Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| UBUNTU-CVE-2026-48619 |
|
Vulnerability in nodejs (UBUNTU-CVE-2026-48619)
vulnerability in nodejs (UBUNTU-CVE-2026-48619). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-48935 |
|
Vulnerability in nodejs (UBUNTU-CVE-2026-48935)
vulnerability in nodejs (UBUNTU-CVE-2026-48935). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-48934 |
|
Vulnerability in nodejs (UBUNTU-CVE-2026-48934)
vulnerability in nodejs (UBUNTU-CVE-2026-48934). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-48936 |
|
Vulnerability in nodejs (UBUNTU-CVE-2026-48936)
vulnerability in nodejs (UBUNTU-CVE-2026-48936). Risk of unauthorized operations or information disclosure.
|
| GHSA-2gh4-jhh2-625m |
|
Vulnerability in wellnpm (GHSA-2gh4-jhh2-625m)
vulnerability in wellnpm (GHSA-2gh4-jhh2-625m). Risk of unauthorized operations or information disclosure. Exploitable via ``launch``.
|
| GHSA-p6ch-cw7w-ff5c |
|
Vulnerability in animatecss-postcss-plugin (GHSA-p6ch-cw7w-ff5c)
vulnerability in animatecss-postcss-plugin (GHSA-p6ch-cw7w-ff5c). Risk of unauthorized operations or information disclosure. Exploitable via ``message``.
|
| MAL-2026-6494 |
|
Vulnerability in @help-forms/application-aff (MAL-2026-6494)
vulnerability in @help-forms/application-aff (MAL-2026-6494). Risk of unauthorized operations or information disclosure. Exploitable via ``RECON_ONLY``.
|
| CVE-2026-9222 |
|
Vulnerability in CVE-2026-9222 (CVE-2026-9222)
vulnerability in CVE-2026-9222 (CVE-2026-9222). Successful exploitation can lead to full system takeover.
|
| CVE-2026-9219 |
|
Vulnerability in CVE-2026-9219 (CVE-2026-9219)
vulnerability in CVE-2026-9219 (CVE-2026-9219). Confidential information can be exposed externally.
|
| CVE-2026-9220 |
|
Vulnerability in CVE-2026-9220 (CVE-2026-9220)
vulnerability in CVE-2026-9220 (CVE-2026-9220). Confidential information can be exposed externally.
|
| CVE-2026-13218 |
|
Vulnerability in kubevirt (CVE-2026-13218)
vulnerability in kubevirt (CVE-2026-13218). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13318 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-13318)
SSRF in ssrf (CVE-2026-13318). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13322 |
|
Vulnerability in redhat (CVE-2026-13322)
vulnerability in redhat (CVE-2026-13322). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13083 |
|
Cross-Site Scripting (XSS) in redhat (CVE-2026-13083)
cross-site scripting in redhat (CVE-2026-13083). Confidential information can be exposed externally.
|
| CVE-2026-12993 |
|
Vulnerability in redhat (CVE-2026-12993)
vulnerability in redhat (CVE-2026-12993). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-9221 |
|
Vulnerability in CVE-2026-9221 (CVE-2026-9221)
vulnerability in CVE-2026-9221 (CVE-2026-9221). Confidential information can be exposed externally.
|
| CVE-2026-6330 |
|
Vulnerability in wolfssl (CVE-2026-6330)
vulnerability in wolfssl (CVE-2026-6330). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-7532 |
|
Vulnerability in wolfssl (CVE-2026-7532)
vulnerability in wolfssl (CVE-2026-7532). Data can be tampered with by attackers.
|
| CVE-2026-22879 |
|
vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability
vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability
|
| CVE-2026-8720 |
|
Vulnerability in wolfssl (CVE-2026-8720)
vulnerability in wolfssl (CVE-2026-8720). Data can be tampered with by attackers.
|
| CVE-2026-6092 |
|
Vulnerability in wolfssl (CVE-2026-6092)
vulnerability in wolfssl (CVE-2026-6092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55962 |
|
Authentication Bypass in wolfssl (CVE-2026-55962)
authentication bypass in wolfssl (CVE-2026-55962). Data can be tampered with by attackers.
|
| CVE-2026-7511 |
|
Vulnerability in wolfssl (CVE-2026-7511)
vulnerability in wolfssl (CVE-2026-7511). Data can be tampered with by attackers.
|
| CVE-2026-44622 |
|
Vulnerability in CVE-2026-44622 (CVE-2026-44622)
vulnerability in CVE-2026-44622 (CVE-2026-44622). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6329 |
|
Vulnerability in wolfssl (CVE-2026-6329)
vulnerability in wolfssl (CVE-2026-6329). Data can be tampered with by attackers.
