Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| UBUNTU-CVE-2026-53704 |
|
Vulnerability in gst-plugins-ugly1.0 (UBUNTU-CVE-2026-53704)
vulnerability in gst-plugins-ugly1.0 (UBUNTU-CVE-2026-53704). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52722 |
|
Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52722)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52722). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52718 |
|
Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52718)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52718). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52719 |
|
Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52719)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52719). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52721 |
|
Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52721)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52721). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-52720 |
|
Vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52720)
vulnerability in gst-plugins-bad1.0 (UBUNTU-CVE-2026-52720). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2025-56814 |
|
Vulnerability in opencpn (UBUNTU-CVE-2025-56814)
vulnerability in opencpn (UBUNTU-CVE-2025-56814). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2025-70102 |
|
Vulnerability in dhcpcd (UBUNTU-CVE-2025-70102)
vulnerability in dhcpcd (UBUNTU-CVE-2025-70102). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48125 |
|
Vulnerability in ua-parser-js (CVE-2026-48125)
vulnerability in ua-parser-js (CVE-2026-48125). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.10` or later.
|
| CVE-2026-54271 |
|
Code Injection in protobufjs-cli (CVE-2026-54271)
code injection in protobufjs-cli (CVE-2026-54271). Confidential information can be exposed externally. Exploitable via ``pbjs``. Mitigation: upgrade to `2.5.0` or later.
|
| MINI-wv32-r3f9-wvcq |
|
MINI-wv32-r3f9-wvcq |
| CVE-2026-54270 |
|
Vulnerability in protobufjs (CVE-2026-54270)
vulnerability in protobufjs (CVE-2026-54270). Risk of unauthorized operations or information disclosure. Exploitable via ``Reader``. Mitigation: upgrade to `8.5.0` or later.
|
| CVE-2026-65899 |
|
Vulnerability in dompurify (CVE-2026-65899)
vulnerability in dompurify (CVE-2026-65899). Risk of unauthorized operations or information disclosure. Exploitable via ``TRUSTED_TYPES_POLICY``. Mitigation: upgrade to `3.4.9` or later.
|
| GHSA-537c-gmf6-5ccf |
|
Out-of-Bounds Read in cryptography (GHSA-537c-gmf6-5ccf)
vulnerability in cryptography (GHSA-537c-gmf6-5ccf). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `48.0.1` or later.
|
| MAL-2026-5833 |
|
Vulnerability in yunxin-overmind-comment (MAL-2026-5833)
vulnerability in yunxin-overmind-comment (MAL-2026-5833). Risk of unauthorized operations or information disclosure. Exploitable via ``scripts.postinstall``.
|
| CVE-2026-54274 |
|
Vulnerability in aiohttp (CVE-2026-54274)
vulnerability in aiohttp (CVE-2026-54274). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
|
| CVE-2026-54275 |
|
Vulnerability in aiohttp (CVE-2026-54275)
vulnerability in aiohttp (CVE-2026-54275). Risk of unauthorized operations or information disclosure. Exploitable via ``server_hostname``. Mitigation: upgrade to `3.14.1` or later.
|
| MINI-hw7f-h9q2-rvc4 |
|
MINI-hw7f-h9q2-rvc4 |
| CVE-2026-54280 |
|
Vulnerability in aiohttp (CVE-2026-54280)
vulnerability in aiohttp (CVE-2026-54280). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
|
| CVE-2026-54273 |
|
Vulnerability in aiohttp (CVE-2026-54273)
vulnerability in aiohttp (CVE-2026-54273). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
|
| MINI-xmmh-f7mw-w67v |
|
MINI-xmmh-f7mw-w67v |
| CVE-2026-54278 |
|
Vulnerability in aiohttp (CVE-2026-54278)
vulnerability in aiohttp (CVE-2026-54278). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
|
| MINI-3qx6-f9v4-cm5f |
|
MINI-3qx6-f9v4-cm5f |
| MINI-83ph-r8pm-5rqv |
|
MINI-83ph-r8pm-5rqv |
| MINI-m92c-q42m-2j54 |
|
MINI-m92c-q42m-2j54 |
| CVE-2026-54277 |
|
Vulnerability in aiohttp (CVE-2026-54277)
vulnerability in aiohttp (CVE-2026-54277). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
|
| MINI-249f-gjvh-fwr5 |
|
MINI-249f-gjvh-fwr5 |
| CVE-2026-54276 |
|
Information Disclosure in aiohttp (CVE-2026-54276)
vulnerability in aiohttp (CVE-2026-54276). Risk of unauthorized operations or information disclosure. Exploitable via ``DigestAuthMiddleware``. Mitigation: upgrade to `3.14.1` or later.
|
| CVE-2026-54279 |
|
Vulnerability in aiohttp (CVE-2026-54279)
vulnerability in aiohttp (CVE-2026-54279). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.14.1` or later.
|
| MINI-7cc6-jvm7-5696 |
|
MINI-7cc6-jvm7-5696 |
| MAL-2026-5826 |
|
Vulnerability in dms-backend (MAL-2026-5826)
vulnerability in dms-backend (MAL-2026-5826). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-5828 |
|
Vulnerability in ogd-platform (MAL-2026-5828)
vulnerability in ogd-platform (MAL-2026-5828). Risk of unauthorized operations or information disclosure.
|
| MINI-cqg6-55vh-344m |
|
MINI-cqg6-55vh-344m |
| CVE-2026-50269 |
|
Vulnerability in aiohttp (CVE-2026-50269)
vulnerability in aiohttp (CVE-2026-50269). Risk of unauthorized operations or information disclosure. Exploitable via ``Payload.headers``. Mitigation: upgrade to `3.14.0` or later.
|
| MINI-wg83-6pqr-5xh7 |
|
MINI-wg83-6pqr-5xh7 |
| CVE-2026-53663 |
|
Cross-Site Request Forgery (CSRF) in react-router (CVE-2026-53663)
vulnerability in react-router (CVE-2026-53663). Risk of unauthorized operations or information disclosure. Exploitable via ``createBrowserRouter``. Mitigation: upgrade to `7.15.1` or later.
|
| MINI-c493-p9jq-pjxf |
|
MINI-c493-p9jq-pjxf |
| MINI-q29v-h2w8-6hfc |
|
MINI-q29v-h2w8-6hfc |
| CVE-2026-53633 |
|
Vulnerability in @vitest/browser (CVE-2026-53633)
vulnerability in @vitest/browser (CVE-2026-53633). Successful exploitation can lead to full system takeover. Exploitable via ``browser.api.allowWrite``. Mitigation: upgrade to `3.2.5` or later.
|
| MINI-mjq4-pwq9-6x2c |
|
MINI-mjq4-pwq9-6x2c |
| CVE-2026-65900 |
|
Cross-Site Scripting (XSS) in dompurify (CVE-2026-65900)
cross-site scripting in dompurify (CVE-2026-65900). Risk of unauthorized operations or information disclosure. Exploitable via ``SAFE_FOR_TEMPLATES``. Mitigation: upgrade to `3.4.8` or later.
|
| CVE-2026-49978 |
|
Cross-Site Scripting (XSS) in dompurify (CVE-2026-49978)
cross-site scripting in dompurify (CVE-2026-49978). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.7` or later.
|
| CVE-2026-65901 |
|
Cross-Site Scripting (XSS) in dompurify (CVE-2026-65901)
cross-site scripting in dompurify (CVE-2026-65901). Risk of unauthorized operations or information disclosure. Exploitable via ``DOMPurify``.
|
| CVE-2026-65902 |
|
Vulnerability in dompurify (CVE-2026-65902)
vulnerability in dompurify (CVE-2026-65902). Risk of unauthorized operations or information disclosure. Exploitable via ``data.allowedTags``. Mitigation: upgrade to `3.4.7` or later.
|
| CVE-2026-49458 |
|
Vulnerability in dompurify (CVE-2026-49458)
vulnerability in dompurify (CVE-2026-49458). Risk of unauthorized operations or information disclosure. Exploitable via ``instanceof``. Mitigation: upgrade to `3.4.6` or later.
|
| MINI-hr98-jv4m-ggw5 |
|
MINI-hr98-jv4m-ggw5 |
| MINI-265j-hhj6-f9f2 |
|
MINI-265j-hhj6-f9f2 |
| CVE-2026-49459 |
|
Vulnerability in dompurify (CVE-2026-49459)
vulnerability in dompurify (CVE-2026-49459). Risk of unauthorized operations or information disclosure. Exploitable via ``_forceRemove``. Mitigation: upgrade to `3.4.6` or later.
|
| MINI-79p4-pvv9-q8cf |
|
MINI-79p4-pvv9-q8cf |
| MINI-r9ch-gg67-94m7 |
|
MINI-r9ch-gg67-94m7 |