Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-4513 Vulnerability in chai-as-tuned (MAL-2026-4513)
vulnerability in chai-as-tuned (MAL-2026-4513). Risk of unauthorized operations or information disclosure. Exploitable via ``index.js``.
GHSA-hgv7-v322-mmgr Information Disclosure in @sveltejs/kit (GHSA-hgv7-v322-mmgr)
vulnerability in @sveltejs/kit (GHSA-hgv7-v322-mmgr). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.60.1` or later.
CVE-2026-46492 Vulnerability in md-fileserver (CVE-2026-46492)
vulnerability in md-fileserver (CVE-2026-46492). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.10.3` or later.
CGA-4xg4-697f-v965 CGA-4xg4-697f-v965
CGA-2fhv-xgc3-3ppc CGA-2fhv-xgc3-3ppc
CGA-87q7-2fx4-9jc6 CGA-87q7-2fx4-9jc6
CGA-4fc2-qrqv-5wwm CGA-4fc2-qrqv-5wwm
CVE-2026-46432 Code Injection in lmdeploy (CVE-2026-46432)
code injection in lmdeploy (CVE-2026-46432). Successful exploitation can lead to full system takeover. Exploitable via ``model_path``. Mitigation: upgrade to `0.13.0` or later.
CGA-g4xg-x6cr-w829 CGA-g4xg-x6cr-w829
CVE-2026-46490 Vulnerability in samlify (CVE-2026-46490)
vulnerability in samlify (CVE-2026-46490). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.13.0` or later.
GHSA-763j-3p5v-jfc6 Path Traversal in github.com/mvt-project/androidqf (GHSA-763j-3p5v-jfc6)
path traversal in github.com/mvt-project/androidqf (GHSA-763j-3p5v-jfc6). Risk of unauthorized operations or information disclosure. Exploitable via ``filepath.Join``. Mitigation: upgrade to `1.8.3` or later.
CVE-2022-4304 Vulnerability in cisa (CVE-2022-4304)
vulnerability in cisa (CVE-2022-4304). Risk of unauthorized operations or information disclosure.
GHSA-jf2q-463c-6f52 Path Traversal in github.com/mvt-project/androidqf (GHSA-jf2q-463c-6f52)
path traversal in github.com/mvt-project/androidqf (GHSA-jf2q-463c-6f52). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.3` or later.
CVE-2026-46486 Path Traversal in mvt (CVE-2026-46486)
path traversal in mvt (CVE-2026-46486). Risk of unauthorized operations or information disclosure. Exploitable via ``fileID``. Mitigation: upgrade to `2026.5.12` or later.
GHSA-f75f-hrx6-f8qh Vulnerability in @pulse-web-platform-core/scripts-loader (GHSA-f75f-hrx6-f8qh)
vulnerability in @pulse-web-platform-core/scripts-loader (GHSA-f75f-hrx6-f8qh). Risk of unauthorized operations or information disclosure. Exploitable via ``oob.moika.tech``.
MAL-2026-4421 Vulnerability in @pulse-web-platform-core/scripts-loader (MAL-2026-4421)
vulnerability in @pulse-web-platform-core/scripts-loader (MAL-2026-4421). Risk of unauthorized operations or information disclosure. Exploitable via ``oob.moika.tech``.
CVE-2026-46403 Vulnerability in github.com/klever-io/klever-go (CVE-2026-46403)
vulnerability in github.com/klever-io/klever-go (CVE-2026-46403). Data can be tampered with by attackers. Exploitable via ``develop``. Mitigation: upgrade to `1.7.17` or later.
CVE-2026-48989 Vulnerability in windows-mcp (CVE-2026-48989)
vulnerability in windows-mcp (CVE-2026-48989). Risk of unauthorized operations or information disclosure. Exploitable via ``PowerShell``. Mitigation: upgrade to `0.7.5` or later.
CVE-2026-46481 Vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481)
vulnerability in org.open-metadata:openmetadata-service (CVE-2026-46481). Confidential information can be exposed externally. Exploitable via `POST /api/v1/automations/workflows`. Mitigation: upgrade to `1.12.4` or later.
RXSA-2026:3488 Vulnerability in RXSA-2026:3488 (RXSA-2026:3488)
vulnerability in RXSA-2026:3488 (RXSA-2026:3488). Risk of unauthorized operations or information disclosure.
RXSA-2025:4341 Vulnerability in RXSA-2025:4341 (RXSA-2025:4341)
vulnerability in RXSA-2025:4341 (RXSA-2025:4341). Successful exploitation can lead to full system takeover.
RXSA-2026:13565 Vulnerability in kernel (RXSA-2026:13565)
vulnerability in kernel (RXSA-2026:13565). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:5.14.0-611.54.1.el9_7.cloud.1.0` or later.
RXSA-2026:13577 Vulnerability in kernel (RXSA-2026:13577)
vulnerability in kernel (RXSA-2026:13577). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.123.1.el8_10.cloud.0.1` or later.
RLSA-2026:4649 Vulnerability in grub2 (RLSA-2026:4649)
vulnerability in grub2 (RLSA-2026:4649). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1:2.12-29.el10_1.2.rocky.0.1` or later.
