Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
UBUNTU-CVE-2026-53704 Vulnerability in gst-plugins-ugly1.0 (UBUNTU-CVE-2026-53704)
vulnerability in gst-plugins-ugly1.0 (UBUNTU-CVE-2026-53704). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-52722 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52722)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52722). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-52718 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52718)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52718). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-52719 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52719)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52719). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-52721 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52721)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52721). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-52720 Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52720)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52720). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2025-56814 Vulnerability in opencpn (UBUNTU-CVE-2025-56814)
vulnerability in opencpn (UBUNTU-CVE-2025-56814). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2025-70102 Vulnerability in dhcpcd (UBUNTU-CVE-2025-70102)
vulnerability in dhcpcd (UBUNTU-CVE-2025-70102). Risk of unauthorized operations or information disclosure.
CVE-2026-48125 Vulnerability in ua-parser-js (CVE-2026-48125)
vulnerability in ua-parser-js (CVE-2026-48125). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.10` or later.
CVE-2026-54271 Code Injection in protobufjs-cli (CVE-2026-54271)
code injection in protobufjs-cli (CVE-2026-54271). Confidential information can be exposed externally. Exploitable via ``pbjs``. Mitigation: upgrade to `2.5.0` or later.
MINI-wv32-r3f9-wvcq MINI-wv32-r3f9-wvcq
CVE-2026-54270 Vulnerability in protobufjs (CVE-2026-54270)
vulnerability in protobufjs (CVE-2026-54270). Risk of unauthorized operations or information disclosure. Exploitable via ``Reader``. Mitigation: upgrade to `8.5.0` or later.
CVE-2026-65899 Vulnerability in dompurify (CVE-2026-65899)
vulnerability in dompurify (CVE-2026-65899). Risk of unauthorized operations or information disclosure. Exploitable via ``TRUSTED_TYPES_POLICY``. Mitigation: upgrade to `3.4.9` or later.
GHSA-537c-gmf6-5ccf Out-of-Bounds Read in cryptography (GHSA-537c-gmf6-5ccf)
vulnerability in cryptography (GHSA-537c-gmf6-5ccf). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `48.0.1` or later.
MAL-2026-5833 Vulnerability in yunxin-overmind-comment (MAL-2026-5833)
vulnerability in yunxin-overmind-comment (MAL-2026-5833). Risk of unauthorized operations or information disclosure. Exploitable via ``scripts.postinstall``.
CVE-2026-54274 Vulnerability in aiohttp (CVE-2026-54274)
vulnerability in aiohttp (CVE-2026-54274). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
CVE-2026-54275 Vulnerability in aiohttp (CVE-2026-54275)
vulnerability in aiohttp (CVE-2026-54275). Risk of unauthorized operations or information disclosure. Exploitable via ``server_hostname``. Mitigation: upgrade to `3.14.1` or later.
MINI-hw7f-h9q2-rvc4 MINI-hw7f-h9q2-rvc4
CVE-2026-54280 Vulnerability in aiohttp (CVE-2026-54280)
vulnerability in aiohttp (CVE-2026-54280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
CVE-2026-54273 Vulnerability in aiohttp (CVE-2026-54273)
vulnerability in aiohttp (CVE-2026-54273). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
MINI-xmmh-f7mw-w67v MINI-xmmh-f7mw-w67v
CVE-2026-54278 Vulnerability in aiohttp (CVE-2026-54278)
vulnerability in aiohttp (CVE-2026-54278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
MINI-3qx6-f9v4-cm5f MINI-3qx6-f9v4-cm5f
MINI-83ph-r8pm-5rqv MINI-83ph-r8pm-5rqv
MINI-m92c-q42m-2j54 MINI-m92c-q42m-2j54
CVE-2026-54277 Vulnerability in aiohttp (CVE-2026-54277)
vulnerability in aiohttp (CVE-2026-54277). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
MINI-249f-gjvh-fwr5 MINI-249f-gjvh-fwr5
CVE-2026-54276 Information Disclosure in aiohttp (CVE-2026-54276)
vulnerability in aiohttp (CVE-2026-54276). Risk of unauthorized operations or information disclosure. Exploitable via ``DigestAuthMiddleware``. Mitigation: upgrade to `3.14.1` or later.
CVE-2026-54279 Vulnerability in aiohttp (CVE-2026-54279)
vulnerability in aiohttp (CVE-2026-54279). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
MINI-7cc6-jvm7-5696 MINI-7cc6-jvm7-5696
MAL-2026-5826 Vulnerability in dms-backend (MAL-2026-5826)
vulnerability in dms-backend (MAL-2026-5826). Risk of unauthorized operations or information disclosure.
MAL-2026-5828 Vulnerability in ogd-platform (MAL-2026-5828)
vulnerability in ogd-platform (MAL-2026-5828). Risk of unauthorized operations or information disclosure.
MINI-cqg6-55vh-344m MINI-cqg6-55vh-344m
CVE-2026-50269 Vulnerability in aiohttp (CVE-2026-50269)
vulnerability in aiohttp (CVE-2026-50269). Risk of unauthorized operations or information disclosure. Exploitable via ``Payload.headers``. Mitigation: upgrade to `3.14.0` or later.
MINI-wg83-6pqr-5xh7 MINI-wg83-6pqr-5xh7
CVE-2026-53663 Cross-Site Request Forgery (CSRF) in react-router (CVE-2026-53663)
vulnerability in react-router (CVE-2026-53663). Risk of unauthorized operations or information disclosure. Exploitable via ``createBrowserRouter``. Mitigation: upgrade to `7.15.1` or later.
MINI-c493-p9jq-pjxf MINI-c493-p9jq-pjxf
MINI-q29v-h2w8-6hfc MINI-q29v-h2w8-6hfc
CVE-2026-53633 Vulnerability in @vitest/browser (CVE-2026-53633)
vulnerability in @vitest/browser (CVE-2026-53633). Successful exploitation can lead to full system takeover. Exploitable via ``browser.api.allowWrite``. Mitigation: upgrade to `3.2.5` or later.
MINI-mjq4-pwq9-6x2c MINI-mjq4-pwq9-6x2c
CVE-2026-65900 Cross-Site Scripting (XSS) in dompurify (CVE-2026-65900)
cross-site scripting in dompurify (CVE-2026-65900). Risk of unauthorized operations or information disclosure. Exploitable via ``SAFE_FOR_TEMPLATES``. Mitigation: upgrade to `3.4.8` or later.
CVE-2026-49978 Cross-Site Scripting (XSS) in dompurify (CVE-2026-49978)
cross-site scripting in dompurify (CVE-2026-49978). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.7` or later.
CVE-2026-65901 Cross-Site Scripting (XSS) in dompurify (CVE-2026-65901)
cross-site scripting in dompurify (CVE-2026-65901). Risk of unauthorized operations or information disclosure. Exploitable via ``DOMPurify``.
CVE-2026-65902 Vulnerability in dompurify (CVE-2026-65902)
vulnerability in dompurify (CVE-2026-65902). Risk of unauthorized operations or information disclosure. Exploitable via ``data.allowedTags``. Mitigation: upgrade to `3.4.7` or later.
CVE-2026-49458 Vulnerability in dompurify (CVE-2026-49458)
vulnerability in dompurify (CVE-2026-49458). Risk of unauthorized operations or information disclosure. Exploitable via ``instanceof``. Mitigation: upgrade to `3.4.6` or later.
MINI-hr98-jv4m-ggw5 MINI-hr98-jv4m-ggw5
MINI-265j-hhj6-f9f2 MINI-265j-hhj6-f9f2
CVE-2026-49459 Vulnerability in dompurify (CVE-2026-49459)
vulnerability in dompurify (CVE-2026-49459). Risk of unauthorized operations or information disclosure. Exploitable via ``_forceRemove``. Mitigation: upgrade to `3.4.6` or later.
MINI-79p4-pvv9-q8cf MINI-79p4-pvv9-q8cf
MINI-r9ch-gg67-94m7 MINI-r9ch-gg67-94m7

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →