Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| GHSA-cr99-r4wc-x948 |
|
Vulnerability in evmchain-cli (GHSA-cr99-r4wc-x948)
vulnerability in evmchain-cli (GHSA-cr99-r4wc-x948). Risk of unauthorized operations or information disclosure.
|
| GHSA-9w8j-9mp6-phr8 |
|
Vulnerability in raven-i18n-react (GHSA-9w8j-9mp6-phr8)
vulnerability in raven-i18n-react (GHSA-9w8j-9mp6-phr8). Risk of unauthorized operations or information disclosure.
|
| GHSA-jr6p-493v-mmwf |
|
Vulnerability in chai-use-test (GHSA-jr6p-493v-mmwf)
vulnerability in chai-use-test (GHSA-jr6p-493v-mmwf). Risk of unauthorized operations or information disclosure.
|
| GHSA-qqfx-v5rv-9rxr |
|
Vulnerability in chai-extensions-extras (GHSA-qqfx-v5rv-9rxr)
vulnerability in chai-extensions-extras (GHSA-qqfx-v5rv-9rxr). Risk of unauthorized operations or information disclosure.
|
| GHSA-29g5-vw2p-x29p |
|
Vulnerability in tailwind-clamps-line (GHSA-29g5-vw2p-x29p)
vulnerability in tailwind-clamps-line (GHSA-29g5-vw2p-x29p). Risk of unauthorized operations or information disclosure.
|
| GHSA-g99g-mw45-jjhj |
|
Vulnerability in react-svg-animator (GHSA-g99g-mw45-jjhj)
vulnerability in react-svg-animator (GHSA-g99g-mw45-jjhj). Risk of unauthorized operations or information disclosure.
|
| GHSA-cx3x-gvpc-g35w |
|
Vulnerability in private-next-instrumentation-client (GHSA-cx3x-gvpc-g35w)
vulnerability in private-next-instrumentation-client (GHSA-cx3x-gvpc-g35w). Risk of unauthorized operations or information disclosure.
|
| GHSA-r3rp-65c5-5cjh |
|
Vulnerability in gcp-api-enabler (GHSA-r3rp-65c5-5cjh)
vulnerability in gcp-api-enabler (GHSA-r3rp-65c5-5cjh). Risk of unauthorized operations or information disclosure.
|
| GHSA-6726-235v-9wxv |
|
Vulnerability in ethers-errors (GHSA-6726-235v-9wxv)
vulnerability in ethers-errors (GHSA-6726-235v-9wxv). Risk of unauthorized operations or information disclosure.
|
| GHSA-47m4-3287-24vc |
|
Vulnerability in @timelycare/core (GHSA-47m4-3287-24vc)
vulnerability in @timelycare/core (GHSA-47m4-3287-24vc). Risk of unauthorized operations or information disclosure.
|
| GHSA-h3x2-x2gh-2hcm |
|
Vulnerability in @timelycare/api (GHSA-h3x2-x2gh-2hcm)
vulnerability in @timelycare/api (GHSA-h3x2-x2gh-2hcm). Risk of unauthorized operations or information disclosure.
|
| GHSA-rrgc-v65r-26g4 |
|
Vulnerability in @tc-core/provider-service (GHSA-rrgc-v65r-26g4)
vulnerability in @tc-core/provider-service (GHSA-rrgc-v65r-26g4). Risk of unauthorized operations or information disclosure.
|
| GHSA-6rcg-q5qx-9qhp |
|
Vulnerability in @rsi-community/hub-client-app (GHSA-6rcg-q5qx-9qhp)
vulnerability in @rsi-community/hub-client-app (GHSA-6rcg-q5qx-9qhp). Risk of unauthorized operations or information disclosure.
|
| GHSA-29c8-wfhx-h778 |
|
Vulnerability in foundry-config (GHSA-29c8-wfhx-h778)
vulnerability in foundry-config (GHSA-29c8-wfhx-h778). Risk of unauthorized operations or information disclosure.
