Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-4862 |
|
Vulnerability in veloxml-cli (MAL-2026-4862)
vulnerability in veloxml-cli (MAL-2026-4862). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9039 |
|
Vulnerability in CVE-2026-9039 (CVE-2026-9039)
vulnerability in CVE-2026-9039 (CVE-2026-9039). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9038 |
|
Vulnerability in CVE-2026-9038 (CVE-2026-9038)
vulnerability in CVE-2026-9038 (CVE-2026-9038). Risk of unauthorized operations or information disclosure.
|
| DEBIAN-CVE-2026-49130 |
|
Vulnerability in mpd (DEBIAN-CVE-2026-49130)
vulnerability in mpd (DEBIAN-CVE-2026-49130). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
|
| DEBIAN-CVE-2026-49127 |
|
Vulnerability in mpd (DEBIAN-CVE-2026-49127)
vulnerability in mpd (DEBIAN-CVE-2026-49127). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
|
| DEBIAN-CVE-2026-49129 |
|
Vulnerability in mpd (DEBIAN-CVE-2026-49129)
vulnerability in mpd (DEBIAN-CVE-2026-49129). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
|
| DEBIAN-CVE-2026-49128 |
|
Vulnerability in mpd (DEBIAN-CVE-2026-49128)
vulnerability in mpd (DEBIAN-CVE-2026-49128). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.24.12-1` or later.
|
| CVE-2026-49130 |
|
Vulnerability in CVE-2026-49130 (CVE-2026-49130)
vulnerability in CVE-2026-49130 (CVE-2026-49130). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49129 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-49129 (CVE-2026-49129)
SSRF in CVE-2026-49129 (CVE-2026-49129). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49128 |
|
Path Traversal in path-traversal (CVE-2026-49128)
path traversal in path-traversal (CVE-2026-49128). Confidential information can be exposed externally.
|
| CVE-2026-49127 |
|
Vulnerability in CVE-2026-49127 (CVE-2026-49127)
vulnerability in CVE-2026-49127 (CVE-2026-49127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42401 |
|
Cross-Site Scripting (XSS) in elk (CVE-2026-42401)
cross-site scripting in elk (CVE-2026-42401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.4.0` or later.
|
| CVE-2026-33590 |
|
Vulnerability in CVE-2026-33590 (CVE-2026-33590)
vulnerability in CVE-2026-33590 (CVE-2026-33590). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33464 |
|
Vulnerability in elk (CVE-2026-33464)
vulnerability in elk (CVE-2026-33464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.4.2` or later.
|
| CVE-2026-33463 |
|
Vulnerability in elk (CVE-2026-33463)
vulnerability in elk (CVE-2026-33463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
|
| CVE-2026-33462 |
|
Path Traversal in elk (CVE-2026-33462)
path traversal in elk (CVE-2026-33462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
|
| CVE-2026-32847 |
|
Path Traversal in path-traversal (CVE-2026-32847)
path traversal in path-traversal (CVE-2026-32847). Confidential information can be exposed externally. Exploitable via `GET /{full_path`.
|
| CVE-2026-47144 |
|
Path Traversal in shamefile (CVE-2026-47144)
path traversal in shamefile (CVE-2026-47144). Confidential information can be exposed externally. Exploitable via ``shamefile.yaml``. Mitigation: upgrade to `0.1.7` or later.
|
| CVE-2026-47128 |
|
Authorization Flaw in nono-cli (CVE-2026-47128)
vulnerability in nono-cli (CVE-2026-47128). Data can be tampered with by attackers. Exploitable via ``make``. Mitigation: upgrade to `0.55.0` or later.
|
| CVE-2026-46644 |
|
Vulnerability in symfony/polyfill (CVE-2026-46644)
vulnerability in symfony/polyfill (CVE-2026-46644). Risk of unauthorized operations or information disclosure. Exploitable via ``intl``. Mitigation: upgrade to `1.38.1` or later.
|
| USN-8341-1 |
|
Vulnerability in openjdk-26 (USN-8341-1)
vulnerability in openjdk-26 (USN-8341-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.0.1+8-2~25.10.2` or later.