|
| CVE-2026-50176 |
|
Vulnerability in CVE-2026-50176 (CVE-2026-50176)
vulnerability in CVE-2026-50176 (CVE-2026-50176). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54479 |
|
Vulnerability in CVE-2026-54479 (CVE-2026-54479)
vulnerability in CVE-2026-54479 (CVE-2026-54479). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13283 |
|
Use-After-Free in google (CVE-2026-13283)
vulnerability in google (CVE-2026-13283). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6325 |
|
Out-of-Bounds Write in wolfssl (CVE-2026-6325)
out-of-bounds write in wolfssl (CVE-2026-6325). Data can be tampered with by attackers.
|
| CVE-2026-6331 |
|
Vulnerability in wolfssl (CVE-2026-6331)
vulnerability in wolfssl (CVE-2026-6331). Data can be tampered with by attackers.
|
| CVE-2026-13282 |
|
Use-After-Free in google (CVE-2026-13282)
vulnerability in google (CVE-2026-13282). Successful exploitation can lead to full system takeover.
|
| CVE-2026-10098 |
|
Vulnerability in wolfssl (CVE-2026-10098)
vulnerability in wolfssl (CVE-2026-10098). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71335 |
|
Vulnerability in flowise (CVE-2025-71335)
vulnerability in flowise (CVE-2025-71335). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.10` or later.
|
| CVE-2025-71334 |
|
Path Traversal in flowise (CVE-2025-71334)
path traversal in flowise (CVE-2025-71334). Successful exploitation can lead to full system takeover. Exploitable via ``filename``. Mitigation: upgrade to `3.0.6` or later.
|
| CVE-2026-12992 |
|
SSRF (Server-Side Request Forgery) in redhat (CVE-2026-12992)
SSRF in redhat (CVE-2026-12992). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71336 |
|
OS Command Injection in flowise (CVE-2025-71336)
OS command injection in flowise (CVE-2025-71336). Successful exploitation can lead to full system takeover. Exploitable via ``npx``. Mitigation: upgrade to `3.0.6` or later.
|
| CVE-2026-11800 |
|
Vulnerability in privilege-escalation (CVE-2026-11800)
vulnerability in privilege-escalation (CVE-2026-11800). Confidential information can be exposed externally.
|
| CVE-2025-71340 |
|
Unsafe Deserialization in picklescan (CVE-2025-71340)
vulnerability in picklescan (CVE-2025-71340). Confidential information can be exposed externally. Mitigation: upgrade to `0.0.30` or later.
|
| CVE-2026-12975 |
|
XXE (XML External Entity) in ssrf (CVE-2026-12975)
vulnerability in ssrf (CVE-2026-12975). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71338 |
|
Code Injection in flowise (CVE-2025-71338)
code injection in flowise (CVE-2025-71338). Successful exploitation can lead to full system takeover. Exploitable via ``txtFile``.
|
| CVE-2026-11703 |
|
Authentication Bypass in wolfssl (CVE-2026-11703)
authentication bypass in wolfssl (CVE-2026-11703). Data can be tampered with by attackers.
|
| CVE-2025-71333 |
|
Unrestricted File Upload in flowise (CVE-2025-71333)
vulnerability in flowise (CVE-2025-71333). Successful exploitation can lead to full system takeover. Exploitable via ``storageType``.
|
| CVE-2025-71327 |
|
Authentication Bypass in flowise (CVE-2025-71327)
authentication bypass in flowise (CVE-2025-71327). Confidential information can be exposed externally.
|
| CVE-2025-71324 |
|
Vulnerability in path-traversal (CVE-2025-71324)
vulnerability in path-traversal (CVE-2025-71324). Confidential information can be exposed externally.
|
| CVE-2020-37256 |
|
Cross-Site Scripting (XSS) in getgrav/grav (CVE-2020-37256)
cross-site scripting in getgrav/grav (CVE-2020-37256). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.30` or later.
|
| CVE-2021-47986 |
|
Vulnerability in parseplatform (CVE-2021-47986)
vulnerability in parseplatform (CVE-2021-47986). Successful exploitation can lead to full system takeover.
|
| CVE-2021-47987 |
|
Vulnerability in CVE-2021-47987 (CVE-2021-47987)
vulnerability in CVE-2021-47987 (CVE-2021-47987). Successful exploitation can lead to full system takeover.
|
| CVE-2025-71328 |
|
Vulnerability in flowise-ui (CVE-2025-71328)
vulnerability in flowise-ui (CVE-2025-71328). Confidential information can be exposed externally. Mitigation: upgrade to `3.0.10` or later.
|
| GHSA-6hp6-2792-v6q5 |
|
Vulnerability in prism-silq (GHSA-6hp6-2792-v6q5)
vulnerability in prism-silq (GHSA-6hp6-2792-v6q5). Risk of unauthorized operations or information disclosure.
|
| GHSA-vwrj-pprq-gjvq |
|
Vulnerability in hexo-shoka-swiper (GHSA-vwrj-pprq-gjvq)
vulnerability in hexo-shoka-swiper (GHSA-vwrj-pprq-gjvq). Risk of unauthorized operations or information disclosure.
|