Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-33218 |
|
Vulnerability in nats (CVE-2026-33218)
vulnerability in nats (CVE-2026-33218). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.15, 2.12.6` or later.
|
| CVE-2026-33217 |
|
Authorization Flaw in nats (CVE-2026-33217)
vulnerability in nats (CVE-2026-33217). Data can be tampered with by attackers. Mitigation: upgrade to `2.11.15, 2.12.6` or later.
|
| CVE-2026-33216 |
|
Vulnerability in nats (CVE-2026-33216)
vulnerability in nats (CVE-2026-33216). Confidential information can be exposed externally. Mitigation: upgrade to `2.11.15, 2.12.6` or later.
|
| CVE-2026-29785 |
|
Vulnerability in nats (CVE-2026-29785)
vulnerability in nats (CVE-2026-29785). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.14, 2.12.5` or later.
|
| CVE-2026-27889 |
|
Vulnerability in nats (CVE-2026-27889)
vulnerability in nats (CVE-2026-27889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.14, 2.12.5` or later.
|
| CVE-2026-33211 |
|
Path Traversal in path-traversal (CVE-2026-33211)
path traversal in path-traversal (CVE-2026-33211). Confidential information can be exposed externally. Exploitable via ``pathInRepo``.
|
| CVE-2026-4404 |
|
Vulnerability in linuxfoundation (CVE-2026-4404)
vulnerability in linuxfoundation (CVE-2026-4404). Confidential information can be exposed externally.
|
| CVE-2026-28500 |
|
Vulnerability in onnx (CVE-2026-28500)
vulnerability in onnx (CVE-2026-28500). Confidential information can be exposed externally. Mitigation: upgrade to `1.21.0rc1` or later.
|
| CVE-2026-29773 |
|
Authorization Flaw in privilege-escalation (CVE-2026-29773)
vulnerability in privilege-escalation (CVE-2026-29773). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-29186 |
|
Vulnerability in linuxfoundation (CVE-2026-29186)
vulnerability in linuxfoundation (CVE-2026-29186). Confidential information can be exposed externally.
|
| CVE-2026-27134 |
|
Authentication Bypass in apache (CVE-2026-27134)
authentication bypass in apache (CVE-2026-27134). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25153 |
|
Code Injection in linuxfoundation (CVE-2026-25153)
code injection in linuxfoundation (CVE-2026-25153). Confidential information can be exposed externally. Exploitable via ``hooks``.
|
| CVE-2026-24747 |
|
Code Injection in linuxfoundation (CVE-2026-24747)
code injection in linuxfoundation (CVE-2026-24747). Successful exploitation can lead to full system takeover. Exploitable via ``weights_only``.
|
| CVE-2025-63396 |
|
Vulnerability in pytorch (CVE-2025-63396)
vulnerability in pytorch (CVE-2025-63396). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1, 2.8.0` or later.
|
| CVE-2024-21626 |
|
Vulnerability in github.com/opencontainers/runc (CVE-2024-21626)
vulnerability in github.com/opencontainers/runc (CVE-2024-21626). Successful exploitation can lead to full system takeover. Exploitable via ``process.cwd``. Mitigation: upgrade to `1.1.12` or later.
|
| CVE-2022-41354 |
|
Vulnerability in linuxfoundation (CVE-2022-41354)
vulnerability in linuxfoundation (CVE-2022-41354). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-48363 |
|
Vulnerability in musicpd (CVE-2022-48363)
vulnerability in musicpd (CVE-2022-48363). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17697 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2017-17697)
SSRF in ssrf (CVE-2017-17697). Confidential information can be exposed externally.
|