Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-81517 |
|
Vulnerability in CVE-2026-81517 (CVE-2026-81517)
vulnerability in CVE-2026-81517 (CVE-2026-81517). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77078 |
|
Vulnerability in dos (CVE-2026-77078)
vulnerability in dos (CVE-2026-77078). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55484 |
|
Vulnerability in github.com/guno1928/alos-http (CVE-2026-55484)
vulnerability in github.com/guno1928/alos-http (CVE-2026-55484). Risk of unauthorized operations or information disclosure. Exploitable via ``sanitizeRequestPath``. Mitigation: upgrade to `0.0.0-20260617230736-314b6783e196` or later.
|
| CVE-2026-82254 |
|
Vulnerability in CVE-2026-82254 (CVE-2026-82254)
vulnerability in CVE-2026-82254 (CVE-2026-82254). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54553 |
|
Information Disclosure in starlette-admin (CVE-2026-54553)
vulnerability in starlette-admin (CVE-2026-54553). Risk of unauthorized operations or information disclosure. Exploitable via ``metadata``. Mitigation: upgrade to `0.16.1` or later.
|
| CVE-2026-63403 |
|
Vulnerability in dos (CVE-2026-63403)
vulnerability in dos (CVE-2026-63403). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79778 |
|
Vulnerability in dos (CVE-2026-79778)
vulnerability in dos (CVE-2026-79778). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77781 |
|
Vulnerability in CVE-2026-77781 (CVE-2026-77781)
vulnerability in CVE-2026-77781 (CVE-2026-77781). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23938 |
|
Vulnerability in dos (CVE-2026-23938)
vulnerability in dos (CVE-2026-23938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72813 |
|
Vulnerability in dos (CVE-2026-72813)
vulnerability in dos (CVE-2026-72813). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72660 |
|
Vulnerability in dos (CVE-2026-72660)
vulnerability in dos (CVE-2026-72660). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49096 |
|
Vulnerability in dos (CVE-2026-49096)
vulnerability in dos (CVE-2026-49096). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18675 |
|
Vulnerability in CVE-2026-18675 (CVE-2026-18675)
vulnerability in CVE-2026-18675 (CVE-2026-18675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-20775 |
|
Vulnerability in dos (CVE-2026-20775)
vulnerability in dos (CVE-2026-20775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73088 |
|
Vulnerability in CVE-2026-73088 (CVE-2026-73088)
vulnerability in CVE-2026-73088 (CVE-2026-73088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62909 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-52856 |
|
Vulnerability in github.com/pterodactyl/wings (CVE-2026-52856)
vulnerability in github.com/pterodactyl/wings (CVE-2026-52856). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.13.0` or later.
|
| CVE-2026-65834 |
|
Vulnerability in github.com/projectcapsule/capsule (CVE-2026-65834)
vulnerability in github.com/projectcapsule/capsule (CVE-2026-65834). Risk of unauthorized operations or information disclosure. Exploitable via ``ForbiddenAnnotations.Regex``. Mitigation: upgrade to `0.13.8` or later.
|
| CVE-2026-13697 |
|
Information Disclosure in undici (CVE-2026-13697)
vulnerability in undici (CVE-2026-13697). Confidential information can be exposed externally. Exploitable via ``private``. Mitigation: upgrade to `8.9.0` or later.
|
| CVE-2026-47219 |
|
Vulnerability in find-my-way (CVE-2026-47219)
vulnerability in find-my-way (CVE-2026-47219). Risk of unauthorized operations or information disclosure. Exploitable via ``req.method``. Mitigation: upgrade to `9.7.0` or later.
|
| CVE-2026-73418 |
|
Vulnerability in @auth/core (CVE-2026-73418)
vulnerability in @auth/core (CVE-2026-73418). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `0.41.3` or later.
|
| CVE-2026-61666 |
|
Vulnerability in websocket-driver (CVE-2026-61666)
vulnerability in websocket-driver (CVE-2026-61666). Risk of unauthorized operations or information disclosure. Exploitable via ``Host``. Mitigation: upgrade to `0.8.2` or later.
|
| CVE-2026-64612 |
|
Vulnerability in dos (CVE-2026-64612)
vulnerability in dos (CVE-2026-64612). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63747 |
|
Vulnerability in dos (CVE-2026-63747)
vulnerability in dos (CVE-2026-63747). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-71391 |
|
Vulnerability in surrealdb (CVE-2025-71391)
vulnerability in surrealdb (CVE-2025-71391). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58369 |
|
Vulnerability in dos (CVE-2024-58369)
vulnerability in dos (CVE-2024-58369). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58368 |
|
SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST...
SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST...
|
| CVE-2024-58365 |
|
Vulnerability in surrealdb (CVE-2024-58365)
vulnerability in surrealdb (CVE-2024-58365). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58364 |
|
Vulnerability in dos (CVE-2024-58364)
vulnerability in dos (CVE-2024-58364). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58361 |
|
Vulnerability in surrealdb (CVE-2024-58361)
vulnerability in surrealdb (CVE-2024-58361). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58357 |
|
Vulnerability in dos (CVE-2024-58357)
vulnerability in dos (CVE-2024-58357). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58358 |
|
Vulnerability in dos (CVE-2024-58358)
vulnerability in dos (CVE-2024-58358). Risk of unauthorized operations or information disclosure.
|
| CVE-2024-58359 |
|
Vulnerability in dos (CVE-2024-58359)
vulnerability in dos (CVE-2024-58359). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62994 |
|
Vulnerability in corednsio (CVE-2026-62994)
vulnerability in corednsio (CVE-2026-62994). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47480 |
|
Vulnerability in dos (CVE-2026-47480)
vulnerability in dos (CVE-2026-47480). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50328 |
|
Vulnerability in microsoft (CVE-2026-50328)
vulnerability in microsoft (CVE-2026-50328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59162 |
|
Vulnerability in excelize (CVE-2026-59162)
vulnerability in excelize (CVE-2026-59162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55780 |
|
Vulnerability in cpp (CVE-2026-55780)
vulnerability in cpp (CVE-2026-55780). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58208 |
|
Vulnerability in linuxfoundation (CVE-2026-58208)
vulnerability in linuxfoundation (CVE-2026-58208). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59892 |
|
Vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892)
vulnerability in @opentelemetry/propagator-jaeger (CVE-2026-59892). Risk of unauthorized operations or information disclosure. Exploitable via ``URIError``. Mitigation: upgrade to `2.9.0` or later.
|
| CVE-2026-59875 |
|
Vulnerability in tar (CVE-2026-59875)
vulnerability in tar (CVE-2026-59875). Risk of unauthorized operations or information disclosure. Exploitable via ``NUL``. Mitigation: upgrade to `7.5.17` or later.
|
| CVE-2026-53530 |
|
Vulnerability in ratex-parser (CVE-2026-53530)
vulnerability in ratex-parser (CVE-2026-53530). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_symbol_inner``. Mitigation: upgrade to `0.1.11` or later.
|
| CVE-2026-27844 |
|
Vulnerability in dos (CVE-2026-27844)
vulnerability in dos (CVE-2026-27844). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27790 |
|
Vulnerability in dos (CVE-2026-27790)
vulnerability in dos (CVE-2026-27790). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14631 |
|
Vulnerability in webpack-dev-server (CVE-2026-14631)
vulnerability in webpack-dev-server (CVE-2026-14631). Risk of unauthorized operations or information disclosure. Exploitable via ``Host``. Mitigation: upgrade to `5.2.6` or later.
|
| CVE-2026-52739 |
|
Vulnerability in zebra-state (CVE-2026-52739)
vulnerability in zebra-state (CVE-2026-52739). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `7.0.0` or later.
|
| CVE-2026-52738 |
|
Vulnerability in zebra-state (CVE-2026-52738)
vulnerability in zebra-state (CVE-2026-52738). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `7.0.0` or later.
|
| CVE-2026-52731 |
|
Vulnerability in zebra-rpc (CVE-2026-52731)
vulnerability in zebra-rpc (CVE-2026-52731). Risk of unauthorized operations or information disclosure. Exploitable via ``zebrad``. Mitigation: upgrade to `8.0.0` or later.
|
| CVE-2026-54908 |
|
Out-of-Bounds Read in github.com/pion/dtls/v3 (CVE-2026-54908)
vulnerability in github.com/pion/dtls/v3 (CVE-2026-54908). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.4` or later.
|
| CVE-2026-14181 |
|
Vulnerability in dos (CVE-2026-14181)
vulnerability in dos (CVE-2026-14181). Risk of unauthorized operations or information disclosure.
|