Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-4651 |
|
Vulnerability in pulse-axios (MAL-2026-4651)
vulnerability in pulse-axios (MAL-2026-4651). Risk of unauthorized operations or information disclosure. Exploitable via ``eval``.
|
| MAL-2026-4659 |
|
Vulnerability in rdflib (MAL-2026-4659)
vulnerability in rdflib (MAL-2026-4659). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4180 |
|
Vulnerability in stripe-utils (MAL-2026-4180)
vulnerability in stripe-utils (MAL-2026-4180). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4494 |
|
Vulnerability in axois-utils (MAL-2026-4494)
vulnerability in axois-utils (MAL-2026-4494). Risk of unauthorized operations or information disclosure. Exploitable via ``axios``.
|
| MAL-2026-4505 |
|
Vulnerability in carvus-lens (MAL-2026-4505)
vulnerability in carvus-lens (MAL-2026-4505). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4643 |
|
Vulnerability in polymarket-clob-client (MAL-2026-4643)
vulnerability in polymarket-clob-client (MAL-2026-4643). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4443 |
|
Vulnerability in @shinzepelly/libsignal-node (MAL-2026-4443)
vulnerability in @shinzepelly/libsignal-node (MAL-2026-4443). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4452 |
|
Vulnerability in @tailwind-core/webpack (MAL-2026-4452)
vulnerability in @tailwind-core/webpack (MAL-2026-4452). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4446 |
|
Vulnerability in @solarcraft/observix (MAL-2026-4446)
vulnerability in @solarcraft/observix (MAL-2026-4446). Risk of unauthorized operations or information disclosure.
|
| GHSA-c852-72hm-gxvf |
|
Vulnerability in get-deps-path (GHSA-c852-72hm-gxvf)
vulnerability in get-deps-path (GHSA-c852-72hm-gxvf). Risk of unauthorized operations or information disclosure. Exploitable via ``model``.
|
| MAL-2026-4571 |
|
Vulnerability in get-deps-path (MAL-2026-4571)
vulnerability in get-deps-path (MAL-2026-4571). Risk of unauthorized operations or information disclosure. Exploitable via ``model``.
|
| MAL-2026-4559 |
|
Vulnerability in fca-eryxenx (MAL-2026-4559)
vulnerability in fca-eryxenx (MAL-2026-4559). Risk of unauthorized operations or information disclosure.
|
| GHSA-fpwv-wv7c-h2mw |
|
Vulnerability in customerdigital-ui-containers-lib (GHSA-fpwv-wv7c-h2mw)
vulnerability in customerdigital-ui-containers-lib (GHSA-fpwv-wv7c-h2mw). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4543 |
|
Vulnerability in customerdigital-ui-containers-lib (MAL-2026-4543)
vulnerability in customerdigital-ui-containers-lib (MAL-2026-4543). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4532 |
|
Vulnerability in code-tool-langfuse (MAL-2026-4532)
vulnerability in code-tool-langfuse (MAL-2026-4532). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4579 |
|
Vulnerability in hpsetup (MAL-2026-4579)
vulnerability in hpsetup (MAL-2026-4579). Risk of unauthorized operations or information disclosure. Exploitable via ``homepage``.
|
| GHSA-44rg-m26f-r36f |
|
Vulnerability in jsonbson (GHSA-44rg-m26f-r36f)
vulnerability in jsonbson (GHSA-44rg-m26f-r36f). Risk of unauthorized operations or information disclosure. Exploitable via ``corelia``.
|
| MAL-2026-4407 |
|
Vulnerability in @mcpassure/mcp-cnes (MAL-2026-4407)
vulnerability in @mcpassure/mcp-cnes (MAL-2026-4407). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4406 |
|
Vulnerability in @mcpassure/mcp-anvisa-bulario (MAL-2026-4406)
vulnerability in @mcpassure/mcp-anvisa-bulario (MAL-2026-4406). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-4427 |
|
Vulnerability in @rocketreach/rr-components (MAL-2026-4427)
vulnerability in @rocketreach/rr-components (MAL-2026-4427). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-4450 |
|
Vulnerability in @tailwind-core/postcss (MAL-2026-4450)
vulnerability in @tailwind-core/postcss (MAL-2026-4450). Risk of unauthorized operations or information disclosure.
|
| GHSA-v8fq-265h-rcw5 |
|
Vulnerability in crypto-javascript (GHSA-v8fq-265h-rcw5)
vulnerability in crypto-javascript (GHSA-v8fq-265h-rcw5). Risk of unauthorized operations or information disclosure. Exploitable via ``files``.
|
| MAL-2026-4542 |
|
Vulnerability in crypto-javascript (MAL-2026-4542)
vulnerability in crypto-javascript (MAL-2026-4542). Risk of unauthorized operations or information disclosure. Exploitable via ``files``.
|
| CVE-2026-45585 |
|
Command Injection in microsoft (CVE-2026-45585)
command injection in microsoft (CVE-2026-45585). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39309 |
|
Vulnerability in CVE-2026-39309 (CVE-2026-39309)
vulnerability in CVE-2026-39309 (CVE-2026-39309). Confidential information can be exposed externally.
|
| CVE-2026-35593 |
|
Path Traversal in CVE-2026-35593 (CVE-2026-35593)
path traversal in CVE-2026-35593 (CVE-2026-35593). Confidential information can be exposed externally.
|
| RLSA-2026:19346 |
|
Vulnerability in libcap (RLSA-2026:19346)
vulnerability in libcap (RLSA-2026:19346). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:2.48-10.el9_7.1` or later.
|
| RLSA-2026:19185 |
|
Vulnerability in grafana (RLSA-2026:19185)
vulnerability in grafana (RLSA-2026:19185). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:10.2.6-21.el9_7` or later.
|
| RLSA-2026:19201 |
|
Vulnerability in firefox (RLSA-2026:19201)
vulnerability in firefox (RLSA-2026:19201). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:140.10.0-1.el9_7` or later.
|
| RLSA-2026:19210 |
|
Vulnerability in gdk-pixbuf2 (RLSA-2026:19210)
vulnerability in gdk-pixbuf2 (RLSA-2026:19210). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.42.6-6.el9_7.1` or later.
|
| RLSA-2026:19208 |
|
Vulnerability in freeipmi (RLSA-2026:19208)
vulnerability in freeipmi (RLSA-2026:19208). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.6.17-1.el9_7` or later.
|
| RLSA-2026:19345 |
|
Vulnerability in LibRaw (RLSA-2026:19345)
vulnerability in LibRaw (RLSA-2026:19345). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:0.21.1-2.el9_7` or later.
|
| RLSA-2026:19184 |
|
Vulnerability in grafana-pcp (RLSA-2026:19184)
vulnerability in grafana-pcp (RLSA-2026:19184). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:5.1.1-14.el9_7` or later.
|
| RLSA-2026:19178 |
|
Vulnerability in crun (RLSA-2026:19178)
vulnerability in crun (RLSA-2026:19178). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.27-1.el9_7` or later.
|
| ALSA-2026:19569 |
|
Vulnerability in kernel (ALSA-2026:19569)
vulnerability in kernel (ALSA-2026:19569). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.12.0-211.16.1.el10_2` or later.
|
| ALSA-2026:19568 |
|
Vulnerability in kernel (ALSA-2026:19568)
vulnerability in kernel (ALSA-2026:19568). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.14.0-687.10.1.el9_8` or later.
|
| ALSA-2026:19560 |
|
Vulnerability in libsndfile (ALSA-2026:19560)
vulnerability in libsndfile (ALSA-2026:19560). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.2-6.el10_2.1` or later.
|
| ALSA-2026:19610 |
|
Vulnerability in libsndfile (ALSA-2026:19610)
vulnerability in libsndfile (ALSA-2026:19610). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.31-9.el9_8.1` or later.
|
| UBUNTU-CVE-2026-46529 |
|
Vulnerability in evince (UBUNTU-CVE-2026-46529)
vulnerability in evince (UBUNTU-CVE-2026-46529). Successful exploitation can lead to full system takeover. Exploitable via ``g_shell_quote``. Mitigation: upgrade to `1.6.2` or later.
|
| UBUNTU-CVE-2026-5950 |
|
Vulnerability in bind9 (UBUNTU-CVE-2026-5950)
vulnerability in bind9 (UBUNTU-CVE-2026-5950). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:9.18.39-0ubuntu0.22.04.4` or later.
|
| UBUNTU-CVE-2026-5946 |
|
Vulnerability in bind9 (UBUNTU-CVE-2026-5946)
vulnerability in bind9 (UBUNTU-CVE-2026-5946). Risk of unauthorized operations or information disclosure. Exploitable via ``named``. Mitigation: upgrade to `1:9.18.39-0ubuntu0.22.04.4` or later.
|
| UBUNTU-CVE-2026-3593 |
|
Vulnerability in isc-dhcp (UBUNTU-CVE-2026-3593)
vulnerability in isc-dhcp (UBUNTU-CVE-2026-3593). Confidential information can be exposed externally. Mitigation: upgrade to `1:9.20.11-1ubuntu2.4` or later.
|
| UBUNTU-CVE-2026-5947 |
|
Vulnerability in isc-dhcp (UBUNTU-CVE-2026-5947)
vulnerability in isc-dhcp (UBUNTU-CVE-2026-5947). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:9.20.11-1ubuntu2.4` or later.
|
| UBUNTU-CVE-2026-3592 |
|
Vulnerability in bind9 (UBUNTU-CVE-2026-3592)
vulnerability in bind9 (UBUNTU-CVE-2026-3592). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:9.18.39-0ubuntu0.22.04.4` or later.
|
| UBUNTU-CVE-2026-3039 |
|
Vulnerability in bind9 (UBUNTU-CVE-2026-3039)
vulnerability in bind9 (UBUNTU-CVE-2026-3039). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:9.18.39-0ubuntu0.22.04.4` or later.
|
| UBUNTU-CVE-2026-8974 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8974)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8974). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-8962 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8962)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8962). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-8970 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8970)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8970). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-8957 |
|
Vulnerability in mozjs52 (UBUNTU-CVE-2026-8957)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8957). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-7837 |
|
Vulnerability in netatalk (UBUNTU-CVE-2026-7837)
vulnerability in netatalk (UBUNTU-CVE-2026-7837). Risk of unauthorized operations or information disclosure.
|