Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-59717 |
|
Open Redirect in CVE-2026-59717 (CVE-2026-59717)
vulnerability in CVE-2026-59717 (CVE-2026-59717). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54338 |
|
Vulnerability in jupyterhub (CVE-2026-54338)
vulnerability in jupyterhub (CVE-2026-54338). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.5.0` or later.
|
| CVE-2026-50540 |
|
Vulnerability in CVE-2026-50540 (CVE-2026-50540)
vulnerability in CVE-2026-50540 (CVE-2026-50540). Confidential information can be exposed externally.
|
| CVE-2026-47664 |
|
Vulnerability in CVE-2026-47664 (CVE-2026-47664)
vulnerability in CVE-2026-47664 (CVE-2026-47664). Risk of unauthorized operations or information disclosure. Exploitable via ``exportUrl``.
|
| CVE-2026-47663 |
|
Vulnerability in CVE-2026-47663 (CVE-2026-47663)
vulnerability in CVE-2026-47663 (CVE-2026-47663). Risk of unauthorized operations or information disclosure. Exploitable via ``read``.
|
| CVE-2026-47662 |
|
Vulnerability in CVE-2026-47662 (CVE-2026-47662)
vulnerability in CVE-2026-47662 (CVE-2026-47662). Risk of unauthorized operations or information disclosure. Exploitable via ``read``.
|
| CVE-2026-65819 |
|
Out-of-Bounds Read in CVE-2026-65819 (CVE-2026-65819)
vulnerability in CVE-2026-65819 (CVE-2026-65819). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62296 |
|
Vulnerability in CVE-2026-62296 (CVE-2026-62296)
vulnerability in CVE-2026-62296 (CVE-2026-62296). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62295 |
|
Vulnerability in CVE-2026-62295 (CVE-2026-62295)
vulnerability in CVE-2026-62295 (CVE-2026-62295). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62293 |
|
Vulnerability in CVE-2026-62293 (CVE-2026-62293)
vulnerability in CVE-2026-62293 (CVE-2026-62293). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-61808 |
|
Vulnerability in CVE-2026-61808 (CVE-2026-61808)
vulnerability in CVE-2026-61808 (CVE-2026-61808). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47661 |
|
Path Traversal in path-traversal (CVE-2026-47661)
path traversal in path-traversal (CVE-2026-47661). Risk of unauthorized operations or information disclosure. Exploitable via ``file``.
|
| CVE-2026-47660 |
|
Vulnerability in CVE-2026-47660 (CVE-2026-47660)
vulnerability in CVE-2026-47660 (CVE-2026-47660). Risk of unauthorized operations or information disclosure. Exploitable via ``oauthMetadataUrl``.
|
| CVE-2026-47659 |
|
Path Traversal in path-traversal (CVE-2026-47659)
path traversal in path-traversal (CVE-2026-47659). Risk of unauthorized operations or information disclosure. Exploitable via ``file``.
|
| CVE-2025-71409 |
|
Vulnerability in cisa (CVE-2025-71409)
vulnerability in cisa (CVE-2025-71409). Data can be tampered with by attackers.
|
| CVE-2026-71870 |
|
Vulnerability in pypdf (CVE-2026-71870)
vulnerability in pypdf (CVE-2026-71870). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
|
| CVE-2026-70561 |
|
Vulnerability in CVE-2026-70561 (CVE-2026-70561)
vulnerability in CVE-2026-70561 (CVE-2026-70561). Confidential information can be exposed externally.
|
| CVE-2026-69127 |
|
Vulnerability in CVE-2026-69127 (CVE-2026-69127)
vulnerability in CVE-2026-69127 (CVE-2026-69127). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66000 |
|
Authorization Flaw in CVE-2026-66000 (CVE-2026-66000)
vulnerability in CVE-2026-66000 (CVE-2026-66000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48098 |
|
OS Command Injection in CVE-2026-48098 (CVE-2026-48098)
OS command injection in CVE-2026-48098 (CVE-2026-48098). Confidential information can be exposed externally. Exploitable via ``sudo``.
|
| CVE-2026-48097 |
|
OS Command Injection in CVE-2026-48097 (CVE-2026-48097)
OS command injection in CVE-2026-48097 (CVE-2026-48097). Successful exploitation can lead to full system takeover. Exploitable via ``PATH``.
|
| CVE-2026-19231 |
|
Vulnerability in sqli (CVE-2026-19231)
vulnerability in sqli (CVE-2026-19231). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19230 |
|
Cross-Site Scripting (XSS) in CVE-2026-19230 (CVE-2026-19230)
cross-site scripting in CVE-2026-19230 (CVE-2026-19230). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-17435 |
|
Vulnerability in CVE-2026-17435 (CVE-2026-17435)
vulnerability in CVE-2026-17435 (CVE-2026-17435). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11430 |
|
Vulnerability in CVE-2026-11430 (CVE-2026-11430)
vulnerability in CVE-2026-11430 (CVE-2026-11430). Risk of unauthorized operations or information disclosure. Exploitable via `POST /scheduler/webhook`.
|
| CVE-2025-71413 |
|
Vulnerability in CVE-2025-71413 (CVE-2025-71413)
vulnerability in CVE-2025-71413 (CVE-2025-71413). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71412 |
|
Vulnerability in CVE-2025-71412 (CVE-2025-71412)
vulnerability in CVE-2025-71412 (CVE-2025-71412). Data can be tampered with by attackers.
|
| CVE-2025-71411 |
|
Vulnerability in CVE-2025-71411 (CVE-2025-71411)
vulnerability in CVE-2025-71411 (CVE-2025-71411). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71410 |
|
Vulnerability in CVE-2025-71410 (CVE-2025-71410)
vulnerability in CVE-2025-71410 (CVE-2025-71410). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-63235 |
|
Vulnerability in dos (CVE-2025-63235)
vulnerability in dos (CVE-2025-63235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71852 |
|
Vulnerability in pypdf (CVE-2026-71852)
vulnerability in pypdf (CVE-2026-71852). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.15.0` or later.
|
| CVE-2026-71851 |
|
Vulnerability in crypto-js (CVE-2026-71851)
vulnerability in crypto-js (CVE-2026-71851). Successful exploitation can lead to full system takeover. Exploitable via ``crypto``. Mitigation: upgrade to `4.0.0` or later.
|
| CVE-2026-71850 |
|
Vulnerability in hono (CVE-2026-71850)
vulnerability in hono (CVE-2026-71850). Confidential information can be exposed externally. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71849 |
|
Information Disclosure in hono (CVE-2026-71849)
vulnerability in hono (CVE-2026-71849). Risk of unauthorized operations or information disclosure. Exploitable via ``Connection``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71848 |
|
Vulnerability in hono (CVE-2026-71848)
vulnerability in hono (CVE-2026-71848). Risk of unauthorized operations or information disclosure. Exploitable via ``languageDetector``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-71847 |
|
Use-After-Free in json (CVE-2026-71847)
vulnerability in json (CVE-2026-71847). Risk of unauthorized operations or information disclosure. Exploitable via ``state.start``. Mitigation: upgrade to `2.21.2` or later.
|
| CVE-2026-64637 |
|
Privilege Escalation in CVE-2026-64637 (CVE-2026-64637)
vulnerability in CVE-2026-64637 (CVE-2026-64637). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64636 |
|
SQL Injection in sqli (CVE-2026-64636)
SQL injection in sqli (CVE-2026-64636). Confidential information can be exposed externally.
|
| CVE-2026-47364 |
|
Information Disclosure in CVE-2026-47364 (CVE-2026-47364)
vulnerability in CVE-2026-47364 (CVE-2026-47364). Confidential information can be exposed externally.
|
| CVE-2026-47362 |
|
Vulnerability in CVE-2026-47362 (CVE-2026-47362)
vulnerability in CVE-2026-47362 (CVE-2026-47362). Confidential information can be exposed externally.
|
| CVE-2026-44965 |
|
Vulnerability in CVE-2026-44965 (CVE-2026-44965)
vulnerability in CVE-2026-44965 (CVE-2026-44965). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19213 |
|
Vulnerability in CVE-2026-19213 (CVE-2026-19213)
vulnerability in CVE-2026-19213 (CVE-2026-19213). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19229 |
|
Information Disclosure in CVE-2026-19229 (CVE-2026-19229)
vulnerability in CVE-2026-19229 (CVE-2026-19229). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47361 |
|
Vulnerability in CVE-2026-47361 (CVE-2026-47361)
vulnerability in CVE-2026-47361 (CVE-2026-47361). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44964 |
|
Vulnerability in c (CVE-2026-44964)
vulnerability in c (CVE-2026-44964). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47363 |
|
Vulnerability in CVE-2026-47363 (CVE-2026-47363)
vulnerability in CVE-2026-47363 (CVE-2026-47363). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66058 |
|
Vulnerability in CVE-2026-66058 (CVE-2026-66058)
vulnerability in CVE-2026-66058 (CVE-2026-66058). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64638 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-64638)
cross-site scripting in wordpress (CVE-2026-64638). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19082 |
|
Out-of-Bounds Read in CVE-2026-19082 (CVE-2026-19082)
vulnerability in CVE-2026-19082 (CVE-2026-19082). Confidential information can be exposed externally.
|
| CVE-2026-68772 |
|
Unsafe Deserialization in CVE-2026-68772 (CVE-2026-68772)
vulnerability in CVE-2026-68772 (CVE-2026-68772). Successful exploitation can lead to full system takeover.
|