulnerability in CVE-2026-50885 (CVE-2026-50885)
vulnerability in CVE-2026-50885 (CVE-2026-50885). Confidential information can be exposed externally.
|
| CVE-2026-50884 |
|
Vulnerability in github.com/statping-ng/statping-ng (CVE-2026-50884)
vulnerability in github.com/statping-ng/statping-ng (CVE-2026-50884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50883 |
|
Cross-Site Scripting (XSS) in CVE-2026-50883 (CVE-2026-50883)
cross-site scripting in CVE-2026-50883 (CVE-2026-50883). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50882 |
|
Vulnerability in dos (CVE-2026-50882)
vulnerability in dos (CVE-2026-50882). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50881 |
|
Vulnerability in CVE-2026-50881 (CVE-2026-50881)
vulnerability in CVE-2026-50881 (CVE-2026-50881). Confidential information can be exposed externally.
|
| CVE-2026-50880 |
|
Code Injection in youtransfer (CVE-2026-50880)
code injection in youtransfer (CVE-2026-50880). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50879 |
|
Vulnerability in github.com/andreimarcu/linx-server (CVE-2026-50879)
vulnerability in github.com/andreimarcu/linx-server (CVE-2026-50879). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50878 |
|
Vulnerability in dos (CVE-2026-50878)
vulnerability in dos (CVE-2026-50878). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50877 |
|
Path Traversal in path-traversal (CVE-2026-50877)
path traversal in path-traversal (CVE-2026-50877). Confidential information can be exposed externally.
|
| CVE-2026-50876 |
|
Cross-Site Scripting (XSS) in CVE-2026-50876 (CVE-2026-50876)
cross-site scripting in CVE-2026-50876 (CVE-2026-50876). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50875 |
|
Vulnerability in CVE-2026-50875 (CVE-2026-50875)
vulnerability in CVE-2026-50875 (CVE-2026-50875). Data can be tampered with by attackers.
|
| CVE-2026-50874 |
|
OS Command Injection in CVE-2026-50874 (CVE-2026-50874)
OS command injection in CVE-2026-50874 (CVE-2026-50874). Confidential information can be exposed externally.
|
| CVE-2026-50873 |
|
Unrestricted File Upload in CVE-2026-50873 (CVE-2026-50873)
vulnerability in CVE-2026-50873 (CVE-2026-50873). Successful exploitation can lead to full system takeover.
|