Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-18991 Path Traversal in path-traversal (CVE-2026-18991)
path traversal in path-traversal (CVE-2026-18991). Risk of unauthorized operations or information disclosure.
CVE-2026-18990 Authentication Bypass in CVE-2026-18990 (CVE-2026-18990)
authentication bypass in CVE-2026-18990 (CVE-2026-18990). Risk of unauthorized operations or information disclosure.
CVE-2026-18973 SSRF (Server-Side Request Forgery) in CVE-2026-18973 (CVE-2026-18973)
SSRF in CVE-2026-18973 (CVE-2026-18973). Risk of unauthorized operations or information disclosure.
CVE-2026-67872 Vulnerability in dos (CVE-2026-67872)
vulnerability in dos (CVE-2026-67872). Risk of unauthorized operations or information disclosure.
CVE-2026-67871 Vulnerability in c (CVE-2026-67871)
vulnerability in c (CVE-2026-67871). Risk of unauthorized operations or information disclosure.
CVE-2026-67869 Vulnerability in dos (CVE-2026-67869)
vulnerability in dos (CVE-2026-67869). Risk of unauthorized operations or information disclosure.
CVE-2026-18970 Vulnerability in sqli (CVE-2026-18970)
vulnerability in sqli (CVE-2026-18970). Risk of unauthorized operations or information disclosure.
CVE-2026-18969 Vulnerability in CVE-2026-18969 (CVE-2026-18969)
vulnerability in CVE-2026-18969 (CVE-2026-18969). Risk of unauthorized operations or information disclosure.
CVE-2026-67867 Vulnerability in dos (CVE-2026-67867)
vulnerability in dos (CVE-2026-67867). Risk of unauthorized operations or information disclosure.
CVE-2026-67866 Vulnerability in dos (CVE-2026-67866)
vulnerability in dos (CVE-2026-67866). Risk of unauthorized operations or information disclosure.
CVE-2026-67863 Use-After-Free in dos (CVE-2026-67863)
vulnerability in dos (CVE-2026-67863). Risk of unauthorized operations or information disclosure.
CVE-2026-67865 Out-of-Bounds Read in dos (CVE-2026-67865)
vulnerability in dos (CVE-2026-67865). Risk of unauthorized operations or information disclosure.
CVE-2026-67864 Vulnerability in dos (CVE-2026-67864)
vulnerability in dos (CVE-2026-67864). Risk of unauthorized operations or information disclosure.
CVE-2025-63822 Vulnerability in CVE-2025-63822 (CVE-2025-63822)
vulnerability in CVE-2025-63822 (CVE-2025-63822). Confidential information can be exposed externally.
CVE-2026-71321 Vulnerability in nuxt (CVE-2026-71321)
vulnerability in nuxt (CVE-2026-71321). Risk of unauthorized operations or information disclosure. Exploitable via `POST /__nuxt_island/`. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-34966 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-34966)
SSRF in ssrf (CVE-2026-34966). Confidential information can be exposed externally.
CVE-2026-17583 Vulnerability in CVE-2026-17583 (CVE-2026-17583)
vulnerability in CVE-2026-17583 (CVE-2026-17583). Successful exploitation can lead to full system takeover.
CVE-2026-18411 Vulnerability in CVE-2026-18411 (CVE-2026-18411)
vulnerability in CVE-2026-18411 (CVE-2026-18411). Data can be tampered with by attackers.
CVE-2026-15996 Vulnerability in dos (CVE-2026-15996)
vulnerability in dos (CVE-2026-15996). Risk of unauthorized operations or information disclosure.
CVE-2026-71320 Vulnerability in nuxt (CVE-2026-71320)
vulnerability in nuxt (CVE-2026-71320). Successful exploitation can lead to full system takeover. Exploitable via ``resolveDynamicComponent``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71316 Vulnerability in nuxt (CVE-2026-71316)
vulnerability in nuxt (CVE-2026-71316). Confidential information can be exposed externally. Exploitable via ``routeRules``. Mitigation: upgrade to `4.5.1` or later.
CVE-2026-71315 Vulnerability in nuxt (CVE-2026-71315)
vulnerability in nuxt (CVE-2026-71315). Confidential information can be exposed externally. Exploitable via ``appMiddleware``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71314 Vulnerability in nuxt (CVE-2026-71314)
vulnerability in nuxt (CVE-2026-71314). Risk of unauthorized operations or information disclosure. Exploitable via ``ssrRenderList``. Mitigation: upgrade to `3.21.10` or later.
CVE-2026-71312 OS Command Injection in github.com/rclone/rclone (CVE-2026-71312)
OS command injection in github.com/rclone/rclone (CVE-2026-71312). Successful exploitation can lead to full system takeover. Exploitable via ``a0c09f1381ae93e2a9a33c529d170186c61ad058``. Mitigation: upgrade to `1.75.0` or later.
CVE-2026-70617 Vulnerability in CVE-2026-70617 (CVE-2026-70617)
vulnerability in CVE-2026-70617 (CVE-2026-70617). Confidential information can be exposed externally. Exploitable via `PUT /channels/{channel_id}/recipients/{user_id}`.
CVE-2026-69111 Vulnerability in dos (CVE-2026-69111)
vulnerability in dos (CVE-2026-69111). Risk of unauthorized operations or information disclosure.
CVE-2026-68746 Vulnerability in livebook (CVE-2026-68746)
vulnerability in livebook (CVE-2026-68746). Successful exploitation can lead to full system takeover.
CVE-2026-66881 Vulnerability in path-traversal (CVE-2026-66881)
vulnerability in path-traversal (CVE-2026-66881). Data can be tampered with by attackers.
CVE-2026-66298 Vulnerability in livebook (CVE-2026-66298)
vulnerability in livebook (CVE-2026-66298). Successful exploitation can lead to full system takeover.
CVE-2026-66297 OS Command Injection in livebook (CVE-2026-66297)
OS command injection in livebook (CVE-2026-66297). Successful exploitation can lead to full system takeover.
CVE-2026-55524 Vulnerability in praisonaiagents (CVE-2026-55524)
vulnerability in praisonaiagents (CVE-2026-55524). Confidential information can be exposed externally. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-55522 Code Injection in praisonaiagents (CVE-2026-55522)
code injection in praisonaiagents (CVE-2026-55522). Successful exploitation can lead to full system takeover. Exploitable via ``tools.py``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-18958 Vulnerability in sqli (CVE-2026-18958)
vulnerability in sqli (CVE-2026-18958). Risk of unauthorized operations or information disclosure.
CVE-2026-18953 Path Traversal in Amazon aws (CVE-2026-18953)
path traversal in Amazon aws (CVE-2026-18953). Successful exploitation can lead to full system takeover.
CVE-2026-9205 Vulnerability in langflow (CVE-2026-9205)
vulnerability in langflow (CVE-2026-9205). Confidential information can be exposed externally.
CVE-2026-9201 Vulnerability in langflow (CVE-2026-9201)
vulnerability in langflow (CVE-2026-9201). Successful exploitation can lead to full system takeover.
CVE-2026-9196 Code Injection in langflow (CVE-2026-9196)
code injection in langflow (CVE-2026-9196). Confidential information can be exposed externally.
CVE-2026-9130 Vulnerability in langflow (CVE-2026-9130)
vulnerability in langflow (CVE-2026-9130). Confidential information can be exposed externally.
CVE-2026-8478 Code Injection in langflow (CVE-2026-8478)
code injection in langflow (CVE-2026-8478). Successful exploitation can lead to full system takeover.
CVE-2026-8470 Vulnerability in langflow (CVE-2026-8470)
vulnerability in langflow (CVE-2026-8470). Data can be tampered with by attackers.
CVE-2026-8183 Path Traversal in langflow (CVE-2026-8183)
path traversal in langflow (CVE-2026-8183). Confidential information can be exposed externally.
CVE-2026-8182 Code Injection in langflow (CVE-2026-8182)
code injection in langflow (CVE-2026-8182). Successful exploitation can lead to full system takeover.
CVE-2026-18485 Vulnerability in privilege-escalation (CVE-2026-18485)
vulnerability in privilege-escalation (CVE-2026-18485). Successful exploitation can lead to full system takeover.
CVE-2026-17633 Code Injection in langflow (CVE-2026-17633)
code injection in langflow (CVE-2026-17633). Successful exploitation can lead to full system takeover.
CVE-2026-17632 Code Injection in langflow (CVE-2026-17632)
code injection in langflow (CVE-2026-17632). Successful exploitation can lead to full system takeover.
CVE-2026-17624 Code Injection in langflow (CVE-2026-17624)
code injection in langflow (CVE-2026-17624). Successful exploitation can lead to full system takeover.
CVE-2026-9081 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9081)
SSRF in ssrf (CVE-2026-9081). Confidential information can be exposed externally.
CVE-2026-70448 XXE (XML External Entity) in CVE-2026-70448 (CVE-2026-70448)
vulnerability in CVE-2026-70448 (CVE-2026-70448). Confidential information can be exposed externally.
CVE-2026-70432 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-70432)
vulnerability in csrf (CVE-2026-70432). Successful exploitation can lead to full system takeover.
CVE-2026-70429 Vulnerability in CVE-2026-70429 (CVE-2026-70429)
vulnerability in CVE-2026-70429 (CVE-2026-70429). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →