Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MINI-vg2r-3gvf-f449 MINI-vg2r-3gvf-f449
MINI-wj3x-98m9-974p MINI-wj3x-98m9-974p
MINI-668x-463x-69jm MINI-668x-463x-69jm
MINI-wmc8-2xm6-f4qp MINI-wmc8-2xm6-f4qp
MINI-f2vh-qc56-gxwc MINI-f2vh-qc56-gxwc
MINI-g999-7897-5jrh MINI-g999-7897-5jrh
MAL-2026-4664 Vulnerability in search-connector-template (MAL-2026-4664)
vulnerability in search-connector-template (MAL-2026-4664). Risk of unauthorized operations or information disclosure.
CVE-2026-46673 Vulnerability in russh-cryptovec (CVE-2026-46673)
vulnerability in russh-cryptovec (CVE-2026-46673). Risk of unauthorized operations or information disclosure. Exploitable via ``CryptoVec``. Mitigation: upgrade to `0.60.3` or later.
DEBIAN-CVE-2026-8376 Vulnerability in perl (DEBIAN-CVE-2026-8376)
vulnerability in perl (DEBIAN-CVE-2026-8376). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.40.1-8` or later.
GHSA-59f3-7227-wmh4 Vulnerability in @hulumi/policies (GHSA-59f3-7227-wmh4)
vulnerability in @hulumi/policies (GHSA-59f3-7227-wmh4). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
GHSA-q2f7-m237-v562 Vulnerability in @hulumi/policies (GHSA-q2f7-m237-v562)
vulnerability in @hulumi/policies (GHSA-q2f7-m237-v562). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
GHSA-4xrh-5m3m-328w Privilege Escalation in @hulumi/policies (GHSA-4xrh-5m3m-328w)
vulnerability in @hulumi/policies (GHSA-4xrh-5m3m-328w). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
GHSA-g43v-9x7q-83pq Vulnerability in @hulumi/policies (GHSA-g43v-9x7q-83pq)
vulnerability in @hulumi/policies (GHSA-g43v-9x7q-83pq). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
GHSA-2ffm-hxrq-qqmm Vulnerability in @hulumi/drift (GHSA-2ffm-hxrq-qqmm)
vulnerability in @hulumi/drift (GHSA-2ffm-hxrq-qqmm). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
GHSA-gfp8-mp24-5vxg Vulnerability in @hulumi/baseline (GHSA-gfp8-mp24-5vxg)
vulnerability in @hulumi/baseline (GHSA-gfp8-mp24-5vxg). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
CVE-2026-46609 Cross-Site Scripting (XSS) in Umbraco.Cms (CVE-2026-46609)
cross-site scripting in Umbraco.Cms (CVE-2026-46609). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.4.0` or later.
MAL-2026-4535 Vulnerability in configcat-trello-powerup (MAL-2026-4535)
vulnerability in configcat-trello-powerup (MAL-2026-4535). Risk of unauthorized operations or information disclosure.
CVE-2026-46556 SSRF (Server-Side Request Forgery) in flaskbb (CVE-2026-46556)
SSRF in flaskbb (CVE-2026-46556). Confidential information can be exposed externally. Exploitable via `POST /user/settings/user-details`.
MAL-2026-4424 Vulnerability in @remitee-money-transfer/rmt-base (MAL-2026-4424)
vulnerability in @remitee-money-transfer/rmt-base (MAL-2026-4424). Risk of unauthorized operations or information disclosure. Exploitable via ``astralis``.
CVE-2026-46554 Vulnerability in nocodb (CVE-2026-46554)
vulnerability in nocodb (CVE-2026-46554). Risk of unauthorized operations or information disclosure.
USN-8294-1 Vulnerability in postgresql-14 (USN-8294-1)
vulnerability in postgresql-14 (USN-8294-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23-0ubuntu0.22.04.1` or later.
CVE-2026-46553 Vulnerability in nocodb (CVE-2026-46553)
vulnerability in nocodb (CVE-2026-46553). Risk of unauthorized operations or information disclosure. Exploitable via ``NC_ATTACHMENT_FIELD_SIZE``.
CVE-2026-46552 Vulnerability in nocodb (CVE-2026-46552)
vulnerability in nocodb (CVE-2026-46552). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v2/meta/bases/`.
CVE-2026-46551 Vulnerability in nocodb (CVE-2026-46551)
vulnerability in nocodb (CVE-2026-46551). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/db/storage/upload-by-url`.
CVE-2026-46550 Vulnerability in nocodb (CVE-2026-46550)
vulnerability in nocodb (CVE-2026-46550). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/auth/token/refresh`.
CVE-2026-46549 Authorization Flaw in nocodb (CVE-2026-46549)
vulnerability in nocodb (CVE-2026-46549). Risk of unauthorized operations or information disclosure. Exploitable via ``oauth_scope``.
CVE-2026-46548 SSRF (Server-Side Request Forgery) in nocodb (CVE-2026-46548)
SSRF in nocodb (CVE-2026-46548). Risk of unauthorized operations or information disclosure. Exploitable via ``httpAgent``.
CVE-2026-46547 Cross-Site Scripting (XSS) in nocodb (CVE-2026-46547)
cross-site scripting in nocodb (CVE-2026-46547). Risk of unauthorized operations or information disclosure. Exploitable via ``ncRedirectUrl``.
CVE-2026-46519 Authorization Flaw in mcp-server-kubernetes (CVE-2026-46519)
vulnerability in mcp-server-kubernetes (CVE-2026-46519). Successful exploitation can lead to full system takeover. Exploitable via ``ALLOW_ONLY_READONLY_TOOLS``. Mitigation: upgrade to `3.6.0` or later.
CVE-2026-46668 Vulnerability in github.com/authzed/spicedb (CVE-2026-46668)
vulnerability in github.com/authzed/spicedb (CVE-2026-46668). Risk of unauthorized operations or information disclosure. Exploitable via ``lr3``. Mitigation: upgrade to `1.52.0` or later.
ECHO-abbb-9356-9662 ECHO-abbb-9356-9662
CVE-2026-46654 Vulnerability in p3-challenger (CVE-2026-46654)
vulnerability in p3-challenger (CVE-2026-46654). Risk of unauthorized operations or information disclosure. Exploitable via ``transcript_malleability``. Mitigation: upgrade to `0.5.3` or later.
CVE-2026-46643 OS Command Injection in KnpLabs/knp-snappy (CVE-2026-46643)
OS command injection in KnpLabs/knp-snappy (CVE-2026-46643). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.1` or later.
CVE-2026-46683 SSRF (Server-Side Request Forgery) in knplabs/knp-snappy (CVE-2026-46683)
SSRF in knplabs/knp-snappy (CVE-2026-46683). Risk of unauthorized operations or information disclosure. Exploitable via ``http``. Mitigation: upgrade to `1.7.0` or later.
MAL-2026-4530 Vulnerability in cloudsmith-vsc (MAL-2026-4530)
vulnerability in cloudsmith-vsc (MAL-2026-4530). Risk of unauthorized operations or information disclosure.
CVE-2026-46618 Vulnerability in github.com/fission/fission (CVE-2026-46618)
vulnerability in github.com/fission/fission (CVE-2026-46618). Risk of unauthorized operations or information disclosure. Exploitable via ``Environment.spec.builder.command``. Mitigation: upgrade to `1.23.0` or later.
CVE-2026-4843 Vulnerability in wordpress (CVE-2026-4843)
vulnerability in wordpress (CVE-2026-4843). Risk of unauthorized operations or information disclosure.
CVE-2026-47114 Vulnerability in CVE-2026-47114 (CVE-2026-47114)
vulnerability in CVE-2026-47114 (CVE-2026-47114). Successful exploitation can lead to full system takeover.
CVE-2026-46617 Vulnerability in github.com/fission/fission (CVE-2026-46617)
vulnerability in github.com/fission/fission (CVE-2026-46617). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.23.0` or later.
CVE-2026-46614 Vulnerability in github.com/fission/fission (CVE-2026-46614)
vulnerability in github.com/fission/fission (CVE-2026-46614). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v2/foo`. Mitigation: upgrade to `1.23.0` or later.
CVE-2026-46612 Vulnerability in github.com/fission/fission (CVE-2026-46612)
vulnerability in github.com/fission/fission (CVE-2026-46612). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.23.0` or later.
MAL-2026-4416 Vulnerability in @ornexus/neocortex (MAL-2026-4416)
vulnerability in @ornexus/neocortex (MAL-2026-4416). Risk of unauthorized operations or information disclosure. Exploitable via ``install_coderabbit``.
CVE-2026-46616 Open Redirect in Umbraco.Cms (CVE-2026-46616)
vulnerability in Umbraco.Cms (CVE-2026-46616). Risk of unauthorized operations or information disclosure. Exploitable via ``UmbLoginStatusController``. Mitigation: upgrade to `17.4.0` or later.
MAL-2026-4565 Vulnerability in fnd-stores (MAL-2026-4565)
vulnerability in fnd-stores (MAL-2026-4565). Risk of unauthorized operations or information disclosure.
MAL-2026-4650 Vulnerability in pubnub-moderation-tool (MAL-2026-4650)
vulnerability in pubnub-moderation-tool (MAL-2026-4650). Risk of unauthorized operations or information disclosure.
CVE-2026-46561 SSRF (Server-Side Request Forgery) in pyload-ng (CVE-2026-46561)
SSRF in pyload-ng (CVE-2026-46561). Risk of unauthorized operations or information disclosure. Exploitable via ``PREREQFUNCTION``. Mitigation: upgrade to `0.5.0b3.dev100` or later.
CVE-2026-46545 Vulnerability in nimiq-primitives (CVE-2026-46545)
vulnerability in nimiq-primitives (CVE-2026-46545). Risk of unauthorized operations or information disclosure. Exploitable via ``RequestChunk``. Mitigation: upgrade to `1.5.0` or later.
DEBIAN-CVE-2026-42784 DEBIAN-CVE-2026-42784
CVE-2026-46543 Vulnerability in nimiq-blockchain (CVE-2026-46543)
vulnerability in nimiq-blockchain (CVE-2026-46543). Risk of unauthorized operations or information disclosure. Exploitable via ``get_epoch_chunks``. Mitigation: upgrade to `1.5.0` or later.
CVE-2026-46542 Vulnerability in nimiq-keys (CVE-2026-46542)
vulnerability in nimiq-keys (CVE-2026-46542). Risk of unauthorized operations or information disclosure. Exploitable via ``Ed25519PublicKey``. Mitigation: upgrade to `1.4.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →