Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MINI-vg2r-3gvf-f449 |
|
MINI-vg2r-3gvf-f449 |
| MINI-wj3x-98m9-974p |
|
MINI-wj3x-98m9-974p |
| MINI-668x-463x-69jm |
|
MINI-668x-463x-69jm |
| MINI-wmc8-2xm6-f4qp |
|
MINI-wmc8-2xm6-f4qp |
| MINI-f2vh-qc56-gxwc |
|
MINI-f2vh-qc56-gxwc |
| MINI-g999-7897-5jrh |
|
MINI-g999-7897-5jrh |
| MAL-2026-4664 |
|
Vulnerability in search-connector-template (MAL-2026-4664)
vulnerability in search-connector-template (MAL-2026-4664). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46673 |
|
Vulnerability in russh-cryptovec (CVE-2026-46673)
vulnerability in russh-cryptovec (CVE-2026-46673). Risk of unauthorized operations or information disclosure. Exploitable via ``CryptoVec``. Mitigation: upgrade to `0.60.3` or later.
|
| DEBIAN-CVE-2026-8376 |
|
Vulnerability in perl (DEBIAN-CVE-2026-8376)
vulnerability in perl (DEBIAN-CVE-2026-8376). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.40.1-8` or later.
|
| GHSA-59f3-7227-wmh4 |
|
Vulnerability in @hulumi/policies (GHSA-59f3-7227-wmh4)
vulnerability in @hulumi/policies (GHSA-59f3-7227-wmh4). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
|
| GHSA-q2f7-m237-v562 |
|
Vulnerability in @hulumi/policies (GHSA-q2f7-m237-v562)
vulnerability in @hulumi/policies (GHSA-q2f7-m237-v562). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
|
| GHSA-4xrh-5m3m-328w |
|
Privilege Escalation in @hulumi/policies (GHSA-4xrh-5m3m-328w)
vulnerability in @hulumi/policies (GHSA-4xrh-5m3m-328w). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
|
| GHSA-g43v-9x7q-83pq |
|
Vulnerability in @hulumi/policies (GHSA-g43v-9x7q-83pq)
vulnerability in @hulumi/policies (GHSA-g43v-9x7q-83pq). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
|
| GHSA-2ffm-hxrq-qqmm |
|
Vulnerability in @hulumi/drift (GHSA-2ffm-hxrq-qqmm)
vulnerability in @hulumi/drift (GHSA-2ffm-hxrq-qqmm). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
|
| GHSA-gfp8-mp24-5vxg |
|
Vulnerability in @hulumi/baseline (GHSA-gfp8-mp24-5vxg)
vulnerability in @hulumi/baseline (GHSA-gfp8-mp24-5vxg). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.2` or later.
|
| CVE-2026-46609 |
|
Cross-Site Scripting (XSS) in Umbraco.Cms (CVE-2026-46609)
cross-site scripting in Umbraco.Cms (CVE-2026-46609). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `17.4.0` or later.
|
| MAL-2026-4535 |
|
Vulnerability in configcat-trello-powerup (MAL-2026-4535)
vulnerability in configcat-trello-powerup (MAL-2026-4535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46556 |
|
SSRF (Server-Side Request Forgery) in flaskbb (CVE-2026-46556)
SSRF in flaskbb (CVE-2026-46556). Confidential information can be exposed externally. Exploitable via `POST /user/settings/user-details`.
|
| MAL-2026-4424 |
|
Vulnerability in @remitee-money-transfer/rmt-base (MAL-2026-4424)
vulnerability in @remitee-money-transfer/rmt-base (MAL-2026-4424). Risk of unauthorized operations or information disclosure. Exploitable via ``astralis``.
|
| CVE-2026-46554 |
|
Vulnerability in nocodb (CVE-2026-46554)
vulnerability in nocodb (CVE-2026-46554). Risk of unauthorized operations or information disclosure.
|
| USN-8294-1 |
|
Vulnerability in postgresql-14 (USN-8294-1)
vulnerability in postgresql-14 (USN-8294-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `14.23-0ubuntu0.22.04.1` or later.
|
| CVE-2026-46553 |
|
Vulnerability in nocodb (CVE-2026-46553)
vulnerability in nocodb (CVE-2026-46553). Risk of unauthorized operations or information disclosure. Exploitable via ``NC_ATTACHMENT_FIELD_SIZE``.
|
| CVE-2026-46552 |
|
Vulnerability in nocodb (CVE-2026-46552)
vulnerability in nocodb (CVE-2026-46552). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/v2/meta/bases/`.
|
| CVE-2026-46551 |
|
Vulnerability in nocodb (CVE-2026-46551)
vulnerability in nocodb (CVE-2026-46551). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/db/storage/upload-by-url`.
|
| CVE-2026-46550 |
|
Vulnerability in nocodb (CVE-2026-46550)
vulnerability in nocodb (CVE-2026-46550). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v2/auth/token/refresh`.
|
| CVE-2026-46549 |
|
Authorization Flaw in nocodb (CVE-2026-46549)
vulnerability in nocodb (CVE-2026-46549). Risk of unauthorized operations or information disclosure. Exploitable via ``oauth_scope``.
|
| CVE-2026-46548 |
|
SSRF (Server-Side Request Forgery) in nocodb (CVE-2026-46548)
SSRF in nocodb (CVE-2026-46548). Risk of unauthorized operations or information disclosure. Exploitable via ``httpAgent``.
|
| CVE-2026-46547 |
|
Cross-Site Scripting (XSS) in nocodb (CVE-2026-46547)
cross-site scripting in nocodb (CVE-2026-46547). Risk of unauthorized operations or information disclosure. Exploitable via ``ncRedirectUrl``.
|
| CVE-2026-46519 |
|
Authorization Flaw in mcp-server-kubernetes (CVE-2026-46519)
vulnerability in mcp-server-kubernetes (CVE-2026-46519). Successful exploitation can lead to full system takeover. Exploitable via ``ALLOW_ONLY_READONLY_TOOLS``. Mitigation: upgrade to `3.6.0` or later.
|
| CVE-2026-46668 |
|
Vulnerability in github.com/authzed/spicedb (CVE-2026-46668)
vulnerability in github.com/authzed/spicedb (CVE-2026-46668). Risk of unauthorized operations or information disclosure. Exploitable via ``lr3``. Mitigation: upgrade to `1.52.0` or later.
|
| ECHO-abbb-9356-9662 |
|
ECHO-abbb-9356-9662 |
| CVE-2026-46654 |
|
Vulnerability in p3-challenger (CVE-2026-46654)
vulnerability in p3-challenger (CVE-2026-46654). Risk of unauthorized operations or information disclosure. Exploitable via ``transcript_malleability``. Mitigation: upgrade to `0.5.3` or later.
|
| CVE-2026-46643 |
|
OS Command Injection in KnpLabs/knp-snappy (CVE-2026-46643)
OS command injection in KnpLabs/knp-snappy (CVE-2026-46643). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.1` or later.
|
| CVE-2026-46683 |
|
SSRF (Server-Side Request Forgery) in knplabs/knp-snappy (CVE-2026-46683)
SSRF in knplabs/knp-snappy (CVE-2026-46683). Risk of unauthorized operations or information disclosure. Exploitable via ``http``. Mitigation: upgrade to `1.7.0` or later.
|
| MAL-2026-4530 |
|
Vulnerability in cloudsmith-vsc (MAL-2026-4530)
vulnerability in cloudsmith-vsc (MAL-2026-4530). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46618 |
|
Vulnerability in github.com/fission/fission (CVE-2026-46618)
vulnerability in github.com/fission/fission (CVE-2026-46618). Risk of unauthorized operations or information disclosure. Exploitable via ``Environment.spec.builder.command``. Mitigation: upgrade to `1.23.0` or later.
|
| CVE-2026-4843 |
|
Vulnerability in wordpress (CVE-2026-4843)
vulnerability in wordpress (CVE-2026-4843). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47114 |
|
Vulnerability in CVE-2026-47114 (CVE-2026-47114)
vulnerability in CVE-2026-47114 (CVE-2026-47114). Successful exploitation can lead to full system takeover.
|
| CVE-2026-46617 |
|
Vulnerability in github.com/fission/fission (CVE-2026-46617)
vulnerability in github.com/fission/fission (CVE-2026-46617). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.23.0` or later.
|
| CVE-2026-46614 |
|
Vulnerability in github.com/fission/fission (CVE-2026-46614)
vulnerability in github.com/fission/fission (CVE-2026-46614). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v2/foo`. Mitigation: upgrade to `1.23.0` or later.
|
| CVE-2026-46612 |
|
Vulnerability in github.com/fission/fission (CVE-2026-46612)
vulnerability in github.com/fission/fission (CVE-2026-46612). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.23.0` or later.
|
| MAL-2026-4416 |
|
Vulnerability in @ornexus/neocortex (MAL-2026-4416)
vulnerability in @ornexus/neocortex (MAL-2026-4416). Risk of unauthorized operations or information disclosure. Exploitable via ``install_coderabbit``.
|
| CVE-2026-46616 |
|
Open Redirect in Umbraco.Cms (CVE-2026-46616)
vulnerability in Umbraco.Cms (CVE-2026-46616). Risk of unauthorized operations or information disclosure. Exploitable via ``UmbLoginStatusController``. Mitigation: upgrade to `17.4.0` or later.
|
| MAL-2026-4565 |
|
Vulnerability in fnd-stores (MAL-2026-4565)
vulnerability in fnd-stores (MAL-2026-4565). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4650 |
|
Vulnerability in pubnub-moderation-tool (MAL-2026-4650)
vulnerability in pubnub-moderation-tool (MAL-2026-4650). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46561 |
|
SSRF (Server-Side Request Forgery) in pyload-ng (CVE-2026-46561)
SSRF in pyload-ng (CVE-2026-46561). Risk of unauthorized operations or information disclosure. Exploitable via ``PREREQFUNCTION``. Mitigation: upgrade to `0.5.0b3.dev100` or later.
|
| CVE-2026-46545 |
|
Vulnerability in nimiq-primitives (CVE-2026-46545)
vulnerability in nimiq-primitives (CVE-2026-46545). Risk of unauthorized operations or information disclosure. Exploitable via ``RequestChunk``. Mitigation: upgrade to `1.5.0` or later.
|
| DEBIAN-CVE-2026-42784 |
|
DEBIAN-CVE-2026-42784 |
| CVE-2026-46543 |
|
Vulnerability in nimiq-blockchain (CVE-2026-46543)
vulnerability in nimiq-blockchain (CVE-2026-46543). Risk of unauthorized operations or information disclosure. Exploitable via ``get_epoch_chunks``. Mitigation: upgrade to `1.5.0` or later.
|
| CVE-2026-46542 |
|
Vulnerability in nimiq-keys (CVE-2026-46542)
vulnerability in nimiq-keys (CVE-2026-46542). Risk of unauthorized operations or information disclosure. Exploitable via ``Ed25519PublicKey``. Mitigation: upgrade to `1.4.0` or later.
|