Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-45039 Vulnerability in CVE-2026-45039 (CVE-2026-45039)
vulnerability in CVE-2026-45039 (CVE-2026-45039). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0-beta.2` or later.
CVE-2026-44394 Authorization Flaw in keystone (CVE-2026-44394)
vulnerability in keystone (CVE-2026-44394). Risk of unauthorized operations or information disclosure. Exploitable via `POST /v3/auth/tokens`. Mitigation: upgrade to `29.0.2` or later.
DEBIAN-CVE-2026-43000 Vulnerability in keystone (DEBIAN-CVE-2026-43000)
vulnerability in keystone (DEBIAN-CVE-2026-43000). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:18.1.0-1+deb11u3` or later.
DEBIAN-CVE-2026-42999 Vulnerability in keystone (DEBIAN-CVE-2026-42999)
vulnerability in keystone (DEBIAN-CVE-2026-42999). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:18.1.0-1+deb11u3` or later.
DEBIAN-CVE-2026-42998 Vulnerability in keystone (DEBIAN-CVE-2026-42998)
vulnerability in keystone (DEBIAN-CVE-2026-42998). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:18.1.0-1+deb11u3` or later.
CVE-2026-43000 Vulnerability in keystone (CVE-2026-43000)
vulnerability in keystone (CVE-2026-43000). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.
CVE-2026-42999 Vulnerability in keystone (CVE-2026-42999)
vulnerability in keystone (CVE-2026-42999). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.
CVE-2026-42998 Authorization Flaw in keystone (CVE-2026-42998)
vulnerability in keystone (CVE-2026-42998). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `29.0.2` or later.
CVE-2026-30761 Unrestricted File Upload in CVE-2026-30761 (CVE-2026-30761)
vulnerability in CVE-2026-30761 (CVE-2026-30761). Risk of unauthorized operations or information disclosure.
CVE-2026-30760 Vulnerability in CVE-2026-30760 (CVE-2026-30760)
vulnerability in CVE-2026-30760 (CVE-2026-30760). Risk of unauthorized operations or information disclosure.
CGA-33rg-r5q2-j279 CGA-33rg-r5q2-j279
CVE-2026-46439 Vulnerability in compliance-trestle (CVE-2026-46439)
vulnerability in compliance-trestle (CVE-2026-46439). Successful exploitation can lead to full system takeover. Exploitable via ``render_template``. Mitigation: upgrade to `4.0.3` or later.
CVE-2026-46405 Vulnerability in github.com/openbao/openbao (CVE-2026-46405)
vulnerability in github.com/openbao/openbao (CVE-2026-46405). Risk of unauthorized operations or information disclosure. Exploitable via ``GET``. Mitigation: upgrade to `2.5.4` or later.
USN-8229-2 Vulnerability in sed (USN-8229-2)
vulnerability in sed (USN-8229-2). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4-2ubuntu0.1~esm1` or later.
CVE-2026-46380 SSRF (Server-Side Request Forgery) in compliance-trestle (CVE-2026-46380)
SSRF in compliance-trestle (CVE-2026-46380). Confidential information can be exposed externally. Mitigation: upgrade to `3.12.2` or later.
USN-8342-1 Vulnerability in vim (USN-8342-1)
vulnerability in vim (USN-8342-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:7.4.052-1ubuntu3.1+esm27` or later.
CVE-2026-45323 Cross-Site Scripting (XSS) in jpettitt (CVE-2026-45323)
cross-site scripting in jpettitt (CVE-2026-45323). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.3.3` or later.
CVE-2026-45307 Open Redirect in CVE-2026-45307 (CVE-2026-45307)
vulnerability in CVE-2026-45307 (CVE-2026-45307). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.8.20-alpha` or later.
CVE-2026-45297 Vulnerability in CVE-2026-45297 (CVE-2026-45297)
vulnerability in CVE-2026-45297 (CVE-2026-45297). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.26.0` or later.
CVE-2026-45296 Vulnerability in CVE-2026-45296 (CVE-2026-45296)
vulnerability in CVE-2026-45296 (CVE-2026-45296). Confidential information can be exposed externally. Mitigation: upgrade to `1.26.0` or later.
CVE-2026-34126 Vulnerability in tp-link (CVE-2026-34126)
vulnerability in tp-link (CVE-2026-34126). Successful exploitation can lead to full system takeover.
USN-8343-1 Vulnerability in multipart (USN-8343-1)
vulnerability in multipart (USN-8343-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.1-2+deb13u1build0.25.10.1` or later.
CVE-2026-46358 Vulnerability in github.com/openbao/openbao (CVE-2026-46358)
vulnerability in github.com/openbao/openbao (CVE-2026-46358). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.4` or later.
MAL-2026-4859 Vulnerability in telethon-pro-safe (MAL-2026-4859)
vulnerability in telethon-pro-safe (MAL-2026-4859). Risk of unauthorized operations or information disclosure.
CVE-2026-46345 Path Traversal in compliance-trestle (CVE-2026-46345)
path traversal in compliance-trestle (CVE-2026-46345). Successful exploitation can lead to full system takeover. Exploitable via ``trestle``. Mitigation: upgrade to `3.12.2` or later.
CVE-2026-45808 Authorization Flaw in github.com/openbao/openbao (CVE-2026-45808)
vulnerability in github.com/openbao/openbao (CVE-2026-45808). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.4` or later.
CVE-2026-45774 Path Traversal in compliance-trestle (CVE-2026-45774)
path traversal in compliance-trestle (CVE-2026-45774). Risk of unauthorized operations or information disclosure. Exploitable via ``trestle_root``. Mitigation: upgrade to `3.12.2` or later.
CVE-2026-45756 Vulnerability in symfony/json-path (CVE-2026-45756)
vulnerability in symfony/json-path (CVE-2026-45756). Risk of unauthorized operations or information disclosure. Exploitable via ``JsonPath``. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45755 Vulnerability in symfony/mailtrap-mailer (CVE-2026-45755)
vulnerability in symfony/mailtrap-mailer (CVE-2026-45755). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45754 Authentication Bypass in symfony/lox24-notifier (CVE-2026-45754)
authentication bypass in symfony/lox24-notifier (CVE-2026-45754). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.12` or later.
CVE-2026-45287 Vulnerability in go.opentelemetry.io/otel/schema/v1.1 (CVE-2026-45287)
vulnerability in go.opentelemetry.io/otel/schema/v1.1 (CVE-2026-45287). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.0.17` or later.
CVE-2026-9098 Vulnerability in github.com/casdoor/casdoor (CVE-2026-9098)
vulnerability in github.com/casdoor/casdoor (CVE-2026-9098). Confidential information can be exposed externally.
CVE-2026-9097 Vulnerability in github.com/casdoor/casdoor (CVE-2026-9097)
vulnerability in github.com/casdoor/casdoor (CVE-2026-9097). Successful exploitation can lead to full system takeover.
CVE-2026-9096 Vulnerability in github.com/casdoor/casdoor (CVE-2026-9096)
vulnerability in github.com/casdoor/casdoor (CVE-2026-9096). Risk of unauthorized operations or information disclosure.
CVE-2026-9095 Vulnerability in CVE-2026-9095 (CVE-2026-9095)
vulnerability in CVE-2026-9095 (CVE-2026-9095). Successful exploitation can lead to full system takeover.
CVE-2026-9094 Privilege Escalation in github.com/casdoor/casdoor (CVE-2026-9094)
vulnerability in github.com/casdoor/casdoor (CVE-2026-9094). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.387.0` or later.
CVE-2026-9093 Vulnerability in github.com/casdoor/casdoor (CVE-2026-9093)
vulnerability in github.com/casdoor/casdoor (CVE-2026-9093). Successful exploitation can lead to full system takeover.
CVE-2026-9092 Vulnerability in CVE-2026-9092 (CVE-2026-9092)
vulnerability in CVE-2026-9092 (CVE-2026-9092). Confidential information can be exposed externally.
CVE-2026-9091 Authentication Bypass in github.com/casdoor/casdoor (CVE-2026-9091)
authentication bypass in github.com/casdoor/casdoor (CVE-2026-9091). Risk of unauthorized operations or information disclosure.
CVE-2026-9090 Authentication Bypass in github.com/casdoor/casdoor (CVE-2026-9090)
authentication bypass in github.com/casdoor/casdoor (CVE-2026-9090). Confidential information can be exposed externally.
CVE-2026-8697 Vulnerability in tp-link (CVE-2026-8697)
vulnerability in tp-link (CVE-2026-8697). Successful exploitation can lead to full system takeover.
CVE-2026-6720 Vulnerability in github.com/projectcalico/calicoctl/v3 (CVE-2026-6720)
vulnerability in github.com/projectcalico/calicoctl/v3 (CVE-2026-6720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.31.6` or later.
CVE-2026-47676 Vulnerability in hono (CVE-2026-47676)
vulnerability in hono (CVE-2026-47676). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.12.21` or later.
CVE-2026-47675 Vulnerability in hono (CVE-2026-47675)
vulnerability in hono (CVE-2026-47675). Risk of unauthorized operations or information disclosure. Exploitable via ``domain``. Mitigation: upgrade to `4.12.21` or later.
CVE-2026-47674 Vulnerability in hono (CVE-2026-47674)
vulnerability in hono (CVE-2026-47674). Risk of unauthorized operations or information disclosure. Exploitable via ``getIP``. Mitigation: upgrade to `4.12.21` or later.
CVE-2026-47673 Vulnerability in hono (CVE-2026-47673)
vulnerability in hono (CVE-2026-47673). Risk of unauthorized operations or information disclosure. Exploitable via ``jwt``. Mitigation: upgrade to `4.12.21` or later.
DEBIAN-CVE-2026-45078 Vulnerability in matrix-synapse (DEBIAN-CVE-2026-45078)
vulnerability in matrix-synapse (DEBIAN-CVE-2026-45078). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.152.1` or later.
DEBIAN-CVE-2026-45076 Vulnerability in matrix-synapse (DEBIAN-CVE-2026-45076)
vulnerability in matrix-synapse (DEBIAN-CVE-2026-45076). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.152.1` or later.
CVE-2026-45261 Code Injection in CVE-2026-45261 (CVE-2026-45261)
code injection in CVE-2026-45261 (CVE-2026-45261). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.19.7` or later.
CVE-2026-44466 OS Command Injection in zed (CVE-2026-44466)
OS command injection in zed (CVE-2026-44466). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.229.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →