Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64203 |
|
Out-of-Bounds Read in CVE-2026-64203 (CVE-2026-64203)
vulnerability in CVE-2026-64203 (CVE-2026-64203). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47626 |
|
Out-of-Bounds Write in dos (CVE-2026-47626)
out-of-bounds write in dos (CVE-2026-47626). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64201 |
|
Out-of-Bounds Read in CVE-2026-64201 (CVE-2026-64201)
vulnerability in CVE-2026-64201 (CVE-2026-64201). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64202 |
|
Out-of-Bounds Read in CVE-2026-64202 (CVE-2026-64202)
vulnerability in CVE-2026-64202 (CVE-2026-64202). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24263 |
|
Vulnerability in dos (CVE-2026-24263)
vulnerability in dos (CVE-2026-24263). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24262 |
|
Out-of-Bounds Write in dos (CVE-2026-24262)
out-of-bounds write in dos (CVE-2026-24262). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24170 |
|
Authentication Bypass in CVE-2026-24170 (CVE-2026-24170)
authentication bypass in CVE-2026-24170 (CVE-2026-24170). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16233 |
|
Out-of-Bounds Write in CVE-2026-16233 (CVE-2026-16233)
out-of-bounds write in CVE-2026-16233 (CVE-2026-16233). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16234 |
|
Out-of-Bounds Read in CVE-2026-16234 (CVE-2026-16234)
vulnerability in CVE-2026-16234 (CVE-2026-16234). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24169 |
|
Command Injection in CVE-2026-24169 (CVE-2026-24169)
command injection in CVE-2026-24169 (CVE-2026-24169). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79784 |
|
Vulnerability in CVE-2026-79784 (CVE-2026-79784)
vulnerability in CVE-2026-79784 (CVE-2026-79784). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79774 |
|
Vulnerability in CVE-2026-79774 (CVE-2026-79774)
vulnerability in CVE-2026-79774 (CVE-2026-79774). Successful exploitation can lead to full system takeover.
|
| CVE-2026-79770 |
|
Vulnerability in dos (CVE-2026-79770)
vulnerability in dos (CVE-2026-79770). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79674 |
|
Vulnerability in CVE-2026-79674 (CVE-2026-79674)
vulnerability in CVE-2026-79674 (CVE-2026-79674). Confidential information can be exposed externally.
|
| CVE-2025-71406 |
|
Use-After-Free in CVE-2025-71406 (CVE-2025-71406)
vulnerability in CVE-2025-71406 (CVE-2025-71406). Data can be tampered with by attackers.
|
| CVE-2023-54354 |
|
Vulnerability in dos (CVE-2023-54354)
vulnerability in dos (CVE-2023-54354). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-47996 |
|
Buffer Overflow in dos (CVE-2021-47996)
vulnerability in dos (CVE-2021-47996). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50999 |
|
Buffer Overflow in dos (CVE-2022-50999)
vulnerability in dos (CVE-2022-50999). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-50998 |
|
Vulnerability in dos (CVE-2022-50998)
vulnerability in dos (CVE-2022-50998). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55620 |
|
Vulnerability in eml_parser (CVE-2026-55620)
vulnerability in eml_parser (CVE-2026-55620). Risk of unauthorized operations or information disclosure. Exploitable via ``eml_parser``. Mitigation: upgrade to `3.0.2` or later.
|
| CVE-2026-59982 |
|
Vulnerability in CVE-2026-59982 (CVE-2026-59982)
vulnerability in CVE-2026-59982 (CVE-2026-59982). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59189 |
|
Out-of-Bounds Read in CVE-2026-59189 (CVE-2026-59189)
vulnerability in CVE-2026-59189 (CVE-2026-59189). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59187 |
|
Vulnerability in CVE-2026-59187 (CVE-2026-59187)
vulnerability in CVE-2026-59187 (CVE-2026-59187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59186 |
|
Vulnerability in CVE-2026-59186 (CVE-2026-59186)
vulnerability in CVE-2026-59186 (CVE-2026-59186). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59184 |
|
Use-After-Free in CVE-2026-59184 (CVE-2026-59184)
vulnerability in CVE-2026-59184 (CVE-2026-59184). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55585 |
|
Code Injection in qwed (CVE-2026-55585)
code injection in qwed (CVE-2026-55585). Successful exploitation can lead to full system takeover. Exploitable via `POST /verify/math`. Mitigation: upgrade to `5.1.2` or later.
|
| CVE-2026-55553 |
|
Information Disclosure in urllib (CVE-2026-55553)
vulnerability in urllib (CVE-2026-55553). Confidential information can be exposed externally. Exploitable via `Cookie header`. Mitigation: upgrade to `2.44.1` or later.
|
| CVE-2026-55571 |
|
Vulnerability in djust (CVE-2026-55571)
vulnerability in djust (CVE-2026-55571). Data can be tampered with by attackers. Exploitable via ``LiveViewConsumer``. Mitigation: upgrade to `1.0.4` or later.
|
| CVE-2026-55581 |
|
OS Command Injection in github.com/sonirico/mcp-shell (CVE-2026-55581)
OS command injection in github.com/sonirico/mcp-shell (CVE-2026-55581). Successful exploitation can lead to full system takeover. Exploitable via ``security.yaml``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-55582 |
|
OS Command Injection in github.com/sonirico/mcp-shell (CVE-2026-55582)
OS command injection in github.com/sonirico/mcp-shell (CVE-2026-55582). Successful exploitation can lead to full system takeover. Exploitable via ``security.yaml``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-70551 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-70551 (CVE-2026-70551)
SSRF in CVE-2026-70551 (CVE-2026-70551). Confidential information can be exposed externally.
|
| CVE-2026-69104 |
|
Vulnerability in CVE-2026-69104 (CVE-2026-69104)
vulnerability in CVE-2026-69104 (CVE-2026-69104). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79622 |
|
Path Traversal in path-traversal (CVE-2026-79622)
path traversal in path-traversal (CVE-2026-79622). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79655 |
|
Vulnerability in path-traversal (CVE-2026-79655)
vulnerability in path-traversal (CVE-2026-79655). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57863 |
|
Path Traversal in path-traversal (CVE-2026-57863)
path traversal in path-traversal (CVE-2026-57863). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63076 |
|
Vulnerability in dos (CVE-2026-63076)
vulnerability in dos (CVE-2026-63076). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14457 |
|
Vulnerability in dos (CVE-2026-14457)
vulnerability in dos (CVE-2026-14457). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63075 |
|
Vulnerability in dos (CVE-2026-63075)
vulnerability in dos (CVE-2026-63075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54874 |
|
Vulnerability in dos (CVE-2026-54874)
vulnerability in dos (CVE-2026-54874). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18798 |
|
Vulnerability in dos (CVE-2026-18798)
vulnerability in dos (CVE-2026-18798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63072 |
|
Out-of-Bounds Write in dos (CVE-2026-63072)
out-of-bounds write in dos (CVE-2026-63072). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55532 |
|
Vulnerability in PraisonAI (CVE-2026-55532)
vulnerability in PraisonAI (CVE-2026-55532). Data can be tampered with by attackers. Exploitable via `Host header`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55533 |
|
Authentication Bypass in PraisonAI (CVE-2026-55533)
authentication bypass in PraisonAI (CVE-2026-55533). Data can be tampered with by attackers. Exploitable via `POST /v1/recipes/run`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55539 |
|
Vulnerability in PraisonAI (CVE-2026-55539)
vulnerability in PraisonAI (CVE-2026-55539). Risk of unauthorized operations or information disclosure. Exploitable via `GET /agents`. Mitigation: upgrade to `4.6.34` or later.
|
| CVE-2026-55527 |
|
Path Traversal in praisonaiagents (CVE-2026-55527)
path traversal in praisonaiagents (CVE-2026-55527). Data can be tampered with by attackers. Exploitable via `POST /jobs`. Mitigation: upgrade to `1.6.58` or later.
|
| CVE-2026-55537 |
|
Vulnerability in PraisonAI (CVE-2026-55537)
vulnerability in PraisonAI (CVE-2026-55537). Confidential information can be exposed externally. Exploitable via `POST /callback`. Mitigation: upgrade to `4.5.126` or later.
|
| CVE-2026-55538 |
|
Vulnerability in PraisonAI (CVE-2026-55538)
vulnerability in PraisonAI (CVE-2026-55538). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55540 |
|
Path Traversal in PraisonAI (CVE-2026-55540)
path traversal in PraisonAI (CVE-2026-55540). Confidential information can be exposed externally. Exploitable via ``praisonai.code``. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55534 |
|
Vulnerability in PraisonAI (CVE-2026-55534)
vulnerability in PraisonAI (CVE-2026-55534). Risk of unauthorized operations or information disclosure. Exploitable via `POST /agents`. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-55526 |
|
Vulnerability in praisonaiagents (CVE-2026-55526)
vulnerability in praisonaiagents (CVE-2026-55526). Confidential information can be exposed externally. Exploitable via ``scrape_page``. Mitigation: upgrade to `1.6.58` or later.
|