Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-52975 |
|
Vulnerability in c (CVE-2026-52975)
vulnerability in c (CVE-2026-52975). Successful exploitation can lead to full system takeover.
|
| CVE-2026-52961 |
|
Vulnerability in c (CVE-2026-52961)
vulnerability in c (CVE-2026-52961). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52966 |
|
Vulnerability in c (CVE-2026-52966)
vulnerability in c (CVE-2026-52966). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52957 |
|
Vulnerability in c (CVE-2026-52957)
vulnerability in c (CVE-2026-52957). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52947 |
|
Use-After-Free in c (CVE-2026-52947)
vulnerability in c (CVE-2026-52947). Successful exploitation can lead to full system takeover.
|
| CVE-2026-48721 |
|
Vulnerability in c (CVE-2026-48721)
vulnerability in c (CVE-2026-48721). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.2026.05.06.15.42.stable` or later.
|
| CVE-2026-56111 |
|
Vulnerability in c (CVE-2026-56111)
vulnerability in c (CVE-2026-56111). Data can be tampered with by attackers.
|
| CVE-2026-13163 |
|
Open Redirect in c (CVE-2026-13163)
vulnerability in c (CVE-2026-13163). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52941 |
|
Vulnerability in c (CVE-2026-52941)
vulnerability in c (CVE-2026-52941). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52942 |
|
Out-of-Bounds Read in c (CVE-2026-52942)
vulnerability in c (CVE-2026-52942). Confidential information can be exposed externally.
|
| CVE-2026-52925 |
|
Vulnerability in c (CVE-2026-52925)
vulnerability in c (CVE-2026-52925). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52938 |
|
Vulnerability in c (CVE-2026-52938)
vulnerability in c (CVE-2026-52938). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52939 |
|
Vulnerability in c (CVE-2026-52939)
vulnerability in c (CVE-2026-52939). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52915 |
|
Vulnerability in c (CVE-2026-52915)
vulnerability in c (CVE-2026-52915). Confidential information can be exposed externally. Exploitable via ``IP6T_OPTS_OPTSNR``.
|
| CVE-2026-54639 |
|
Style Dictionary - Prototype Pollution in convertTokenData utility function
Style Dictionary - Prototype Pollution in convertTokenData utility function
|
| CVE-2026-11820 |
|
Vulnerability in c (CVE-2026-11820)
vulnerability in c (CVE-2026-11820). Confidential information can be exposed externally.
|
| CVE-2026-11819 |
|
Vulnerability in c (CVE-2026-11819)
vulnerability in c (CVE-2026-11819). Confidential information can be exposed externally.
|
| CVE-2026-55249 |
|
OS Command Injection in c (CVE-2026-55249)
OS command injection in c (CVE-2026-55249). Confidential information can be exposed externally.
|
| CVE-2025-71382 |
|
Vulnerability in c (CVE-2025-71382)
vulnerability in c (CVE-2025-71382). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55448 |
|
OS Command Injection in mise (CVE-2026-55448)
OS command injection in mise (CVE-2026-55448). Confidential information can be exposed externally. Exploitable via ``mise``. Mitigation: upgrade to `2026.6.4` or later.
|
| CVE-2026-55173 |
|
OS Command Injection in wwbn/avideo (CVE-2026-55173)
OS command injection in wwbn/avideo (CVE-2026-55173). Successful exploitation can lead to full system takeover. Exploitable via ``sanitizeFFmpegCommand``.
|
| CVE-2026-56114 |
|
Out-of-Bounds Write in c (CVE-2026-56114)
out-of-bounds write in c (CVE-2026-56114). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56115 |
|
Vulnerability in c (CVE-2026-56115)
vulnerability in c (CVE-2026-56115). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56117 |
|
Use-After-Free in c (CVE-2026-56117)
vulnerability in c (CVE-2026-56117). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-55639 |
|
Vulnerability in c (CVE-2025-55639)
vulnerability in c (CVE-2025-55639). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12969 |
|
Out-of-Bounds Read in c (CVE-2026-12969)
vulnerability in c (CVE-2026-12969). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56371 |
|
Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56371)
vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-56371). Risk of unauthorized operations or information disclosure. Exploitable via ``texture``. Mitigation: upgrade to `14.10.3` or later.
|
| CVE-2026-10658 |
|
Out-of-Bounds Write in c (CVE-2026-10658)
out-of-bounds write in c (CVE-2026-10658). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10651 |
|
Vulnerability in c (CVE-2026-10651)
vulnerability in c (CVE-2026-10651). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10645 |
|
Out-of-Bounds Read in c (CVE-2026-10645)
vulnerability in c (CVE-2026-10645). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48517 |
|
Vulnerability in MessagePack (CVE-2026-48517)
vulnerability in MessagePack (CVE-2026-48517). Data can be tampered with by attackers. Exploitable via ``MessagePackSerializer.Typeless``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48516 |
|
Vulnerability in MessagePack (CVE-2026-48516)
vulnerability in MessagePack (CVE-2026-48516). Risk of unauthorized operations or information disclosure. Exploitable via ``MessagePackSecurity.UntrustedData``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48515 |
|
Vulnerability in MessagePack (CVE-2026-48515)
vulnerability in MessagePack (CVE-2026-48515). Risk of unauthorized operations or information disclosure. Exploitable via ``MessagePackSecurity.UntrustedData``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48514 |
|
Vulnerability in MessagePack (CVE-2026-48514)
vulnerability in MessagePack (CVE-2026-48514). Risk of unauthorized operations or information disclosure. Exploitable via ``byteLength``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48513 |
|
Vulnerability in MessagePack (CVE-2026-48513)
vulnerability in MessagePack (CVE-2026-48513). Risk of unauthorized operations or information disclosure. Exploitable via ``DynamicUnionResolver``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48512 |
|
Vulnerability in MessagePack (CVE-2026-48512)
vulnerability in MessagePack (CVE-2026-48512). Risk of unauthorized operations or information disclosure. Exploitable via ``MessagePackSerializer.ConvertFromJson``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48511 |
|
Vulnerability in MessagePack (CVE-2026-48511)
vulnerability in MessagePack (CVE-2026-48511). Risk of unauthorized operations or information disclosure. Exploitable via ``ExpandoObjectFormatter.Deserialize``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48510 |
|
Vulnerability in MessagePack (CVE-2026-48510)
vulnerability in MessagePack (CVE-2026-48510). Risk of unauthorized operations or information disclosure. Exploitable via ``Lz4Block``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48509 |
|
Vulnerability in MessagePack (CVE-2026-48509)
vulnerability in MessagePack (CVE-2026-48509). Data can be tampered with by attackers. Exploitable via ``MessagePackSerializerOptions.Standard``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48506 |
|
Vulnerability in MessagePack (CVE-2026-48506)
vulnerability in MessagePack (CVE-2026-48506). Risk of unauthorized operations or information disclosure. Exploitable via ``StackOverflowException``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-48502 |
|
Vulnerability in MessagePack (CVE-2026-48502)
vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.
|
| CVE-2026-56109 |
|
Vulnerability in c (CVE-2026-56109)
vulnerability in c (CVE-2026-56109). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12602 |
|
Vulnerability in c (CVE-2026-12602)
vulnerability in c (CVE-2026-12602). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56367 |
|
Out-of-Bounds Read in c (CVE-2026-56367)
vulnerability in c (CVE-2026-56367). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50559 |
|
Authentication Bypass in io.quarkus:quarkus-vertx-http (CVE-2026-50559)
authentication bypass in io.quarkus:quarkus-vertx-http (CVE-2026-50559). Confidential information can be exposed externally. Exploitable via ``quarkus.http.auth.permission``. Mitigation: upgrade to `3.37.0` or later.
|
| CVE-2026-54911 |
|
Vulnerability in ujson (CVE-2026-54911)
vulnerability in ujson (CVE-2026-54911). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.13.0` or later.
|
| CVE-2026-54902 |
|
Use-After-Free in oj (CVE-2026-54902)
vulnerability in oj (CVE-2026-54902). Risk of unauthorized operations or information disclosure. Exploitable via ``hash_end``. Mitigation: upgrade to `3.17.3` or later.
|
| CVE-2026-54900 |
|
Use-After-Free in oj (CVE-2026-54900)
vulnerability in oj (CVE-2026-54900). Risk of unauthorized operations or information disclosure. Exploitable via ``create_id``. Mitigation: upgrade to `3.17.3` or later.
|
| CVE-2026-54898 |
|
Use-After-Free in oj (CVE-2026-54898)
vulnerability in oj (CVE-2026-54898). Risk of unauthorized operations or information disclosure. Exploitable via ``hash_start``. Mitigation: upgrade to `3.17.3` or later.
|
| CVE-2026-54897 |
|
Use-After-Free in oj (CVE-2026-54897)
vulnerability in oj (CVE-2026-54897). Risk of unauthorized operations or information disclosure. Exploitable via ``each_value``. Mitigation: upgrade to `3.17.3` or later.
|