|
| ECHO-e120-768d-97d2 |
|
ECHO-e120-768d-97d2 |
| ECHO-46b4-9377-9297 |
|
ECHO-46b4-9377-9297 |
| ECHO-0730-9900-c29e |
|
ECHO-0730-9900-c29e |
| ECHO-14a8-c7c0-3da6 |
|
ECHO-14a8-c7c0-3da6 |
| ECHO-b333-b6a8-ce38 |
|
ECHO-b333-b6a8-ce38 |
| USN-8344-1 |
|
Vulnerability in python-pip (USN-8344-1)
vulnerability in python-pip (USN-8344-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `22.0.2+dfsg-1ubuntu0.7+esm1` or later.
|
| MAL-2026-4860 |
|
Vulnerability in @qlab/ui (MAL-2026-4860)
vulnerability in @qlab/ui (MAL-2026-4860). Risk of unauthorized operations or information disclosure. Exploitable via ``exports``.
|
| CGA-r9w9-g7rx-chx9 |
|
CGA-r9w9-g7rx-chx9 |
| CVE-2026-46526 |
|
SSRF (Server-Side Request Forgery) in local-deep-research (CVE-2026-46526)
SSRF in local-deep-research (CVE-2026-46526). Risk of unauthorized operations or information disclosure. Exploitable via ``validate_url``. Mitigation: upgrade to `1.6.10` or later.
|
| CVE-2026-4944 |
|
Path Traversal in CVE-2026-4944 (CVE-2026-4944)
path traversal in CVE-2026-4944 (CVE-2026-4944). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47337 |
|
Vulnerability in canonical (CVE-2026-47337)
vulnerability in canonical (CVE-2026-47337). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47336 |
|
Vulnerability in canonical (CVE-2026-47336)
vulnerability in canonical (CVE-2026-47336). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47335 |
|
Vulnerability in canonical (CVE-2026-47335)
vulnerability in canonical (CVE-2026-47335). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47334 |
|
Vulnerability in canonical (CVE-2026-47334)
vulnerability in canonical (CVE-2026-47334). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47333 |
|
Out-of-Bounds Read in canonical (CVE-2026-47333)
vulnerability in canonical (CVE-2026-47333). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47332 |
|
Out-of-Bounds Read in canonical (CVE-2026-47332)
vulnerability in canonical (CVE-2026-47332). Confidential information can be exposed externally.
|
| CVE-2026-47331 |
|
Use-After-Free in canonical (CVE-2026-47331)
vulnerability in canonical (CVE-2026-47331). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47330 |
|
Vulnerability in canonical (CVE-2026-47330)
vulnerability in canonical (CVE-2026-47330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47329 |
|
Vulnerability in canonical (CVE-2026-47329)
vulnerability in canonical (CVE-2026-47329). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47328 |
|
Vulnerability in canonical (CVE-2026-47328)
vulnerability in canonical (CVE-2026-47328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47327 |
|
Vulnerability in canonical (CVE-2026-47327)
vulnerability in canonical (CVE-2026-47327). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47326 |
|
Vulnerability in canonical (CVE-2026-47326)
vulnerability in canonical (CVE-2026-47326). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47136 |
|
Information Disclosure in CVE-2026-47136 (CVE-2026-47136)
vulnerability in CVE-2026-47136 (CVE-2026-47136). Risk of unauthorized operations or information disclosure. Exploitable via `GET /rustfs/console/license`. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| CVE-2026-46685 |
|
Vulnerability in CVE-2026-46685 (CVE-2026-46685)
vulnerability in CVE-2026-46685 (CVE-2026-46685). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| DEBIAN-CVE-2026-44394 |
|
Vulnerability in keystone (DEBIAN-CVE-2026-44394)
vulnerability in keystone (DEBIAN-CVE-2026-44394). Confidential information can be exposed externally. Exploitable via `POST /v3/auth/tokens`. Mitigation: upgrade to `2:18.1.0-1+deb11u3` or later.
|
| CVE-2026-45044 |
|
Vulnerability in dos (CVE-2026-45044)
vulnerability in dos (CVE-2026-45044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| CVE-2026-45042 |
|
Authorization Flaw in CVE-2026-45042 (CVE-2026-45042)
vulnerability in CVE-2026-45042 (CVE-2026-45042). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| CVE-2026-45041 |
|
Vulnerability in CVE-2026-45041 (CVE-2026-45041)
vulnerability in CVE-2026-45041 (CVE-2026-45041). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
|
| CVE-2026-45040 |
|
Vulnerability in CVE-2026-45040 (CVE-2026-45040)
vulnerability in CVE-2026-45040 (CVE-2026-45040). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.0-beta.2` or later.
|