Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55165 |
|
Vulnerability in lemur (CVE-2026-55165)
vulnerability in lemur (CVE-2026-55165). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-55164 |
|
Vulnerability in lemur (CVE-2026-55164)
vulnerability in lemur (CVE-2026-55164). Confidential information can be exposed externally. Exploitable via `PUT /api/1/users/`. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-55163 |
|
Authorization Flaw in lemur (CVE-2026-55163)
vulnerability in lemur (CVE-2026-55163). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/1/roles/`. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-55162 |
|
SSRF (Server-Side Request Forgery) in lemur (CVE-2026-55162)
SSRF in lemur (CVE-2026-55162). Risk of unauthorized operations or information disclosure. Exploitable via `POST /certificates/upload`. Mitigation: upgrade to `1.9.2` or later.
|
| CVE-2026-48722 |
|
Vulnerability in io.nextflow:nextflow (CVE-2026-48722)
vulnerability in io.nextflow:nextflow (CVE-2026-48722). Confidential information can be exposed externally. Exploitable via ``TOWER_ACCESS_TOKEN``. Mitigation: upgrade to `26.04.3` or later.
|
| CVE-2026-48702 |
|
Vulnerability in github.com/sigstore/rekor (CVE-2026-48702)
vulnerability in github.com/sigstore/rekor (CVE-2026-48702). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.2` or later.
|
| CVE-2026-48529 |
|
Vulnerability in github.com/github/github-mcp-server (CVE-2026-48529)
vulnerability in github.com/github/github-mcp-server (CVE-2026-48529). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.2` or later.
|
| CVE-2026-6412 |
|
Vulnerability in wolfssl (CVE-2026-6412)
vulnerability in wolfssl (CVE-2026-6412). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6450 |
|
Vulnerability in wolfssl (CVE-2026-6450)
vulnerability in wolfssl (CVE-2026-6450). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56445 |
|
Path Traversal in c (CVE-2026-56445)
path traversal in c (CVE-2026-56445). Data can be tampered with by attackers.
|
| CVE-2026-6731 |
|
Vulnerability in wolfssl (CVE-2026-6731)
vulnerability in wolfssl (CVE-2026-6731). Data can be tampered with by attackers.
|
| CVE-2026-6681 |
|
Vulnerability in wolfssl (CVE-2026-6681)
vulnerability in wolfssl (CVE-2026-6681). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38637 |
|
Vulnerability in dos (CVE-2026-38637)
vulnerability in dos (CVE-2026-38637). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6679 |
|
Vulnerability in wolfssl (CVE-2026-6679)
vulnerability in wolfssl (CVE-2026-6679). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6678 |
|
Vulnerability in wolfssl (CVE-2026-6678)
vulnerability in wolfssl (CVE-2026-6678). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55960 |
|
Vulnerability in wolfssl (CVE-2026-55960)
vulnerability in wolfssl (CVE-2026-55960). Data can be tampered with by attackers.
|
| CVE-2026-57521 |
|
Vulnerability in bitwarden (CVE-2026-57521)
vulnerability in bitwarden (CVE-2026-57521). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55958 |
|
Vulnerability in dos (CVE-2026-55958)
vulnerability in dos (CVE-2026-55958). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37452 |
|
Information Disclosure in CVE-2026-37452 (CVE-2026-37452)
vulnerability in CVE-2026-37452 (CVE-2026-37452). Confidential information can be exposed externally.
|
| CVE-2026-37149 |
|
SQL Injection in sqli (CVE-2026-37149)
SQL injection in sqli (CVE-2026-37149). Confidential information can be exposed externally.
|
| CVE-2026-55964 |
|
Vulnerability in wolfssl (CVE-2026-55964)
vulnerability in wolfssl (CVE-2026-55964). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-37454 |
|
Information Disclosure in msi (CVE-2026-37454)
vulnerability in msi (CVE-2026-37454). Confidential information can be exposed externally.
|
| CVE-2026-12473 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-12473 (CVE-2026-12473)
SSRF in CVE-2026-12473 (CVE-2026-12473). Confidential information can be exposed externally.
|
| CVE-2026-2299 |
|
Vulnerability in mattermost (CVE-2026-2299)
vulnerability in mattermost (CVE-2026-2299). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-46601 |
|
Vulnerability in golang.org/x/image (CVE-2026-46601)
vulnerability in golang.org/x/image (CVE-2026-46601). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.0` or later.
|
| CVE-2026-46602 |
|
Vulnerability in golang.org/x/image (CVE-2026-46602)
vulnerability in golang.org/x/image (CVE-2026-46602). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.0` or later.
|
| CVE-2026-37453 |
|
Information Disclosure in msi (CVE-2026-37453)
vulnerability in msi (CVE-2026-37453). Confidential information can be exposed externally.
|
| CVE-2026-7531 |
|
Use-After-Free in wolfssl (CVE-2026-7531)
vulnerability in wolfssl (CVE-2026-7531). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11310 |
|
Vulnerability in wolfssl (CVE-2026-11310)
vulnerability in wolfssl (CVE-2026-11310). Data can be tampered with by attackers.
|
| CVE-2026-57522 |
|
Vulnerability in bitwarden (CVE-2026-57522)
vulnerability in bitwarden (CVE-2026-57522). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10592 |
|
Vulnerability in wolfssl (CVE-2026-10592)
vulnerability in wolfssl (CVE-2026-10592). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12340 |
|
Out-of-Bounds Read in dos (CVE-2026-12340)
vulnerability in dos (CVE-2026-12340). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-38640 |
|
Vulnerability in dos (CVE-2026-38640)
vulnerability in dos (CVE-2026-38640). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57520 |
|
Vulnerability in privilege-escalation (CVE-2026-57520)
vulnerability in privilege-escalation (CVE-2026-57520). Data can be tampered with by attackers.
|
| CVE-2026-56789 |
|
Vulnerability in c (CVE-2026-56789)
vulnerability in c (CVE-2026-56789). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56774 |
|
Vulnerability in dos (CVE-2026-56774)
vulnerability in dos (CVE-2026-56774). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10097 |
|
Vulnerability in wolfssl (CVE-2026-10097)
vulnerability in wolfssl (CVE-2026-10097). Confidential information can be exposed externally.
|
| CVE-2025-60464 |
|
Use-After-Free in c (CVE-2025-60464)
vulnerability in c (CVE-2025-60464). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57700 |
|
Unrestricted File Upload in CVE-2026-57700 (CVE-2026-57700)
vulnerability in CVE-2026-57700 (CVE-2026-57700). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60465 |
|
Use-After-Free in c (CVE-2025-60465)
vulnerability in c (CVE-2025-60465). Data can be tampered with by attackers.
|
| CVE-2026-10512 |
|
Vulnerability in wolfssl (CVE-2026-10512)
vulnerability in wolfssl (CVE-2026-10512). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56786 |
|
Out-of-Bounds Write in dos (CVE-2026-56786)
out-of-bounds write in dos (CVE-2026-56786). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56779 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-56779 (CVE-2026-56779)
SSRF in CVE-2026-56779 (CVE-2026-56779). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56787 |
|
Vulnerability in c (CVE-2026-56787)
vulnerability in c (CVE-2026-56787). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56771 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-56771 (CVE-2026-56771)
SSRF in CVE-2026-56771 (CVE-2026-56771). Data can be tampered with by attackers.
|
| CVE-2026-56790 |
|
Vulnerability in c (CVE-2026-56790)
vulnerability in c (CVE-2026-56790). Data can be tampered with by attackers.
|
| CVE-2026-56769 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-56769 (CVE-2026-56769)
SSRF in CVE-2026-56769 (CVE-2026-56769). Confidential information can be exposed externally.
|
| CVE-2026-56772 |
|
Vulnerability in CVE-2026-56772 (CVE-2026-56772)
vulnerability in CVE-2026-56772 (CVE-2026-56772). Risk of unauthorized operations or information disclosure. Exploitable via `GET /social/interactions`.
|
| CVE-2026-56788 |
|
Out-of-Bounds Read in dos (CVE-2026-56788)
vulnerability in dos (CVE-2026-56788). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56770 |
|
Vulnerability in CVE-2026-56770 (CVE-2026-56770)
vulnerability in CVE-2026-56770 (CVE-2026-56770). Risk of unauthorized operations or information disclosure.
|