RLSA-2026:7383 Vulnerability in cockpit (RLSA-2026:7383)
vulnerability in cockpit (RLSA-2026:7383). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:344-3.el10_1.rocky.0.1` or later.
RLSA-2026:9693 Vulnerability in java-25-openjdk (RLSA-2026:9693)
vulnerability in java-25-openjdk (RLSA-2026:9693). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:25.0.3.0.9-1.el10_1` or later.
RLSA-2026:6463 Vulnerability in openssh (RLSA-2026:6463)
vulnerability in openssh (RLSA-2026:6463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.9p1-13.el10_1.rocky.0.1` or later.
RLSA-2026:3840 Vulnerability in image-builder (RLSA-2026:3840)
vulnerability in image-builder (RLSA-2026:3840). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:31-4.el10_1.rocky.0.2` or later.
RLSA-2026:13380 Vulnerability in openssh (RLSA-2026:13380)
vulnerability in openssh (RLSA-2026:13380). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:9.9p1-14.el10_1.rocky.0.1` or later.
RLSA-2026:4162 Vulnerability in mysql8.4 (RLSA-2026:4162)
vulnerability in mysql8.4 (RLSA-2026:4162). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.4.8-1.el10_1.rocky.0.1` or later.
RLSA-2026:1838 Vulnerability in image-builder (RLSA-2026:1838)
vulnerability in image-builder (RLSA-2026:1838). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:31-3.el10_1.rocky.0.2` or later.
RLSA-2026:1837 Vulnerability in osbuild-composer (RLSA-2026:1837)
vulnerability in osbuild-composer (RLSA-2026:1837). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:149-4.el10_1.rocky.0.8` or later.
RLSA-2026:13651 Vulnerability in systemd (RLSA-2026:13651)
vulnerability in systemd (RLSA-2026:13651). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:257-13.el10_1.3.rocky.0.1` or later.
RLSA-2026:3752 Vulnerability in osbuild-composer (RLSA-2026:3752)
vulnerability in osbuild-composer (RLSA-2026:3752). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:149-5.el10_1.rocky.0.8` or later.
RLSA-2026:13642 Vulnerability in image-builder (RLSA-2026:13642)
vulnerability in image-builder (RLSA-2026:13642). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:31-5.el10_1.rocky.0.2` or later.
RLSA-2026:13643 Vulnerability in osbuild-composer (RLSA-2026:13643)
vulnerability in osbuild-composer (RLSA-2026:13643). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:149-6.el10_1.rocky.0.8` or later.
RLSA-2025:21015 Vulnerability in vim (RLSA-2025:21015)
vulnerability in vim (RLSA-2025:21015). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:9.1.083-6.el10_1.1` or later.
RLSA-2025:20126 Vulnerability in openssh (RLSA-2025:20126)
vulnerability in openssh (RLSA-2025:20126). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.9p1-11.el10.rocky.0.1` or later.
RLSA-2025:23479 Vulnerability in openssh (RLSA-2025:23479)
vulnerability in openssh (RLSA-2025:23479). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.9p1-12.el10_1.rocky.0.1` or later.
MAL-2026-4703 Vulnerability in veteran (MAL-2026-4703)
vulnerability in veteran (MAL-2026-4703). Risk of unauthorized operations or information disclosure. Exploitable via ``install.js``.
RLSA-2025:20532 Vulnerability in grub2 (RLSA-2025:20532)
vulnerability in grub2 (RLSA-2025:20532). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1:2.06-114.el9_7.0.1` or later.
RLSA-2026:4760 Vulnerability in grub2 (RLSA-2026:4760)
vulnerability in grub2 (RLSA-2026:4760). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1:2.06-114.el9_7.1.rocky.0.1` or later.
RLSA-2026:7384 Vulnerability in cockpit (RLSA-2026:7384)
vulnerability in cockpit (RLSA-2026:7384). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:344-2.el9_7.rocky.0.1` or later.
RLSA-2026:7002 Vulnerability in nginx (RLSA-2026:7002)
vulnerability in nginx (RLSA-2026:7002). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.20.1-24.el9_7.2.rocky.0.1` or later.
RLSA-2026:9044 Vulnerability in osbuild-composer (RLSA-2026:9044)
vulnerability in osbuild-composer (RLSA-2026:9044). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:149-5.el9_7.rocky.0.1` or later.
RLSA-2026:3839 Vulnerability in image-builder (RLSA-2026:3839)
vulnerability in image-builder (RLSA-2026:3839). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:31-3.el9_7.rocky.0.2` or later.
RLSA-2026:6462 Vulnerability in openssh (RLSA-2026:6462)
vulnerability in openssh (RLSA-2026:6462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.7p1-48.el9_7.rocky.0.1` or later.
RLSA-2026:3753 Vulnerability in osbuild-composer (RLSA-2026:3753)
vulnerability in osbuild-composer (RLSA-2026:3753). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:149-4.el9_7.rocky.0.8` or later.
RLSA-2025:23480 Vulnerability in openssh (RLSA-2025:23480)
vulnerability in openssh (RLSA-2025:23480). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.7p1-47.el9_7.rocky.0.1` or later.
RLSA-2026:1381 Vulnerability in osbuild-composer (RLSA-2026:1381)
vulnerability in osbuild-composer (RLSA-2026:1381). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:149-3.el9_7.rocky.0.8` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →