Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
UBUNTU-CVE-2026-48619 Vulnerability in nodejs (UBUNTU-CVE-2026-48619)
vulnerability in nodejs (UBUNTU-CVE-2026-48619). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-48935 Vulnerability in nodejs (UBUNTU-CVE-2026-48935)
vulnerability in nodejs (UBUNTU-CVE-2026-48935). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-48934 Vulnerability in nodejs (UBUNTU-CVE-2026-48934)
vulnerability in nodejs (UBUNTU-CVE-2026-48934). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-48936 Vulnerability in nodejs (UBUNTU-CVE-2026-48936)
vulnerability in nodejs (UBUNTU-CVE-2026-48936). Risk of unauthorized operations or information disclosure.
GHSA-2gh4-jhh2-625m Vulnerability in wellnpm (GHSA-2gh4-jhh2-625m)
vulnerability in wellnpm (GHSA-2gh4-jhh2-625m). Risk of unauthorized operations or information disclosure. Exploitable via ``launch``.
GHSA-p6ch-cw7w-ff5c Vulnerability in animatecss-postcss-plugin (GHSA-p6ch-cw7w-ff5c)
vulnerability in animatecss-postcss-plugin (GHSA-p6ch-cw7w-ff5c). Risk of unauthorized operations or information disclosure. Exploitable via ``message``.
MAL-2026-6494 Vulnerability in @help-forms/application-aff (MAL-2026-6494)
vulnerability in @help-forms/application-aff (MAL-2026-6494). Risk of unauthorized operations or information disclosure. Exploitable via ``RECON_ONLY``.
CVE-2026-9222 Vulnerability in CVE-2026-9222 (CVE-2026-9222)
vulnerability in CVE-2026-9222 (CVE-2026-9222). Successful exploitation can lead to full system takeover.
CVE-2026-9219 Vulnerability in CVE-2026-9219 (CVE-2026-9219)
vulnerability in CVE-2026-9219 (CVE-2026-9219). Confidential information can be exposed externally.
CVE-2026-9220 Vulnerability in CVE-2026-9220 (CVE-2026-9220)
vulnerability in CVE-2026-9220 (CVE-2026-9220). Confidential information can be exposed externally.
CVE-2026-13218 Vulnerability in kubevirt (CVE-2026-13218)
vulnerability in kubevirt (CVE-2026-13218). Risk of unauthorized operations or information disclosure.
CVE-2026-13318 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-13318)
SSRF in ssrf (CVE-2026-13318). Risk of unauthorized operations or information disclosure.
CVE-2026-13322 Vulnerability in redhat (CVE-2026-13322)
vulnerability in redhat (CVE-2026-13322). Risk of unauthorized operations or information disclosure.
CVE-2026-13083 Cross-Site Scripting (XSS) in redhat (CVE-2026-13083)
cross-site scripting in redhat (CVE-2026-13083). Confidential information can be exposed externally.
CVE-2026-12993 Vulnerability in redhat (CVE-2026-12993)
vulnerability in redhat (CVE-2026-12993). Risk of unauthorized operations or information disclosure.
CVE-2026-9221 Vulnerability in CVE-2026-9221 (CVE-2026-9221)
vulnerability in CVE-2026-9221 (CVE-2026-9221). Confidential information can be exposed externally.
CVE-2026-6330 Vulnerability in wolfssl (CVE-2026-6330)
vulnerability in wolfssl (CVE-2026-6330). Risk of unauthorized operations or information disclosure.
CVE-2026-7532 Vulnerability in wolfssl (CVE-2026-7532)
vulnerability in wolfssl (CVE-2026-7532). Data can be tampered with by attackers.
CVE-2026-22879 vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability
vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability
CVE-2026-8720 Vulnerability in wolfssl (CVE-2026-8720)
vulnerability in wolfssl (CVE-2026-8720). Data can be tampered with by attackers.
CVE-2026-6092 Vulnerability in wolfssl (CVE-2026-6092)
vulnerability in wolfssl (CVE-2026-6092). Risk of unauthorized operations or information disclosure.
CVE-2026-55962 Authentication Bypass in wolfssl (CVE-2026-55962)
authentication bypass in wolfssl (CVE-2026-55962). Data can be tampered with by attackers.
CVE-2026-7511 Vulnerability in wolfssl (CVE-2026-7511)
vulnerability in wolfssl (CVE-2026-7511). Data can be tampered with by attackers.
CVE-2026-44622 Vulnerability in CVE-2026-44622 (CVE-2026-44622)
vulnerability in CVE-2026-44622 (CVE-2026-44622). Risk of unauthorized operations or information disclosure.
CVE-2026-6329 Vulnerability in wolfssl (CVE-2026-6329)
vulnerability in wolfssl (CVE-2026-6329). Data can be tampered with by attackers.
CVE-2026-50176 Vulnerability in CVE-2026-50176 (CVE-2026-50176)
vulnerability in CVE-2026-50176 (CVE-2026-50176). Risk of unauthorized operations or information disclosure.
CVE-2026-54479 Vulnerability in CVE-2026-54479 (CVE-2026-54479)
vulnerability in CVE-2026-54479 (CVE-2026-54479). Risk of unauthorized operations or information disclosure.
CVE-2026-13283 Use-After-Free in google (CVE-2026-13283)
vulnerability in google (CVE-2026-13283). Successful exploitation can lead to full system takeover.
CVE-2026-6325 Out-of-Bounds Write in wolfssl (CVE-2026-6325)
out-of-bounds write in wolfssl (CVE-2026-6325). Data can be tampered with by attackers.
CVE-2026-6331 Vulnerability in wolfssl (CVE-2026-6331)
vulnerability in wolfssl (CVE-2026-6331). Data can be tampered with by attackers.
CVE-2026-13282 Use-After-Free in google (CVE-2026-13282)
vulnerability in google (CVE-2026-13282). Successful exploitation can lead to full system takeover.
CVE-2026-10098 Vulnerability in wolfssl (CVE-2026-10098)
vulnerability in wolfssl (CVE-2026-10098). Risk of unauthorized operations or information disclosure.
CVE-2025-71335 Vulnerability in flowise (CVE-2025-71335)
vulnerability in flowise (CVE-2025-71335). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.10` or later.
CVE-2025-71334 Path Traversal in flowise (CVE-2025-71334)
path traversal in flowise (CVE-2025-71334). Successful exploitation can lead to full system takeover. Exploitable via ``filename``. Mitigation: upgrade to `3.0.6` or later.
CVE-2026-12992 SSRF (Server-Side Request Forgery) in redhat (CVE-2026-12992)
SSRF in redhat (CVE-2026-12992). Risk of unauthorized operations or information disclosure.
CVE-2025-71336 OS Command Injection in flowise (CVE-2025-71336)
OS command injection in flowise (CVE-2025-71336). Successful exploitation can lead to full system takeover. Exploitable via ``npx``. Mitigation: upgrade to `3.0.6` or later.
CVE-2026-11800 Vulnerability in privilege-escalation (CVE-2026-11800)
vulnerability in privilege-escalation (CVE-2026-11800). Confidential information can be exposed externally.
CVE-2025-71340 Unsafe Deserialization in picklescan (CVE-2025-71340)
vulnerability in picklescan (CVE-2025-71340). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
CVE-2026-12975 XXE (XML External Entity) in ssrf (CVE-2026-12975)
vulnerability in ssrf (CVE-2026-12975). Risk of unauthorized operations or information disclosure.
CVE-2025-71338 Code Injection in flowise (CVE-2025-71338)
code injection in flowise (CVE-2025-71338). Successful exploitation can lead to full system takeover. Exploitable via ``txtFile``.
CVE-2026-11703 Authentication Bypass in wolfssl (CVE-2026-11703)
authentication bypass in wolfssl (CVE-2026-11703). Data can be tampered with by attackers.
CVE-2025-71333 Unrestricted File Upload in flowise (CVE-2025-71333)
vulnerability in flowise (CVE-2025-71333). Successful exploitation can lead to full system takeover. Exploitable via ``storageType``.
CVE-2025-71327 Authentication Bypass in flowise (CVE-2025-71327)
authentication bypass in flowise (CVE-2025-71327). Confidential information can be exposed externally.
CVE-2025-71324 Vulnerability in path-traversal (CVE-2025-71324)
vulnerability in path-traversal (CVE-2025-71324). Confidential information can be exposed externally.
CVE-2020-37256 Cross-Site Scripting (XSS) in getgrav/grav (CVE-2020-37256)
cross-site scripting in getgrav/grav (CVE-2020-37256). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.30` or later.
CVE-2021-47986 Vulnerability in parseplatform (CVE-2021-47986)
vulnerability in parseplatform (CVE-2021-47986). Successful exploitation can lead to full system takeover.
CVE-2021-47987 Vulnerability in CVE-2021-47987 (CVE-2021-47987)
vulnerability in CVE-2021-47987 (CVE-2021-47987). Successful exploitation can lead to full system takeover.
CVE-2025-71328 Vulnerability in flowise-ui (CVE-2025-71328)
vulnerability in flowise-ui (CVE-2025-71328). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.10` or later.
GHSA-6hp6-2792-v6q5 Vulnerability in prism-silq (GHSA-6hp6-2792-v6q5)
vulnerability in prism-silq (GHSA-6hp6-2792-v6q5). Risk of unauthorized operations or information disclosure.
GHSA-vwrj-pprq-gjvq Vulnerability in hexo-shoka-swiper (GHSA-vwrj-pprq-gjvq)
vulnerability in hexo-shoka-swiper (GHSA-vwrj-pprq-gjvq). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →