Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82257 |
|
Vulnerability in CVE-2026-82257 (CVE-2026-82257)
vulnerability in CVE-2026-82257 (CVE-2026-82257). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78654 |
|
Code Injection in CVE-2026-78654 (CVE-2026-78654)
code injection in CVE-2026-78654 (CVE-2026-78654). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78181 |
|
Code Injection in CVE-2026-78181 (CVE-2026-78181)
code injection in CVE-2026-78181 (CVE-2026-78181). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78180 |
|
Code Injection in CVE-2026-78180 (CVE-2026-78180)
code injection in CVE-2026-78180 (CVE-2026-78180). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78179 |
|
Code Injection in CVE-2026-78179 (CVE-2026-78179)
code injection in CVE-2026-78179 (CVE-2026-78179). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78178 |
|
Code Injection in CVE-2026-78178 (CVE-2026-78178)
code injection in CVE-2026-78178 (CVE-2026-78178). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78207 |
|
Vulnerability in c (CVE-2026-78207)
vulnerability in c (CVE-2026-78207). Confidential information can be exposed externally.
|
| CVE-2026-77083 |
|
Vulnerability in CVE-2026-77083 (CVE-2026-77083)
vulnerability in CVE-2026-77083 (CVE-2026-77083). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-23929 |
|
Vulnerability in CVE-2026-23929 (CVE-2026-23929)
vulnerability in CVE-2026-23929 (CVE-2026-23929). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71553 |
|
Vulnerability in dos (CVE-2026-71553)
vulnerability in dos (CVE-2026-71553). Risk of unauthorized operations or information disclosure. Exploitable via `PATCH /api/v1/article/`.
|
| CVE-2026-73654 |
|
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
|
| CVE-2026-73088 |
|
Vulnerability in CVE-2026-73088 (CVE-2026-73088)
vulnerability in CVE-2026-73088 (CVE-2026-73088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72769 |
|
Vulnerability in dos (CVE-2026-72769)
vulnerability in dos (CVE-2026-72769). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72749 |
|
Vulnerability in dos (CVE-2026-72749)
vulnerability in dos (CVE-2026-72749). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71438 |
|
Vulnerability in mermaid (CVE-2026-71438)
vulnerability in mermaid (CVE-2026-71438). Risk of unauthorized operations or information disclosure. Exploitable via ``mermaid.initialize``. Mitigation: upgrade to `10.9.8` or later.
|
| CVE-2026-71437 |
|
Vulnerability in mermaid (CVE-2026-71437)
vulnerability in mermaid (CVE-2026-71437). Risk of unauthorized operations or information disclosure. Exploitable via ``horizontal``. Mitigation: upgrade to `11.16.1` or later.
|
| CVE-2026-70610 |
|
Vulnerability in electron (CVE-2026-70610)
vulnerability in electron (CVE-2026-70610). Risk of unauthorized operations or information disclosure. Exploitable via ``contextBridge``. Mitigation: upgrade to `42.0.0-beta.4` or later.
|
| CVE-2026-14574 |
|
Vulnerability in eclipse (CVE-2026-14574)
vulnerability in eclipse (CVE-2026-14574). Data can be tampered with by attackers. Exploitable via ``PreferenceUtils.merge``.
|
| CVE-2026-67319 |
|
Vulnerability in CVE-2026-67319 (CVE-2026-67319)
vulnerability in CVE-2026-67319 (CVE-2026-67319). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67314 |
|
Vulnerability in axios (CVE-2026-67314)
vulnerability in axios (CVE-2026-67314). Risk of unauthorized operations or information disclosure. Exploitable via ``auth``. Mitigation: upgrade to `1.15.2` or later.
|
| CVE-2026-67316 |
|
Vulnerability in CVE-2026-67316 (CVE-2026-67316)
vulnerability in CVE-2026-67316 (CVE-2026-67316). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18420 |
|
Vulnerability in Amazon aws (CVE-2026-18420)
vulnerability in Amazon aws (CVE-2026-18420). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54737 |
|
Vulnerability in @phun-ky/defaults-deep (CVE-2026-54737)
vulnerability in @phun-ky/defaults-deep (CVE-2026-54737). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.0.5` or later.
|
| CVE-2026-14893 |
|
Vulnerability in CVE-2026-14893 (CVE-2026-14893)
vulnerability in CVE-2026-14893 (CVE-2026-14893). Data can be tampered with by attackers.
|
| CVE-2026-66922 |
|
Vulnerability in dos (CVE-2026-66922)
vulnerability in dos (CVE-2026-66922). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73647 |
|
Vulnerability in quasar (CVE-2026-73647)
vulnerability in quasar (CVE-2026-73647). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `2.22.0` or later.
|
| CVE-2026-73562 |
|
Vulnerability in mongoose (CVE-2026-73562)
vulnerability in mongoose (CVE-2026-73562). Risk of unauthorized operations or information disclosure. Exploitable via ``Object.prototype``. Mitigation: upgrade to `9.7.2` or later.
|
| CVE-2026-16266 |
|
Vulnerability in CVE-2026-16266 (CVE-2026-16266)
vulnerability in CVE-2026-16266 (CVE-2026-16266). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53592 |
|
Vulnerability in laravel (CVE-2026-53592)
vulnerability in laravel (CVE-2026-53592). Risk of unauthorized operations or information disclosure. Exploitable via ``getQueryParam``.
|
| CVE-2026-16151 |
|
Code Injection in CVE-2026-16151 (CVE-2026-16151)
code injection in CVE-2026-16151 (CVE-2026-16151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16150 |
|
Code Injection in CVE-2026-16150 (CVE-2026-16150)
code injection in CVE-2026-16150 (CVE-2026-16150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16008 |
|
Code Injection in CVE-2026-16008 (CVE-2026-16008)
code injection in CVE-2026-16008 (CVE-2026-16008). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54335 |
|
Vulnerability in @feathersjs/commons (CVE-2026-54335)
vulnerability in @feathersjs/commons (CVE-2026-54335). Risk of unauthorized operations or information disclosure. Exploitable via ``source``. Mitigation: upgrade to `5.0.45` or later.
|
| CVE-2026-15702 |
|
Code Injection in CVE-2026-15702 (CVE-2026-15702)
code injection in CVE-2026-15702 (CVE-2026-15702). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15697 |
|
Code Injection in CVE-2026-15697 (CVE-2026-15697)
code injection in CVE-2026-15697 (CVE-2026-15697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15698 |
|
Code Injection in CVE-2026-15698 (CVE-2026-15698)
code injection in CVE-2026-15698 (CVE-2026-15698). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15699 |
|
Code Injection in CVE-2026-15699 (CVE-2026-15699)
code injection in CVE-2026-15699 (CVE-2026-15699). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15607 |
|
Code Injection in CVE-2026-15607 (CVE-2026-15607)
code injection in CVE-2026-15607 (CVE-2026-15607). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15598 |
|
Code Injection in CVE-2026-15598 (CVE-2026-15598)
code injection in CVE-2026-15598 (CVE-2026-15598). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15538 |
|
Code Injection in CVE-2026-15538 (CVE-2026-15538)
code injection in CVE-2026-15538 (CVE-2026-15538). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56763 |
|
Vulnerability in CVE-2026-56763 (CVE-2026-56763)
vulnerability in CVE-2026-56763 (CVE-2026-56763). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15195 |
|
Code Injection in CVE-2026-15195 (CVE-2026-15195)
code injection in CVE-2026-15195 (CVE-2026-15195). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15187 |
|
Code Injection in CVE-2026-15187 (CVE-2026-15187)
code injection in CVE-2026-15187 (CVE-2026-15187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59206 |
|
Vulnerability in n8n (CVE-2026-59206)
vulnerability in n8n (CVE-2026-59206). Confidential information can be exposed externally. Exploitable via ``Object.prototype``. Mitigation: upgrade to `2.27.4` or later.
|
| CVE-2026-59876 |
|
Vulnerability in protobufjs (CVE-2026-59876)
vulnerability in protobufjs (CVE-2026-59876). Risk of unauthorized operations or information disclosure. Exploitable via ``__proto__``. Mitigation: upgrade to `8.6.5` or later.
|
| CVE-2026-57439 |
|
Cross-Site Scripting (XSS) in CVE-2026-57439 (CVE-2026-57439)
cross-site scripting in CVE-2026-57439 (CVE-2026-57439). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54756 |
|
Vulnerability in jodit (CVE-2026-54756)
vulnerability in jodit (CVE-2026-54756). Risk of unauthorized operations or information disclosure. Exploitable via ``ConfigMerge``. Mitigation: upgrade to `4.12.18` or later.
|
| CVE-2026-48819 |
|
Vulnerability in @hey-api/openapi-ts (CVE-2026-48819)
vulnerability in @hey-api/openapi-ts (CVE-2026-48819). Risk of unauthorized operations or information disclosure. Exploitable via `GET /search`. Mitigation: upgrade to `0.97.3` or later.
|
| CVE-2026-48795 |
|
Vulnerability in @adonisjs/bodyparser (CVE-2026-48795)
vulnerability in @adonisjs/bodyparser (CVE-2026-48795). Risk of unauthorized operations or information disclosure. Exploitable via ``FormFields``. Mitigation: upgrade to `11.0.3` or later.
|
| CVE-2026-57926 |
|
Vulnerability in jetbrains (CVE-2026-57926)
vulnerability in jetbrains (CVE-2026-57926). Risk of unauthorized operations or information disclosure.
|