Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-11462 |
|
Vulnerability in Amazon aws (CVE-2025-11462)
vulnerability in Amazon aws (CVE-2025-11462). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5190 |
|
Out-of-Bounds Write in Amazon aws (CVE-2026-5190)
out-of-bounds write in Amazon aws (CVE-2026-5190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44313 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44313)
SSRF in ssrf (CVE-2026-44313). Confidential information can be exposed externally. Exploitable via `GET /api/v1/archives/{linkId}`.
|
| CVE-2026-42193 |
|
Vulnerability in aws (CVE-2026-42193)
vulnerability in aws (CVE-2026-42193). Data can be tampered with by attackers.
|
| CVE-2026-8178 |
|
Vulnerability in com.amazon.redshift:redshift-jdbc42 (CVE-2026-8178)
vulnerability in com.amazon.redshift:redshift-jdbc42 (CVE-2026-8178). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.2.2` or later.
|
| CVE-2026-41512 |
|
Code Injection in gem (CVE-2026-41512)
code injection in gem (CVE-2026-41512). Successful exploitation can lead to full system takeover. Exploitable via `POST /targets/auto_detect_selectors`.
|
| CVE-2026-31431 KEV |
|
[KEV] Vulnerability in Linux redhat (CVE-2026-31431)
vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-4318 |
|
Vulnerability in Amazon @aws-amplify/codegen-ui-react (CVE-2025-4318)
vulnerability in Amazon @aws-amplify/codegen-ui-react (CVE-2025-4318). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.20.3` or later.
|