|
| GHSA-frcf-f9wx-gq64 |
|
Vulnerability in codex-devcontainer-install (GHSA-frcf-f9wx-gq64)
vulnerability in codex-devcontainer-install (GHSA-frcf-f9wx-gq64). Risk of unauthorized operations or information disclosure.
|
| GHSA-4hrw-8228-63r2 |
|
Vulnerability in @cplace-project-planning-fe/cf-project-planning (GHSA-4hrw-8228-63r2)
vulnerability in @cplace-project-planning-fe/cf-project-planning (GHSA-4hrw-8228-63r2). Risk of unauthorized operations or information disclosure.
|
| GHSA-mrrv-5vqm-j285 |
|
Vulnerability in ethers-hash (GHSA-mrrv-5vqm-j285)
vulnerability in ethers-hash (GHSA-mrrv-5vqm-j285). Risk of unauthorized operations or information disclosure.
|
| GHSA-mf79-x3p8-p4px |
|
Vulnerability in @timelycare/common (GHSA-mf79-x3p8-p4px)
vulnerability in @timelycare/common (GHSA-mf79-x3p8-p4px). Risk of unauthorized operations or information disclosure.
|
| GHSA-pvc4-pwx8-4c4g |
|
Vulnerability in @lir-portal/web-components (GHSA-pvc4-pwx8-4c4g)
vulnerability in @lir-portal/web-components (GHSA-pvc4-pwx8-4c4g). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47229 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47229)
vulnerability in admidio/admidio (CVE-2026-47229). Risk of unauthorized operations or information disclosure. Exploitable via `GET /modules/sso/clients.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47228 |
|
Cross-Site Request Forgery (CSRF) in admidio/admidio (CVE-2026-47228)
vulnerability in admidio/admidio (CVE-2026-47228). Data can be tampered with by attackers. Exploitable via `GET /modules/registration.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47227 |
|
Vulnerability in admidio/admidio (CVE-2026-47227)
vulnerability in admidio/admidio (CVE-2026-47227). Data can be tampered with by attackers. Exploitable via `POST /modules/categories.php`. Mitigation: upgrade to `5.0.10` or later.
|
| CVE-2026-47226 |
|
Vulnerability in admidio/admidio (CVE-2026-47226)
vulnerability in admidio/admidio (CVE-2026-47226). Data can be tampered with by attackers. Exploitable via ``folder_uuid``. Mitigation: upgrade to `5.0.7` or later.
|
| MINI-8xg6-xww4-26v8 |
|
MINI-8xg6-xww4-26v8 |
| MINI-vg2w-8m3c-cw89 |
|
MINI-vg2w-8m3c-cw89 |
| MINI-3gjc-jh8h-xq49 |
|
MINI-3gjc-jh8h-xq49 |
| MINI-cvf5-25f5-h33c |
|
MINI-cvf5-25f5-h33c |
| MINI-gr9c-62q5-4785 |
|
MINI-gr9c-62q5-4785 |
| MINI-h9vr-x54w-gjmf |
|
MINI-h9vr-x54w-gjmf |
| MINI-wwhq-x99x-xvh8 |
|
MINI-wwhq-x99x-xvh8 |
| MINI-8mfc-6m95-4vxq |
|
MINI-8mfc-6m95-4vxq |
| CVE-2026-47213 |
|
Vulnerability in boxlite (CVE-2026-47213)
vulnerability in boxlite (CVE-2026-47213). Risk of unauthorized operations or information disclosure. Exploitable via ``timeout_ms``.
|
| SUSE-SU-2026:2133-1 |
|
Vulnerability in SUSE-SU-2026:2133-1 (SUSE-SU-2026:2133-1)
vulnerability in SUSE-SU-2026:2133-1 (SUSE-SU-2026:2133-1). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47212 |
|
Vulnerability in symfony/symfony (CVE-2026-47212)
vulnerability in symfony/symfony (CVE-2026-47212). Risk of unauthorized operations or information disclosure. Exploitable via ``framework.trusted_proxies``. Mitigation: upgrade to `8.0.12` or later.
|
| ECHO-aabb-5650-dee3 |
|
ECHO-aabb-5650-dee3 |
| CVE-2026-47211 |
|
Vulnerability in ouroboros-ai (CVE-2026-47211)
vulnerability in ouroboros-ai (CVE-2026-47211). Risk of unauthorized operations or information disclosure. Exploitable via ``OUROBOROS_CLI_PATH``. Mitigation: upgrade to `0.39.0` or later.
|
| CVE-2026-47203 |
|
Vulnerability in github.com/authelia/authelia/v4 (CVE-2026-47203)
vulnerability in github.com/authelia/authelia/v4 (CVE-2026-47203). Risk of unauthorized operations or information disclosure. Exploitable via ``Authorization``. Mitigation: upgrade to `4.39.20` or later.
|
| SUSE-SU-2026:2131-1 |
|
Vulnerability in SUSE-SU-2026:2131-1 (SUSE-SU-2026:2131-1)
vulnerability in SUSE-SU-2026:2131-1 (SUSE-SU-2026:2131-1). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47201 |
|
Vulnerability in goauthentik.io (CVE-2026-47201)
vulnerability in goauthentik.io (CVE-2026-47201). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.0-20260528144335-a370d76d23c7` or later.
|
| CVE-2026-47695 |
|
SSRF (Server-Side Request Forgery) in cc.tweaked:cc-tweaked-1.21-core (CVE-2026-47695)
SSRF in cc.tweaked:cc-tweaked-1.21-core (CVE-2026-47695). Risk of unauthorized operations or information disclosure. Exploitable via ``http.request``. Mitigation: upgrade to `1.119.0` or later.
|
| CVE-2026-47184 |
|
Vulnerability in zeroconf (CVE-2026-47184)
vulnerability in zeroconf (CVE-2026-47184). Risk of unauthorized operations or information disclosure. Exploitable via ``DNSCache._async_add``. Mitigation: upgrade to `0.149.7` or later.
|
| CVE-2026-4387 |
|
Vulnerability in c (CVE-2026-4387)
vulnerability in c (CVE-2026-4387). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48811 |
|
Vulnerability in laravel (CVE-2026-48811)
vulnerability in laravel (CVE-2026-48811). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
|
| CVE-2026-48810 |
|
Vulnerability in laravel (CVE-2026-48810)
vulnerability in laravel (CVE-2026-48810). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.221` or later.
|
| DEBIAN-CVE-2026-46599 |
|
Vulnerability in golang-golang-x-image (DEBIAN-CVE-2026-46599)
vulnerability in golang-golang-x-image (DEBIAN-CVE-2026-46599). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-46527 |
|
Vulnerability in cpp-httplib (DEBIAN-CVE-2026-46527)
vulnerability in cpp-httplib (DEBIAN-CVE-2026-46527). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.44.0` or later.
|
| CVE-2026-48557 |
|
Spatie Laravel Media Library contains a file upload restriction bypass
Spatie Laravel Media Library contains a file upload restriction bypass
|
| CVE-2026-48555 |
|
SSRF (Server-Side Request Forgery) in spatie/laravel-medialibrary (CVE-2026-48555)
SSRF in spatie/laravel-medialibrary (CVE-2026-48555). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.23.0` or later.
|
| CVE-2026-47266 |
|
Vulnerability in verbb/formie (CVE-2026-47266)
vulnerability in verbb/formie (CVE-2026-47266). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.2.21` or later.
|
| CVE-2026-47123 |
|
Vulnerability in laravel (CVE-2026-47123)
vulnerability in laravel (CVE-2026-47123). Data can be tampered with by attackers. Mitigation: upgrade to `1.8.220` or later.
|