Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-10083 |
|
Vulnerability in clob-math-v2 (MAL-2026-10083)
vulnerability in clob-math-v2 (MAL-2026-10083). Risk of unauthorized operations or information disclosure. Exploitable via ``peerBundle``.
|
| MAL-2026-10088 |
|
Vulnerability in lovable-tager (MAL-2026-10088)
vulnerability in lovable-tager (MAL-2026-10088). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
|
| CGA-crxv-m6qw-55r4 |
|
CGA-crxv-m6qw-55r4 |
| MAL-2026-10087 |
|
Vulnerability in eslint-plus (MAL-2026-10087)
vulnerability in eslint-plus (MAL-2026-10087). Risk of unauthorized operations or information disclosure. Exploitable via ``cookie``.
|
| MGASA-2026-0239 |
|
Updated ack packages fix security vulnerabilities
Updated ack packages fix security vulnerabilities
|
| MGASA-2026-0238 |
|
Vulnerability in 7zip (MGASA-2026-0238)
vulnerability in 7zip (MGASA-2026-0238). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.02-1.mga10` or later.
|
| MAL-2026-10090 |
|
Vulnerability in nonenull1 (MAL-2026-10090)
vulnerability in nonenull1 (MAL-2026-10090). Risk of unauthorized operations or information disclosure. Exploitable via ``sources``.
|
| MAL-2026-10058 |
|
Vulnerability in cookie-js-ease (MAL-2026-10058)
vulnerability in cookie-js-ease (MAL-2026-10058). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-10059 |
|
Vulnerability in cookie-parser-es (MAL-2026-10059)
vulnerability in cookie-parser-es (MAL-2026-10059). Risk of unauthorized operations or information disclosure. Exploitable via ``index.js``.
|
| MAL-2026-10060 |
|
Vulnerability in cookie-parser-js (MAL-2026-10060)
vulnerability in cookie-parser-js (MAL-2026-10060). Risk of unauthorized operations or information disclosure. Exploitable via ``latest``.
|
| CVE-2026-59208 |
|
Authentication Bypass in n8n (CVE-2026-59208)
authentication bypass in n8n (CVE-2026-59208). Confidential information can be exposed externally. Exploitable via ``sub``. Mitigation: upgrade to `2.27.4` or later.
|
| CVE-2026-59207 |
|
Vulnerability in n8n (CVE-2026-59207)
vulnerability in n8n (CVE-2026-59207). Confidential information can be exposed externally. Exploitable via ``agents``. Mitigation: upgrade to `2.27.4` or later.
|
| CVE-2026-59206 |
|
Vulnerability in n8n (CVE-2026-59206)
vulnerability in n8n (CVE-2026-59206). Confidential information can be exposed externally. Exploitable via ``Object.prototype``. Mitigation: upgrade to `2.27.4` or later.
|
| CVE-2026-14480 |
|
Vulnerability in cisa (CVE-2026-14480)
vulnerability in cisa (CVE-2026-14480). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4832 |
|
Vulnerability in cisa (CVE-2026-4832)
vulnerability in cisa (CVE-2026-4832). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-10064 |
|
Vulnerability in multer-orm (MAL-2026-10064)
vulnerability in multer-orm (MAL-2026-10064). Risk of unauthorized operations or information disclosure. Exploitable via ``multer``.
|
| MAL-2026-10063 |
|
Vulnerability in express-router-engine (MAL-2026-10063)
vulnerability in express-router-engine (MAL-2026-10063). Risk of unauthorized operations or information disclosure. Exploitable via ``Authentication``.
|
| MAL-2026-10057 |
|
Vulnerability in chunk-parser (MAL-2026-10057)
vulnerability in chunk-parser (MAL-2026-10057). Risk of unauthorized operations or information disclosure.
|
| GHSA-634c-4fgc-67w9 |
|
Vulnerability in type-slint (GHSA-634c-4fgc-67w9)
vulnerability in type-slint (GHSA-634c-4fgc-67w9). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-10066 |
|
Vulnerability in nps-retrieval-diagnostics (MAL-2026-10066)
vulnerability in nps-retrieval-diagnostics (MAL-2026-10066). Risk of unauthorized operations or information disclosure. Exploitable via ``curl``.
|
| GHSA-9x5f-jcqq-j88c |
|
Vulnerability in cursed-ecto-d3ab00 (GHSA-9x5f-jcqq-j88c)
vulnerability in cursed-ecto-d3ab00 (GHSA-9x5f-jcqq-j88c). Risk of unauthorized operations or information disclosure.
|
| GHSA-rwp8-c6qg-x8g3 |
|
Vulnerability in polymarket-apis (GHSA-rwp8-c6qg-x8g3)
vulnerability in polymarket-apis (GHSA-rwp8-c6qg-x8g3). Risk of unauthorized operations or information disclosure. Exploitable via ``polymarket``.
|
| GHSA-773r-gj6w-h338 |
|
Vulnerability in polymarket-trader-apis (GHSA-773r-gj6w-h338)
vulnerability in polymarket-trader-apis (GHSA-773r-gj6w-h338). Risk of unauthorized operations or information disclosure. Exploitable via ``credits``.
|
| MAL-2026-10068 |
|
Vulnerability in polymarket-kelly-math (MAL-2026-10068)
vulnerability in polymarket-kelly-math (MAL-2026-10068). Risk of unauthorized operations or information disclosure.
|
| GHSA-q8cr-mw55-69x7 |
|
Vulnerability in polymarket-kelly-stake-math (GHSA-q8cr-mw55-69x7)
vulnerability in polymarket-kelly-stake-math (GHSA-q8cr-mw55-69x7). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
|
| MAL-2026-10071 |
|
Vulnerability in polymarket-kit (MAL-2026-10071)
vulnerability in polymarket-kit (MAL-2026-10071). Risk of unauthorized operations or information disclosure. Exploitable via ``credits``.
|
| MAL-2026-10069 |
|
Vulnerability in polymarket-kelly-maths (MAL-2026-10069)
vulnerability in polymarket-kelly-maths (MAL-2026-10069). Risk of unauthorized operations or information disclosure.
|
| GHSA-7q22-q58w-5f27 |
|
Vulnerability in es6-codify (GHSA-7q22-q58w-5f27)
vulnerability in es6-codify (GHSA-7q22-q58w-5f27). Risk of unauthorized operations or information disclosure.
|
| MAL-2026-10081 |
|
Vulnerability in webrix-docs1 (MAL-2026-10081)
vulnerability in webrix-docs1 (MAL-2026-10081). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process``.
|
| MAL-2026-10080 |
|
Vulnerability in webrix-docs (MAL-2026-10080)
vulnerability in webrix-docs (MAL-2026-10080). Risk of unauthorized operations or information disclosure. Exploitable via ``whoami``.
|
| GHSA-r8h6-7hvm-3xcp |
|
Vulnerability in ts-eslint-jest (GHSA-r8h6-7hvm-3xcp)
vulnerability in ts-eslint-jest (GHSA-r8h6-7hvm-3xcp). Risk of unauthorized operations or information disclosure.
|
| GHSA-wqr5-5c9r-9rj7 |
|
Vulnerability in nodemon-gulp (GHSA-wqr5-5c9r-9rj7)
vulnerability in nodemon-gulp (GHSA-wqr5-5c9r-9rj7). Risk of unauthorized operations or information disclosure. Exploitable via ``nodemon``.
|
| MAL-2026-10043 |
|
Vulnerability in chai-as-modified (MAL-2026-10043)
vulnerability in chai-as-modified (MAL-2026-10043). Risk of unauthorized operations or information disclosure. Exploitable via ``runBackgroundTask``.
|
| MAL-2026-10041 |
|
Vulnerability in chai-as-buffered (MAL-2026-10041)
vulnerability in chai-as-buffered (MAL-2026-10041). Risk of unauthorized operations or information disclosure. Exploitable via ``process``.
|
| MAL-2026-10049 |
|
Vulnerability in chai-await-dom (MAL-2026-10049)
vulnerability in chai-await-dom (MAL-2026-10049). Risk of unauthorized operations or information disclosure. Exploitable via ``aHR0cHM6Ly9qc29ua2VlcGVyLmNvbS9iL1pLNDVK``.
|
| MAL-2026-10047 |
|
Vulnerability in chai-as-staged (MAL-2026-10047)
vulnerability in chai-as-staged (MAL-2026-10047). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| MAL-2026-10055 |
|
Vulnerability in chain-chai-async (MAL-2026-10055)
vulnerability in chain-chai-async (MAL-2026-10055). Risk of unauthorized operations or information disclosure. Exploitable via ``cookie``.
|
| MAL-2026-10039 |
|
Vulnerability in chai-as-align (MAL-2026-10039)
vulnerability in chai-as-align (MAL-2026-10039). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| MAL-2026-10052 |
|
Vulnerability in chai-promised-test (MAL-2026-10052)
vulnerability in chai-promised-test (MAL-2026-10052). Risk of unauthorized operations or information disclosure. Exploitable via ``process``.
|
| MAL-2026-10056 |
|
Vulnerability in chain-chai-await (MAL-2026-10056)
vulnerability in chain-chai-await (MAL-2026-10056). Risk of unauthorized operations or information disclosure. Exploitable via ``pino``.
|
| CVE-2026-54800 |
|
Vulnerability in CVE-2026-54800 (CVE-2026-54800)
vulnerability in CVE-2026-54800 (CVE-2026-54800). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54798 |
|
Vulnerability in dos (CVE-2026-54798)
vulnerability in dos (CVE-2026-54798). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54799 |
|
Vulnerability in CVE-2026-54799 (CVE-2026-54799)
vulnerability in CVE-2026-54799 (CVE-2026-54799). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60109 |
|
Vulnerability in zeek (CVE-2026-60109)
vulnerability in zeek (CVE-2026-60109). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60095 |
|
Vulnerability in CVE-2026-60095 (CVE-2026-60095)
vulnerability in CVE-2026-60095 (CVE-2026-60095). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5005 |
|
Cross-Site Scripting (XSS) in CVE-2026-5005 (CVE-2026-5005)
cross-site scripting in CVE-2026-5005 (CVE-2026-5005). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56292 |
|
SQL Injection in sqli (CVE-2026-56292)
SQL injection in sqli (CVE-2026-56292). Confidential information can be exposed externally.
|
| CVE-2026-54801 |
|
Vulnerability in CVE-2026-54801 (CVE-2026-54801)
vulnerability in CVE-2026-54801 (CVE-2026-54801). Successful exploitation can lead to full system takeover.
|
| CVE-2026-60094 |
|
Out-of-Bounds Write in CVE-2026-60094 (CVE-2026-60094)
out-of-bounds write in CVE-2026-60094 (CVE-2026-60094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60108 |
|
Vulnerability in dos (CVE-2026-60108)
vulnerability in dos (CVE-2026-60108). Risk of unauthorized operations or information disclosure.
|