Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-39903 |
|
Authorization Flaw in CVE-2026-39903 (CVE-2026-39903)
vulnerability in CVE-2026-39903 (CVE-2026-39903). Data can be tampered with by attackers.
|
| CVE-2026-51119 |
|
Privilege Escalation in CVE-2026-51119 (CVE-2026-51119)
vulnerability in CVE-2026-51119 (CVE-2026-51119). Confidential information can be exposed externally.
|
| CVE-2026-56668 |
|
Vulnerability in CVE-2026-56668 (CVE-2026-56668)
vulnerability in CVE-2026-56668 (CVE-2026-56668). Confidential information can be exposed externally.
|
| CVE-2026-56667 |
|
Cross-Site Scripting (XSS) in CVE-2026-56667 (CVE-2026-56667)
cross-site scripting in CVE-2026-56667 (CVE-2026-56667). Confidential information can be exposed externally.
|
| CVE-2026-56666 |
|
Authentication Bypass in CVE-2026-56666 (CVE-2026-56666)
authentication bypass in CVE-2026-56666 (CVE-2026-56666). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56665 |
|
Vulnerability in CVE-2026-56665 (CVE-2026-56665)
vulnerability in CVE-2026-56665 (CVE-2026-56665). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56664 |
|
Vulnerability in github.com/zitadel/zitadel (CVE-2026-56664)
vulnerability in github.com/zitadel/zitadel (CVE-2026-56664). Risk of unauthorized operations or information disclosure. Exploitable via ``exp``. Mitigation: upgrade to `1.80.0-v2.20.0.20260615122908-fad02c6d9f45` or later.
|
| GHSA-489g-7rxv-6c8q |
|
SSRF (Server-Side Request Forgery) in mcp-atlassian (GHSA-489g-7rxv-6c8q)
SSRF in mcp-atlassian (GHSA-489g-7rxv-6c8q). Risk of unauthorized operations or information disclosure. Exploitable via ``validate_url_for_ssrf``. Mitigation: upgrade to `0.22.0` or later.
|
| GHSA-rfhj-93m8-qhgx |
|
Vulnerability in type-async (GHSA-rfhj-93m8-qhgx)
vulnerability in type-async (GHSA-rfhj-93m8-qhgx). Risk of unauthorized operations or information disclosure. Exploitable via ``index.js``.
|
| CVE-2026-59193 |
|
Vulnerability in getgrav (CVE-2026-59193)
vulnerability in getgrav (CVE-2026-59193). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59190 |
|
Vulnerability in CVE-2026-59190 (CVE-2026-59190)
vulnerability in CVE-2026-59190 (CVE-2026-59190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59180 |
|
Information Disclosure in CVE-2026-59180 (CVE-2026-59180)
vulnerability in CVE-2026-59180 (CVE-2026-59180). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
|
| CVE-2026-59162 |
|
Vulnerability in excelize (CVE-2026-59162)
vulnerability in excelize (CVE-2026-59162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59161 |
|
Vulnerability in excelize (CVE-2026-59161)
vulnerability in excelize (CVE-2026-59161). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59154 |
|
Authorization Flaw in CVE-2026-59154 (CVE-2026-59154)
vulnerability in CVE-2026-59154 (CVE-2026-59154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58493 |
|
Vulnerability in path-traversal (CVE-2026-58493)
vulnerability in path-traversal (CVE-2026-58493). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58492 |
|
SQL Injection in CVE-2026-58492 (CVE-2026-58492)
SQL injection in CVE-2026-58492 (CVE-2026-58492). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57167 |
|
Vulnerability in CVE-2026-57167 (CVE-2026-57167)
vulnerability in CVE-2026-57167 (CVE-2026-57167). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56675 |
|
Authentication Bypass in CVE-2026-56675 (CVE-2026-56675)
authentication bypass in CVE-2026-56675 (CVE-2026-56675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55783 |
|
Vulnerability in CVE-2026-55783 (CVE-2026-55783)
vulnerability in CVE-2026-55783 (CVE-2026-55783). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55782 |
|
Vulnerability in cpp (CVE-2026-55782)
vulnerability in cpp (CVE-2026-55782). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55781 |
|
Vulnerability in cpp (CVE-2026-55781)
vulnerability in cpp (CVE-2026-55781). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55780 |
|
Vulnerability in cpp (CVE-2026-55780)
vulnerability in cpp (CVE-2026-55780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55687 |
|
Vulnerability in c (CVE-2026-55687)
vulnerability in c (CVE-2026-55687). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55641 |
|
Vulnerability in 9router (CVE-2026-55641)
vulnerability in 9router (CVE-2026-55641). Confidential information can be exposed externally. Exploitable via `POST /v1/search`. Mitigation: upgrade to `0.5.2` or later.
|
| CVE-2026-55638 |
|
Vulnerability in 9router (CVE-2026-55638)
vulnerability in 9router (CVE-2026-55638). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/responses`. Mitigation: upgrade to `0.5.2` or later.
|
| CVE-2026-54919 |
|
Vulnerability in c (CVE-2026-54919)
vulnerability in c (CVE-2026-54919). Confidential information can be exposed externally.
|
| CVE-2026-54063 |
|
Vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063)
vulnerability in github.com/xuri/excelize/v2 (CVE-2026-54063). Risk of unauthorized operations or information disclosure. Exploitable via ``GetCellValue``. Mitigation: upgrade to `2.11.0` or later.
|
| CVE-2026-53657 |
|
Vulnerability in github.com/lima-vm/lima/v2 (CVE-2026-53657)
vulnerability in github.com/lima-vm/lima/v2 (CVE-2026-53657). Successful exploitation can lead to full system takeover. Exploitable via ``qemu``. Mitigation: upgrade to `2.1.3` or later.
|
| CVE-2026-53653 |
|
Vulnerability in getgrav/grav (CVE-2026-53653)
vulnerability in getgrav/grav (CVE-2026-53653). Risk of unauthorized operations or information disclosure. Exploitable via `GET /home/test.png`. Mitigation: upgrade to `1.7.53` or later.
|
| MAL-2026-10151 |
|
Vulnerability in buffer-util-internal (MAL-2026-10151)
vulnerability in buffer-util-internal (MAL-2026-10151). Risk of unauthorized operations or information disclosure. Exploitable via ``buffer``.
|
| MAL-2026-10158 |
|
Vulnerability in notify-utilities (MAL-2026-10158)
vulnerability in notify-utilities (MAL-2026-10158). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-10156 |
|
Vulnerability in notify-logs (MAL-2026-10156)
vulnerability in notify-logs (MAL-2026-10156). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-10157 |
|
Vulnerability in notify-theme (MAL-2026-10157)
vulnerability in notify-theme (MAL-2026-10157). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| MAL-2026-10154 |
|
Vulnerability in notify-dist (MAL-2026-10154)
vulnerability in notify-dist (MAL-2026-10154). Risk of unauthorized operations or information disclosure. Exploitable via ``module.exports.pino``.
|
| MAL-2026-10155 |
|
Vulnerability in notify-funcs (MAL-2026-10155)
vulnerability in notify-funcs (MAL-2026-10155). Risk of unauthorized operations or information disclosure. Exploitable via ``check``.
|
| MAL-2026-10153 |
|
Vulnerability in notifier-log (MAL-2026-10153)
vulnerability in notifier-log (MAL-2026-10153). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-10152 |
|
Vulnerability in notifier-funcs (MAL-2026-10152)
vulnerability in notifier-funcs (MAL-2026-10152). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-10159 |
|
Vulnerability in npm-rce-safe-proof-yourname (MAL-2026-10159)
vulnerability in npm-rce-safe-proof-yourname (MAL-2026-10159). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| GHSA-vmm7-6q5r-pfj9 |
|
Vulnerability in @genie-auth/config (GHSA-vmm7-6q5r-pfj9)
vulnerability in @genie-auth/config (GHSA-vmm7-6q5r-pfj9). Risk of unauthorized operations or information disclosure.
|
| GHSA-frwh-6rv4-8cg3 |
|
Vulnerability in @amtrav/webservice (GHSA-frwh-6rv4-8cg3)
vulnerability in @amtrav/webservice (GHSA-frwh-6rv4-8cg3). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8609 |
|
Vulnerability in dos (CVE-2026-8609)
vulnerability in dos (CVE-2026-8609). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8595 |
|
Cross-Site Scripting (XSS) in grafana (CVE-2026-8595)
cross-site scripting in grafana (CVE-2026-8595). Confidential information can be exposed externally.
|
| CVE-2026-56676 |
|
Vulnerability in CVE-2026-56676 (CVE-2026-56676)
vulnerability in CVE-2026-56676 (CVE-2026-56676). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54149 |
|
OS Command Injection in CVE-2026-54149 (CVE-2026-54149)
OS command injection in CVE-2026-54149 (CVE-2026-54149). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54001 |
|
Vulnerability in privilege-escalation (CVE-2026-54001)
vulnerability in privilege-escalation (CVE-2026-54001). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54000 |
|
Vulnerability in privilege-escalation (CVE-2026-54000)
vulnerability in privilege-escalation (CVE-2026-54000). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46388 |
|
Vulnerability in CVE-2026-46388 (CVE-2026-46388)
vulnerability in CVE-2026-46388 (CVE-2026-46388). Confidential information can be exposed externally.
|
| CVE-2026-33382 |
|
Vulnerability in dos (CVE-2026-33382)
vulnerability in dos (CVE-2026-33382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15375 |
|
Vulnerability in CVE-2026-15375 (CVE-2026-15375)
vulnerability in CVE-2026-15375 (CVE-2026-15375). Risk of unauthorized operations or information disclosure.
|