Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-16930 Vulnerability in ibm (CVE-2026-16930)
vulnerability in ibm (CVE-2026-16930). Successful exploitation can lead to full system takeover.
CVE-2026-16835 Vulnerability in ibm (CVE-2026-16835)
vulnerability in ibm (CVE-2026-16835). Successful exploitation can lead to full system takeover.
CVE-2026-16832 Vulnerability in ibm (CVE-2026-16832)
vulnerability in ibm (CVE-2026-16832). Successful exploitation can lead to full system takeover.
CVE-2026-16828 Out-of-Bounds Read in ibm (CVE-2026-16828)
vulnerability in ibm (CVE-2026-16828). Risk of unauthorized operations or information disclosure.
CVE-2026-16687 Vulnerability in ibm (CVE-2026-16687)
vulnerability in ibm (CVE-2026-16687). Successful exploitation can lead to full system takeover.
CVE-2026-53957 SSRF (Server-Side Request Forgery) in @contentful/mcp-server (CVE-2026-53957)
SSRF in @contentful/mcp-server (CVE-2026-53957). Risk of unauthorized operations or information disclosure. Exploitable via ``export_space``. Mitigation: upgrade to `1.7.19` or later.
CVE-2026-53941 Vulnerability in github.com/inspektor-gadget/inspektor-gadget (CVE-2026-53941)
vulnerability in github.com/inspektor-gadget/inspektor-gadget (CVE-2026-53941). Risk of unauthorized operations or information disclosure. Exploitable via ``readStringFromBytes``. Mitigation: upgrade to `0.53.1` or later.
GHSA-qwgh-2vcv-g2f7 Buffer Overflow in block_buffer (GHSA-qwgh-2vcv-g2f7)
vulnerability in block_buffer (GHSA-qwgh-2vcv-g2f7). Risk of unauthorized operations or information disclosure. Exploitable via ``EagerBuffer``. Mitigation: upgrade to `0.12.1` or later.
GHSA-rr55-jp92-8wp2 Path Traversal in claude-faf-mcp (GHSA-rr55-jp92-8wp2)
path traversal in claude-faf-mcp (GHSA-rr55-jp92-8wp2). Risk of unauthorized operations or information disclosure. Exploitable via ``path``. Mitigation: upgrade to `5.7.2` or later.
GHSA-j4r7-8ph4-43g3 Path Traversal in faf-mcp (GHSA-j4r7-8ph4-43g3)
path traversal in faf-mcp (GHSA-j4r7-8ph4-43g3). Risk of unauthorized operations or information disclosure. Exploitable via ``path``. Mitigation: upgrade to `2.1.3` or later.
GHSA-cc2g-gq8c-r332 Path Traversal in grok-faf-mcp (GHSA-cc2g-gq8c-r332)
path traversal in grok-faf-mcp (GHSA-cc2g-gq8c-r332). Risk of unauthorized operations or information disclosure. Exploitable via ``path``. Mitigation: upgrade to `1.5.3` or later.
CVE-2026-55236 Vulnerability in langgraph-api (CVE-2026-55236)
vulnerability in langgraph-api (CVE-2026-55236). Risk of unauthorized operations or information disclosure. Exploitable via ``assistants.read``. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-55235 Authentication Bypass in langgraph-api (CVE-2026-55235)
authentication bypass in langgraph-api (CVE-2026-55235). Risk of unauthorized operations or information disclosure. Exploitable via ``webhooks.url.disable_loopback``. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-75149 Code Injection in CVE-2026-75149 (CVE-2026-75149)
code injection in CVE-2026-75149 (CVE-2026-75149). Successful exploitation can lead to full system takeover.
CVE-2026-73829 Vulnerability in CVE-2026-73829 (CVE-2026-73829)
vulnerability in CVE-2026-73829 (CVE-2026-73829). Risk of unauthorized operations or information disclosure.
CVE-2026-73541 Vulnerability in CVE-2026-73541 (CVE-2026-73541)
vulnerability in CVE-2026-73541 (CVE-2026-73541). Risk of unauthorized operations or information disclosure.
CVE-2026-73136 Vulnerability in CVE-2026-73136 (CVE-2026-73136)
vulnerability in CVE-2026-73136 (CVE-2026-73136). Risk of unauthorized operations or information disclosure.
CVE-2026-72717 Code Injection in CVE-2026-72717 (CVE-2026-72717)
code injection in CVE-2026-72717 (CVE-2026-72717). Risk of unauthorized operations or information disclosure.
CVE-2026-72716 Vulnerability in CVE-2026-72716 (CVE-2026-72716)
vulnerability in CVE-2026-72716 (CVE-2026-72716). Risk of unauthorized operations or information disclosure.
CVE-2026-71871 Code Injection in CVE-2026-71871 (CVE-2026-71871)
code injection in CVE-2026-71871 (CVE-2026-71871). Risk of unauthorized operations or information disclosure.
CVE-2026-71869 Code Injection in CVE-2026-71869 (CVE-2026-71869)
code injection in CVE-2026-71869 (CVE-2026-71869). Risk of unauthorized operations or information disclosure.
CVE-2026-71868 Code Injection in CVE-2026-71868 (CVE-2026-71868)
code injection in CVE-2026-71868 (CVE-2026-71868). Risk of unauthorized operations or information disclosure.
CVE-2026-71867 SQL Injection in CVE-2026-71867 (CVE-2026-71867)
SQL injection in CVE-2026-71867 (CVE-2026-71867). Risk of unauthorized operations or information disclosure.
CVE-2026-71866 SQL Injection in CVE-2026-71866 (CVE-2026-71866)
SQL injection in CVE-2026-71866 (CVE-2026-71866). Risk of unauthorized operations or information disclosure.
CVE-2026-71865 Code Injection in CVE-2026-71865 (CVE-2026-71865)
code injection in CVE-2026-71865 (CVE-2026-71865). Risk of unauthorized operations or information disclosure.
CVE-2026-71864 Code Injection in CVE-2026-71864 (CVE-2026-71864)
code injection in CVE-2026-71864 (CVE-2026-71864). Risk of unauthorized operations or information disclosure.
CVE-2026-69159 Out-of-Bounds Read in c (CVE-2026-69159)
vulnerability in c (CVE-2026-69159). Risk of unauthorized operations or information disclosure.
CVE-2026-67581 Vulnerability in CVE-2026-67581 (CVE-2026-67581)
vulnerability in CVE-2026-67581 (CVE-2026-67581). Risk of unauthorized operations or information disclosure.
CVE-2026-66794 SSRF (Server-Side Request Forgery) in CVE-2026-66794 (CVE-2026-66794)
SSRF in CVE-2026-66794 (CVE-2026-66794). Confidential information can be exposed externally.
CVE-2026-63652 Vulnerability in c (CVE-2026-63652)
vulnerability in c (CVE-2026-63652). Risk of unauthorized operations or information disclosure.
CVE-2026-63633 Vulnerability in c (CVE-2026-63633)
vulnerability in c (CVE-2026-63633). Risk of unauthorized operations or information disclosure.
CVE-2026-63117 Vulnerability in c (CVE-2026-63117)
vulnerability in c (CVE-2026-63117). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.28.0` or later.
CVE-2026-62682 Code Injection in CVE-2026-62682 (CVE-2026-62682)
code injection in CVE-2026-62682 (CVE-2026-62682). Risk of unauthorized operations or information disclosure.
CVE-2026-62681 Code Injection in react (CVE-2026-62681)
code injection in react (CVE-2026-62681). Risk of unauthorized operations or information disclosure.
CVE-2026-62680 Path Traversal in CVE-2026-62680 (CVE-2026-62680)
path traversal in CVE-2026-62680 (CVE-2026-62680). Confidential information can be exposed externally.
CVE-2026-61518 SQL Injection in sqli (CVE-2026-61518)
SQL injection in sqli (CVE-2026-61518). Successful exploitation can lead to full system takeover.
CVE-2026-55648 Vulnerability in c (CVE-2026-55648)
vulnerability in c (CVE-2026-55648). Risk of unauthorized operations or information disclosure.
CVE-2026-55564 Out-of-Bounds Read in c (CVE-2026-55564)
vulnerability in c (CVE-2026-55564). Risk of unauthorized operations or information disclosure.
CVE-2026-55194 Vulnerability in c (CVE-2026-55194)
vulnerability in c (CVE-2026-55194). Risk of unauthorized operations or information disclosure.
CVE-2026-55193 Vulnerability in c (CVE-2026-55193)
vulnerability in c (CVE-2026-55193). Risk of unauthorized operations or information disclosure.
CVE-2026-55192 Out-of-Bounds Read in c (CVE-2026-55192)
vulnerability in c (CVE-2026-55192). Risk of unauthorized operations or information disclosure.
CVE-2026-55191 Vulnerability in c (CVE-2026-55191)
vulnerability in c (CVE-2026-55191). Risk of unauthorized operations or information disclosure.
CVE-2026-32475 Unrestricted File Upload in CVE-2026-32475 (CVE-2026-32475)
vulnerability in CVE-2026-32475 (CVE-2026-32475). Successful exploitation can lead to full system takeover.
CVE-2026-19875 Vulnerability in langflow (CVE-2026-19875)
vulnerability in langflow (CVE-2026-19875). Data can be tampered with by attackers.
CVE-2026-19653 Vulnerability in dos (CVE-2026-19653)
vulnerability in dos (CVE-2026-19653). Risk of unauthorized operations or information disclosure.
CVE-2026-19234 Vulnerability in ibm (CVE-2026-19234)
vulnerability in ibm (CVE-2026-19234). Successful exploitation can lead to full system takeover.
CVE-2026-18874 Code Injection in CVE-2026-18874 (CVE-2026-18874)
code injection in CVE-2026-18874 (CVE-2026-18874). Data can be tampered with by attackers.
CVE-2026-17183 Authorization Flaw in CVE-2026-17183 (CVE-2026-17183)
vulnerability in CVE-2026-17183 (CVE-2026-17183). Confidential information can be exposed externally.
CVE-2025-14603 Vulnerability in sqli (CVE-2025-14603)
vulnerability in sqli (CVE-2025-14603). Risk of unauthorized operations or information disclosure.
CVE-2025-14600 Vulnerability in deserialization (CVE-2025-14600)
vulnerability in deserialization (CVE-2025-14600). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →