Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55536 |
|
Vulnerability in PraisonAI (CVE-2026-55536)
vulnerability in PraisonAI (CVE-2026-55536). Confidential information can be exposed externally. Exploitable via ``start_session``. Mitigation: upgrade to `4.6.58` or later.
|
| CVE-2026-73845 |
|
Vulnerability in CVE-2026-73845 (CVE-2026-73845)
vulnerability in CVE-2026-73845 (CVE-2026-73845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19278 |
|
Vulnerability in privilege-escalation (CVE-2026-19278)
vulnerability in privilege-escalation (CVE-2026-19278). Confidential information can be exposed externally.
|
| CVE-2026-64940 |
|
Vulnerability in jvn (CVE-2026-64940)
vulnerability in jvn (CVE-2026-64940). Data can be tampered with by attackers.
|
| CVE-2026-37737 |
|
Vulnerability in sanic-cors (CVE-2026-37737)
vulnerability in sanic-cors (CVE-2026-37737). Confidential information can be exposed externally.
|
| CVE-2026-44587 |
|
Cross-Site Scripting (XSS) in carrierwave (CVE-2026-44587)
cross-site scripting in carrierwave (CVE-2026-44587). Risk of unauthorized operations or information disclosure. Exploitable via ``Regexp.quote``. Mitigation: upgrade to `2.2.7` or later.
|
| CVE-2026-40110 |
|
Vulnerability in jupyter-server (CVE-2026-40110)
vulnerability in jupyter-server (CVE-2026-40110). Confidential information can be exposed externally. Exploitable via ``allow_origin_pat``. Mitigation: upgrade to `057869a327c46730afede3eab0ca2d2` or later.
|
| CVE-2026-34830 |
|
Vulnerability in rack (CVE-2026-34830)
vulnerability in rack (CVE-2026-34830). Confidential information can be exposed externally. Exploitable via ``internal``. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-34763 |
|
Vulnerability in rack (CVE-2026-34763)
vulnerability in rack (CVE-2026-34763). Risk of unauthorized operations or information disclosure. Exploitable via ``root``. Mitigation: upgrade to `3.2.6` or later.
|