Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-47777 |
|
Vulnerability in CVE-2026-47777 (CVE-2026-47777)
vulnerability in CVE-2026-47777 (CVE-2026-47777). Data can be tampered with by attackers.
|
| MINI-jj3j-pv66-hqfq |
|
MINI-jj3j-pv66-hqfq |
| MINI-9gq6-27wj-472v |
|
MINI-9gq6-27wj-472v |
| MINI-2px8-8fpp-rvj6 |
|
MINI-2px8-8fpp-rvj6 |
| MINI-rrx3-gh55-rjc6 |
|
MINI-rrx3-gh55-rjc6 |
| MINI-g6vc-f3r6-4h65 |
|
MINI-g6vc-f3r6-4h65 |
| MINI-582h-7hww-c24f |
|
MINI-582h-7hww-c24f |
| MINI-5r8q-4j39-6gqr |
|
MINI-5r8q-4j39-6gqr |
| MINI-pm6j-ff8c-jpqp |
|
MINI-pm6j-ff8c-jpqp |
| MINI-47f9-7442-wq3q |
|
MINI-47f9-7442-wq3q |
| MINI-ppj6-2f56-q67w |
|
MINI-ppj6-2f56-q67w |
| MINI-9733-xp8h-wq2f |
|
MINI-9733-xp8h-wq2f |
| MINI-mr3r-v5mh-w7w6 |
|
MINI-mr3r-v5mh-w7w6 |
| MINI-f94g-8qpp-wmxg |
|
MINI-f94g-8qpp-wmxg |
| MINI-qprg-cghv-f6m2 |
|
MINI-qprg-cghv-f6m2 |
| MINI-28j3-87fr-7wcg |
|
MINI-28j3-87fr-7wcg |
| MINI-974c-j2v4-x9jp |
|
MINI-974c-j2v4-x9jp |
| MINI-q58c-r8rr-cwhr |
|
MINI-q58c-r8rr-cwhr |
| MINI-2453-q325-c3w3 |
|
MINI-2453-q325-c3w3 |
| MINI-cmrr-7m33-j4jp |
|
MINI-cmrr-7m33-j4jp |
| MINI-2j73-hprg-gwmj |
|
MINI-2j73-hprg-gwmj |
| MINI-54hj-79vx-69fg |
|
MINI-54hj-79vx-69fg |
| MINI-6xp2-q72v-66r9 |
|
MINI-6xp2-q72v-66r9 |
| MINI-69f7-p9h3-5xwr |
|
MINI-69f7-p9h3-5xwr |
| GHSA-268h-hp4c-crq3 |
|
Vulnerability in nodemailer (GHSA-268h-hp4c-crq3)
vulnerability in nodemailer (GHSA-268h-hp4c-crq3). Risk of unauthorized operations or information disclosure. Exploitable via ``list``. Mitigation: upgrade to `8.0.9` or later.
|
| GHSA-wqvq-jvpq-h66f |
|
Vulnerability in nodemailer (GHSA-wqvq-jvpq-h66f)
vulnerability in nodemailer (GHSA-wqvq-jvpq-h66f). Risk of unauthorized operations or information disclosure. Exploitable via `GET /private`. Mitigation: upgrade to `8.0.9` or later.
|
| MINI-fp43-6cf9-68qw |
|
MINI-fp43-6cf9-68qw |
| GHSA-r7g4-qg5f-qqm2 |
|
Vulnerability in nodemailer (GHSA-r7g4-qg5f-qqm2)
vulnerability in nodemailer (GHSA-r7g4-qg5f-qqm2). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.8` or later.
|
| MINI-cjm8-fw67-gggv |
|
MINI-cjm8-fw67-gggv |
| CVE-2026-48784 |
|
Vulnerability in symfony/routing (CVE-2026-48784)
vulnerability in symfony/routing (CVE-2026-48784). Risk of unauthorized operations or information disclosure. Exploitable via ``strtr``. Mitigation: upgrade to `8.0.13` or later.
|
| CVE-2026-48760 |
|
Vulnerability in symfony/html-sanitizer (CVE-2026-48760)
vulnerability in symfony/html-sanitizer (CVE-2026-48760). Risk of unauthorized operations or information disclosure. Exploitable via ``href``. Mitigation: upgrade to `8.0.13` or later.
|
| MINI-qv96-xjqv-x7w9 |
|
MINI-qv96-xjqv-x7w9 |
| CVE-2026-48747 |
|
Vulnerability in symfony/mailomat-mailer (CVE-2026-48747)
vulnerability in symfony/mailomat-mailer (CVE-2026-48747). Risk of unauthorized operations or information disclosure. Exploitable via ``md4``. Mitigation: upgrade to `8.0.13` or later.
|
| CVE-2026-48736 |
|
Vulnerability in symfony/http-client (CVE-2026-48736)
vulnerability in symfony/http-client (CVE-2026-48736). Risk of unauthorized operations or information disclosure. Exploitable via ``NoPrivateNetworkHttpClient``. Mitigation: upgrade to `5.4.53` or later.
|
| CVE-2026-48712 |
|
Vulnerability in protobufjs (CVE-2026-48712)
vulnerability in protobufjs (CVE-2026-48712). Risk of unauthorized operations or information disclosure. Exploitable via ``google.protobuf.Any``. Mitigation: upgrade to `8.4.1` or later.
|
| CVE-2026-48489 |
|
Authorization Flaw in symfony/security-http (CVE-2026-48489)
vulnerability in symfony/security-http (CVE-2026-48489). Risk of unauthorized operations or information disclosure. Exploitable via ``DefaultAuthenticationFailureHandler``. Mitigation: upgrade to `8.0.13` or later.
|
| CVE-2026-54269 |
|
Vulnerability in protobufjs (CVE-2026-54269)
vulnerability in protobufjs (CVE-2026-54269). Risk of unauthorized operations or information disclosure. Exploitable via ``hasOwnProperty``. Mitigation: upgrade to `8.6.0` or later.
|
| CVE-2026-54264 |
|
Information Disclosure in @angular/service-worker (CVE-2026-54264)
vulnerability in @angular/service-worker (CVE-2026-54264). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``.
|
| MINI-qmwm-v282-gqj2 |
|
MINI-qmwm-v282-gqj2 |
| CVE-2026-54268 |
|
Vulnerability in @angular/common (CVE-2026-54268)
vulnerability in @angular/common (CVE-2026-54268). Risk of unauthorized operations or information disclosure. Exploitable via ``formatDate``.
|
| MINI-8c86-jv9h-qcvw |
|
MINI-8c86-jv9h-qcvw |
| MINI-j8hc-w2fr-xffv |
|
MINI-j8hc-w2fr-xffv |
| MINI-pprc-m89w-pfm4 |
|
MINI-pprc-m89w-pfm4 |
| CVE-2026-54266 |
|
Vulnerability in @angular/common (CVE-2026-54266)
vulnerability in @angular/common (CVE-2026-54266). Risk of unauthorized operations or information disclosure. Exploitable via ``HttpTransferCache``.
|
| MINI-6wv2-hrc7-v3mg |
|
MINI-6wv2-hrc7-v3mg |
| MINI-vp2r-7p9v-g958 |
|
MINI-vp2r-7p9v-g958 |
| MINI-j8jh-344w-xxqw |
|
MINI-j8jh-344w-xxqw |
| MINI-36cc-3gg5-578g |
|
MINI-36cc-3gg5-578g |
| MINI-x4cq-2jx5-66c8 |
|
MINI-x4cq-2jx5-66c8 |
| CVE-2026-54265 |
|
Cross-Site Scripting (XSS) in @angular/compiler (CVE-2026-54265)
cross-site scripting in @angular/compiler (CVE-2026-54265). Risk of unauthorized operations or information disclosure. Exploitable via ``innerHTML``.
|