Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-4862 Vulnerability in veloxml-cli (MAL-2026-4862)
vulnerability in veloxml-cli (MAL-2026-4862). Risk of unauthorized operations or information disclosure.
CVE-2026-9039 Vulnerability in CVE-2026-9039 (CVE-2026-9039)
vulnerability in CVE-2026-9039 (CVE-2026-9039). Risk of unauthorized operations or information disclosure.
CVE-2026-9038 Vulnerability in CVE-2026-9038 (CVE-2026-9038)
vulnerability in CVE-2026-9038 (CVE-2026-9038). Risk of unauthorized operations or information disclosure.
DEBIAN-CVE-2026-49130 Vulnerability in mpd (DEBIAN-CVE-2026-49130)
vulnerability in mpd (DEBIAN-CVE-2026-49130). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
DEBIAN-CVE-2026-49127 Vulnerability in mpd (DEBIAN-CVE-2026-49127)
vulnerability in mpd (DEBIAN-CVE-2026-49127). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
DEBIAN-CVE-2026-49129 Vulnerability in mpd (DEBIAN-CVE-2026-49129)
vulnerability in mpd (DEBIAN-CVE-2026-49129). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
DEBIAN-CVE-2026-49128 Vulnerability in mpd (DEBIAN-CVE-2026-49128)
vulnerability in mpd (DEBIAN-CVE-2026-49128). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
CVE-2026-49130 Vulnerability in CVE-2026-49130 (CVE-2026-49130)
vulnerability in CVE-2026-49130 (CVE-2026-49130). Risk of unauthorized operations or information disclosure.
CVE-2026-49129 SSRF (Server-Side Request Forgery) in CVE-2026-49129 (CVE-2026-49129)
SSRF in CVE-2026-49129 (CVE-2026-49129). Risk of unauthorized operations or information disclosure.
CVE-2026-49128 Path Traversal in path-traversal (CVE-2026-49128)
path traversal in path-traversal (CVE-2026-49128). Confidential information can be exposed externally.
CVE-2026-49127 Vulnerability in CVE-2026-49127 (CVE-2026-49127)
vulnerability in CVE-2026-49127 (CVE-2026-49127). Risk of unauthorized operations or information disclosure.
CVE-2026-42401 Cross-Site Scripting (XSS) in elk (CVE-2026-42401)
cross-site scripting in elk (CVE-2026-42401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.4.0` or later.
CVE-2026-33590 Vulnerability in CVE-2026-33590 (CVE-2026-33590)
vulnerability in CVE-2026-33590 (CVE-2026-33590). Risk of unauthorized operations or information disclosure.
CVE-2026-33464 Vulnerability in elk (CVE-2026-33464)
vulnerability in elk (CVE-2026-33464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.4.2` or later.
CVE-2026-33463 Vulnerability in elk (CVE-2026-33463)
vulnerability in elk (CVE-2026-33463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
CVE-2026-33462 Path Traversal in elk (CVE-2026-33462)
path traversal in elk (CVE-2026-33462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
CVE-2026-32847 Path Traversal in path-traversal (CVE-2026-32847)
path traversal in path-traversal (CVE-2026-32847). Confidential information can be exposed externally. Exploitable via `GET /{full_path`.
CVE-2026-47144 Path Traversal in shamefile (CVE-2026-47144)
path traversal in shamefile (CVE-2026-47144). Confidential information can be exposed externally. Exploitable via ``shamefile.yaml``. Mitigation: upgrade to `0.1.7` or later.
CVE-2026-47128 Authorization Flaw in nono-cli (CVE-2026-47128)
vulnerability in nono-cli (CVE-2026-47128). Data can be tampered with by attackers. Exploitable via ``make``. Mitigation: upgrade to `0.55.0` or later.
CVE-2026-46644 Vulnerability in symfony/polyfill (CVE-2026-46644)
vulnerability in symfony/polyfill (CVE-2026-46644). Risk of unauthorized operations or information disclosure. Exploitable via ``intl``. Mitigation: upgrade to `1.38.1` or later.
USN-8341-1 Vulnerability in openjdk-26 (USN-8341-1)
vulnerability in openjdk-26 (USN-8341-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.0.1+8-2~25.10.2` or later.
ECHO-e120-768d-97d2 ECHO-e120-768d-97d2
ECHO-46b4-9377-9297 ECHO-46b4-9377-9297
ECHO-0730-9900-c29e ECHO-0730-9900-c29e
ECHO-14a8-c7c0-3da6 ECHO-14a8-c7c0-3da6
ECHO-b333-b6a8-ce38 ECHO-b333-b6a8-ce38
USN-8344-1 Vulnerability in python-pip (USN-8344-1)
vulnerability in python-pip (USN-8344-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.0.2+dfsg-1ubuntu0.7+esm1` or later.
MAL-2026-4860 Vulnerability in @qlab/ui (MAL-2026-4860)
vulnerability in @qlab/ui (MAL-2026-4860). Risk of unauthorized operations or information disclosure. Exploitable via ``exports``.
CGA-r9w9-g7rx-chx9 CGA-r9w9-g7rx-chx9
CVE-2026-46526 SSRF (Server-Side Request Forgery) in local-deep-research (CVE-2026-46526)
SSRF in local-deep-research (CVE-2026-46526). Risk of unauthorized operations or information disclosure. Exploitable via ``validate_url``. Mitigation: upgrade to `1.6.10` or later.
CVE-2026-4944 Path Traversal in CVE-2026-4944 (CVE-2026-4944)
path traversal in CVE-2026-4944 (CVE-2026-4944). Successful exploitation can lead to full system takeover.
CVE-2026-47337 Vulnerability in canonical (CVE-2026-47337)
vulnerability in canonical (CVE-2026-47337). Risk of unauthorized operations or information disclosure.
CVE-2026-47336 Vulnerability in canonical (CVE-2026-47336)
vulnerability in canonical (CVE-2026-47336). Risk of unauthorized operations or information disclosure.
CVE-2026-47335 Vulnerability in canonical (CVE-2026-47335)
vulnerability in canonical (CVE-2026-47335). Risk of unauthorized operations or information disclosure.
CVE-2026-47334 Vulnerability in canonical (CVE-2026-47334)
vulnerability in canonical (CVE-2026-47334). Risk of unauthorized operations or information disclosure.
CVE-2026-47333 Out-of-Bounds Read in canonical (CVE-2026-47333)
vulnerability in canonical (CVE-2026-47333). Successful exploitation can lead to full system takeover.
CVE-2026-47332 Out-of-Bounds Read in canonical (CVE-2026-47332)
vulnerability in canonical (CVE-2026-47332). Confidential information can be exposed externally.
CVE-2026-47331 Use-After-Free in canonical (CVE-2026-47331)
vulnerability in canonical (CVE-2026-47331). Successful exploitation can lead to full system takeover.
CVE-2026-47330 Vulnerability in canonical (CVE-2026-47330)
vulnerability in canonical (CVE-2026-47330). Risk of unauthorized operations or information disclosure.
CVE-2026-47329 Vulnerability in canonical (CVE-2026-47329)
vulnerability in canonical (CVE-2026-47329). Risk of unauthorized operations or information disclosure.
CVE-2026-47328 Vulnerability in canonical (CVE-2026-47328)
vulnerability in canonical (CVE-2026-47328). Risk of unauthorized operations or information disclosure.
CVE-2026-47327 Vulnerability in canonical (CVE-2026-47327)
vulnerability in canonical (CVE-2026-47327). Risk of unauthorized operations or information disclosure.
CVE-2026-47326 Vulnerability in canonical (CVE-2026-47326)
vulnerability in canonical (CVE-2026-47326). Risk of unauthorized operations or information disclosure.
CVE-2026-47136 Information Disclosure in CVE-2026-47136 (CVE-2026-47136)
vulnerability in CVE-2026-47136 (CVE-2026-47136). Risk of unauthorized operations or information disclosure. Exploitable via `GET /rustfs/console/license`. Mitigation: upgrade to `1.0.0-beta.2` or later.
CVE-2026-46685 Vulnerability in CVE-2026-46685 (CVE-2026-46685)
vulnerability in CVE-2026-46685 (CVE-2026-46685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
DEBIAN-CVE-2026-44394 Vulnerability in keystone (DEBIAN-CVE-2026-44394)
vulnerability in keystone (DEBIAN-CVE-2026-44394). Confidential information can be exposed externally. Exploitable via `POST /v3/auth/tokens`. Mitigation: upgrade to `2:18.1.0-1+deb11u3` or later.
CVE-2026-45044 Vulnerability in dos (CVE-2026-45044)
vulnerability in dos (CVE-2026-45044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
CVE-2026-45042 Authorization Flaw in CVE-2026-45042 (CVE-2026-45042)
vulnerability in CVE-2026-45042 (CVE-2026-45042). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
CVE-2026-45041 Vulnerability in CVE-2026-45041 (CVE-2026-45041)
vulnerability in CVE-2026-45041 (CVE-2026-45041). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
CVE-2026-45040 Vulnerability in CVE-2026-45040 (CVE-2026-45040)
vulnerability in CVE-2026-45040 (CVE-2026-45040). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →