Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
GHSA-hr6r-2xx8-mrh9 Vulnerability in crypto-hash-sdk (GHSA-hr6r-2xx8-mrh9)
vulnerability in crypto-hash-sdk (GHSA-hr6r-2xx8-mrh9). Risk of unauthorized operations or information disclosure. Exploitable via ``import``.
MAL-2026-4541 Vulnerability in crypto-hash-sdk (MAL-2026-4541)
vulnerability in crypto-hash-sdk (MAL-2026-4541). Risk of unauthorized operations or information disclosure. Exploitable via ``import``.
GHSA-h7mc-23rp-vpj6 Vulnerability in xorma-js (GHSA-h7mc-23rp-vpj6)
vulnerability in xorma-js (GHSA-h7mc-23rp-vpj6). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process.execSync``.
MAL-2026-4734 Vulnerability in xorma-js (MAL-2026-4734)
vulnerability in xorma-js (MAL-2026-4734). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process.execSync``.
MAL-2026-4655 Vulnerability in qr-code-styling-temp (MAL-2026-4655)
vulnerability in qr-code-styling-temp (MAL-2026-4655). Risk of unauthorized operations or information disclosure. Exploitable via ``install``.
CLSA-2026-1779216196 libssh2: Fix of CVE-2026-7598
libssh2: Fix of CVE-2026-7598
CLSA-2026-1779215980 cups: Fix of CVE-2026-27447
cups: Fix of CVE-2026-27447
MAL-2026-4478 Vulnerability in alya-baileys (MAL-2026-4478)
vulnerability in alya-baileys (MAL-2026-4478). Risk of unauthorized operations or information disclosure. Exploitable via ``connection.update``.
USN-8276-1 Vulnerability in highlight.js (USN-8276-1)
vulnerability in highlight.js (USN-8276-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.2+ds-4ubuntu0.1~esm1` or later.
CLSA-2026-1779215759 Vulnerability in libxml2 (CLSA-2026-1779215759)
vulnerability in libxml2 (CLSA-2026-1779215759). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.9.1-6.0.11.el7_9.6.tuxcare.els3` or later.
CLSA-2026-1779215547 cups: Fix of CVE-2026-27447
cups: Fix of CVE-2026-27447
CLSA-2026-1779215310 Vulnerability in vim-X11 (CLSA-2026-1779215310)
vulnerability in vim-X11 (CLSA-2026-1779215310). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:7.4.629-8.0.1.el7_9.tuxcare.els15` or later.
CLSA-2026-1779215113 fribidi: Fix of CVE-2022-25308
fribidi: Fix of CVE-2022-25308
CLSA-2026-1779214855 bind: Fix of CVE-2026-1519
bind: Fix of CVE-2026-1519
CVE-2026-8605 Vulnerability in scadabr (CVE-2026-8605)
vulnerability in scadabr (CVE-2026-8605). Successful exploitation can lead to full system takeover.
CVE-2026-8604 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-8604)
vulnerability in csrf (CVE-2026-8604). Successful exploitation can lead to full system takeover.
CVE-2026-8603 OS Command Injection in scadabr (CVE-2026-8603)
OS command injection in scadabr (CVE-2026-8603). Successful exploitation can lead to full system takeover.
CVE-2026-6009 Unsafe Deserialization in net.sf.jasperreports:jasperreports (CVE-2026-6009)
vulnerability in net.sf.jasperreports:jasperreports (CVE-2026-6009). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.0.7` or later.
CVE-2026-47107 Vulnerability in CVE-2026-47107 (CVE-2026-47107)
vulnerability in CVE-2026-47107 (CVE-2026-47107). Confidential information can be exposed externally.
DEBIAN-CVE-2026-33633 Vulnerability in kitty (DEBIAN-CVE-2026-33633)
vulnerability in kitty (DEBIAN-CVE-2026-33633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.41.1-2+deb13u1` or later.
CVE-2026-33633 Vulnerability in dos (CVE-2026-33633)
vulnerability in dos (CVE-2026-33633). Successful exploitation can lead to full system takeover.
CVE-2026-32134 Vulnerability in CVE-2026-32134 (CVE-2026-32134)
vulnerability in CVE-2026-32134 (CVE-2026-32134). Risk of unauthorized operations or information disclosure.
CVE-2025-61081 Vulnerability in CVE-2025-61081 (CVE-2025-61081)
vulnerability in CVE-2025-61081 (CVE-2025-61081). Data can be tampered with by attackers.
UBUNTU-CVE-2026-33633 Vulnerability in kitty (UBUNTU-CVE-2026-33633)
vulnerability in kitty (UBUNTU-CVE-2026-33633). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.41.1-2+deb13u1build0.25.10.1` or later.
MAL-2026-4729 Vulnerability in whiteboard-agent (MAL-2026-4729)
vulnerability in whiteboard-agent (MAL-2026-4729). Risk of unauthorized operations or information disclosure. Exploitable via ``admin``.
CLSA-2026-1779214181 Vulnerability in vim-X11 (CLSA-2026-1779214181)
vulnerability in vim-X11 (CLSA-2026-1779214181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:8.2.2637-22.el9_6.1.tuxcare.els25` or later.
MAL-2026-4522 Vulnerability in claude-all-config (MAL-2026-4522)
vulnerability in claude-all-config (MAL-2026-4522). Risk of unauthorized operations or information disclosure. Exploitable via ``gemini``.
SUSE-SU-2026:21724-1 Vulnerability in SUSE-SU-2026:21724-1 (SUSE-SU-2026:21724-1)
vulnerability in SUSE-SU-2026:21724-1 (SUSE-SU-2026:21724-1). Risk of unauthorized operations or information disclosure.
MAL-2026-4441 Vulnerability in @shadanai/openclaw (MAL-2026-4441)
vulnerability in @shadanai/openclaw (MAL-2026-4441). Risk of unauthorized operations or information disclosure. Exploitable via ``controlUi.allowedOrigins``.
MAL-2026-4370 Vulnerability in @bonsai-ai/claude-code (MAL-2026-4370)
vulnerability in @bonsai-ai/claude-code (MAL-2026-4370). Risk of unauthorized operations or information disclosure. Exploitable via ``author``.
CLSA-2026-1779213441 Vulnerability in python3.11 (CLSA-2026-1779213441)
vulnerability in python3.11 (CLSA-2026-1779213441). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.11.11-2.el9_6.2.tuxcare.els8` or later.
GHSA-fg63-2vqh-93xf Vulnerability in corelia (GHSA-fg63-2vqh-93xf)
vulnerability in corelia (GHSA-fg63-2vqh-93xf). Risk of unauthorized operations or information disclosure.
MAL-2026-4371 Vulnerability in @bonsai-ai/claude-code-win32-x64 (MAL-2026-4371)
vulnerability in @bonsai-ai/claude-code-win32-x64 (MAL-2026-4371). Risk of unauthorized operations or information disclosure. Exploitable via ``LICENSE.md``.
CLSA-2026-1779212665 Vulnerability in php (CLSA-2026-1779212665)
vulnerability in php (CLSA-2026-1779212665). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.3-50.el6_10.tuxcare.ol.els21` or later.
CLSA-2026-1779212372 Vulnerability in vim-X11 (CLSA-2026-1779212372)
vulnerability in vim-X11 (CLSA-2026-1779212372). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3:7.4.629-5.2.el6.tuxcare.els51` or later.
MAL-2026-4628 Vulnerability in open-agents-ai (MAL-2026-4628)
vulnerability in open-agents-ai (MAL-2026-4628). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779212122 sos: Fix of CVE-2022-2806
sos: Fix of CVE-2022-2806
openSUSE-SU-2026:20783-1 Vulnerability in openSUSE-SU-2026:20783-1 (openSUSE-SU-2026:20783-1)
vulnerability in openSUSE-SU-2026:20783-1 (openSUSE-SU-2026:20783-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21824-1 Vulnerability in SUSE-SU-2026:21824-1 (SUSE-SU-2026:21824-1)
vulnerability in SUSE-SU-2026:21824-1 (SUSE-SU-2026:21824-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21754-1 Vulnerability in SUSE-SU-2026:21754-1 (SUSE-SU-2026:21754-1)
vulnerability in SUSE-SU-2026:21754-1 (SUSE-SU-2026:21754-1). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:20784-1 Vulnerability in openSUSE-SU-2026:20784-1 (openSUSE-SU-2026:20784-1)
vulnerability in openSUSE-SU-2026:20784-1 (openSUSE-SU-2026:20784-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ngx_stream_ssl_module``.
SUSE-SU-2026:21823-1 Vulnerability in SUSE-SU-2026:21823-1 (SUSE-SU-2026:21823-1)
vulnerability in SUSE-SU-2026:21823-1 (SUSE-SU-2026:21823-1). Risk of unauthorized operations or information disclosure. Exploitable via ``ngx_stream_ssl_module``.
MAL-2026-4674 Vulnerability in superacli (MAL-2026-4674)
vulnerability in superacli (MAL-2026-4674). Risk of unauthorized operations or information disclosure.
CVE-2026-5511 Vulnerability in tp-link (CVE-2026-5511)
vulnerability in tp-link (CVE-2026-5511). Risk of unauthorized operations or information disclosure.
CVE-2026-47358 Vulnerability in ssrf (CVE-2026-47358)
vulnerability in ssrf (CVE-2026-47358). Confidential information can be exposed externally.
CVE-2026-47357 Vulnerability in ssrf (CVE-2026-47357)
vulnerability in ssrf (CVE-2026-47357). Confidential information can be exposed externally. Exploitable via `POST /v1/{iac}/{iacVersion}/{cloud}/remote/dir/scan`.
CVE-2026-47356 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-47356)
SSRF in ssrf (CVE-2026-47356). Confidential information can be exposed externally. Exploitable via `POST /v1/{iac}/{iacVersion}/{cloud}/local/file/scan`.
CVE-2026-36829 Path Traversal in path-traversal (CVE-2026-36829)
path traversal in path-traversal (CVE-2026-36829). Successful exploitation can lead to full system takeover.
CVE-2026-36828 OS Command Injection in CVE-2026-36828 (CVE-2026-36828)
OS command injection in CVE-2026-36828 (CVE-2026-36828). Successful exploitation can lead to full system takeover.
CVE-2026-36827 OS Command Injection in CVE-2026-36827 (CVE-2026-36827)
OS command injection in CVE-2026-36827 (CVE-2026-36827). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →