Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55520 |
|
Vulnerability in Protego (CVE-2026-55520)
vulnerability in Protego (CVE-2026-55520). Risk of unauthorized operations or information disclosure. Exploitable via ``robots.txt``. Mitigation: upgrade to `0.6.2` or later.
|
| CVE-2026-80205 |
|
Vulnerability in dos (CVE-2026-80205)
vulnerability in dos (CVE-2026-80205). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79770 |
|
Vulnerability in dos (CVE-2026-79770)
vulnerability in dos (CVE-2026-79770). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66766 |
|
Vulnerability in dos (CVE-2026-66766)
vulnerability in dos (CVE-2026-66766). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70656 |
|
Vulnerability in CVE-2026-70656 (CVE-2026-70656)
vulnerability in CVE-2026-70656 (CVE-2026-70656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72818 |
|
Vulnerability in CVE-2026-72818 (CVE-2026-72818)
vulnerability in CVE-2026-72818 (CVE-2026-72818). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77082 |
|
Vulnerability in dos (CVE-2026-77082)
vulnerability in dos (CVE-2026-77082). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62317 |
|
Vulnerability in CVE-2026-62317 (CVE-2026-62317)
vulnerability in CVE-2026-62317 (CVE-2026-62317). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/experience/verification/verification-code`.
|
| CVE-2026-62672 |
|
Vulnerability in CVE-2026-62672 (CVE-2026-62672)
vulnerability in CVE-2026-62672 (CVE-2026-62672). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-74039 |
|
Vulnerability in dos (CVE-2026-74039)
vulnerability in dos (CVE-2026-74039). Risk of unauthorized operations or information disclosure. Exploitable via `POST /security/user/authenticate/run_as`.
|
| CVE-2026-59893 |
|
Vulnerability in sqlparse (CVE-2026-59893)
vulnerability in sqlparse (CVE-2026-59893). Risk of unauthorized operations or information disclosure. Exploitable via ``SQL_REGEX``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-54284 |
|
Vulnerability in sqlparse (CVE-2026-54284)
vulnerability in sqlparse (CVE-2026-54284). Risk of unauthorized operations or information disclosure. Exploitable via ``sqlparse``. Mitigation: upgrade to `0.6.0` or later.
|
| CVE-2026-73556 |
|
Vulnerability in CVE-2026-73556 (CVE-2026-73556)
vulnerability in CVE-2026-73556 (CVE-2026-73556). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-67991 |
|
Vulnerability in dos (CVE-2026-67991)
vulnerability in dos (CVE-2026-67991). Confidential information can be exposed externally.
|
| CVE-2026-72912 |
|
Vulnerability in privilege-escalation (CVE-2026-72912)
vulnerability in privilege-escalation (CVE-2026-72912). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-66062 |
|
Vulnerability in @sveltejs/kit (CVE-2026-66062)
vulnerability in @sveltejs/kit (CVE-2026-66062). Risk of unauthorized operations or information disclosure. Exploitable via ``Accept``. Mitigation: upgrade to `2.70.2` or later.
|
| CVE-2026-67422 |
|
Vulnerability in pymdown-extensions (CVE-2026-67422)
vulnerability in pymdown-extensions (CVE-2026-67422). Risk of unauthorized operations or information disclosure. Exploitable via ``caret``. Mitigation: upgrade to `10.16.1` or later.
|
| CVE-2026-68749 |
|
Vulnerability in rrrene (CVE-2026-68749)
vulnerability in rrrene (CVE-2026-68749). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-71190 |
|
Vulnerability in dos (CVE-2026-71190)
vulnerability in dos (CVE-2026-71190). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70493 |
|
Vulnerability in open-webui (CVE-2026-70493)
vulnerability in open-webui (CVE-2026-70493). Risk of unauthorized operations or information disclosure. Exploitable via ``ENABLE_KB_EXEC``. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-70489 |
|
Vulnerability in open-webui (CVE-2026-70489)
vulnerability in open-webui (CVE-2026-70489). Risk of unauthorized operations or information disclosure. Exploitable via ``USER_PERMISSIONS_FEATURES_AUTOMATIONS``. Mitigation: upgrade to `0.11.0` or later.
|
| CVE-2026-69207 |
|
Vulnerability in hono (CVE-2026-69207)
vulnerability in hono (CVE-2026-69207). Risk of unauthorized operations or information disclosure. Exploitable via ``OPTIONS``. Mitigation: upgrade to `4.12.34` or later.
|
| CVE-2026-23985 |
|
Vulnerability in apache (CVE-2026-23985)
vulnerability in apache (CVE-2026-23985). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-60075 |
|
Vulnerability in dos (CVE-2026-60075)
vulnerability in dos (CVE-2026-60075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16270 |
|
Vulnerability in dos (CVE-2026-16270)
vulnerability in dos (CVE-2026-16270). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58436 |
|
Vulnerability in code.gitea.io/gitea (CVE-2026-58436)
vulnerability in code.gitea.io/gitea (CVE-2026-58436). Risk of unauthorized operations or information disclosure. Exploitable via ``main``. Mitigation: upgrade to `1.27.0` or later.
|
| CVE-2026-14741 |
|
Vulnerability in dos (CVE-2026-14741)
vulnerability in dos (CVE-2026-14741). Risk of unauthorized operations or information disclosure. Exploitable via ``Date``.
|
| CVE-2026-62237 |
|
Vulnerability in dos (CVE-2026-62237)
vulnerability in dos (CVE-2026-62237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6850 |
|
Vulnerability in dos (CVE-2026-6850)
vulnerability in dos (CVE-2026-6850). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57584 |
|
Vulnerability in phalcon/cphalcon (CVE-2026-57584)
vulnerability in phalcon/cphalcon (CVE-2026-57584). Risk of unauthorized operations or information disclosure. Exploitable via ``URI_SOURCE_GET_URL``. Mitigation: upgrade to `5.15.0` or later.
|
| CVE-2026-59220 |
|
Vulnerability in open-webui (CVE-2026-59220)
vulnerability in open-webui (CVE-2026-59220). Risk of unauthorized operations or information disclosure. Exploitable via ``SKILL_MENTION_RE``. Mitigation: upgrade to `0.10.0` or later.
|
| CVE-2026-49485 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.4.2` or later.
|
| CVE-2026-49477 |
|
Vulnerability in soupsieve (CVE-2026-49477)
vulnerability in soupsieve (CVE-2026-49477). Risk of unauthorized operations or information disclosure. Exploitable via ``VALUE``. Mitigation: upgrade to `2.8.4` or later.
|
| CVE-2026-15154 |
|
Vulnerability in dos (CVE-2026-15154)
vulnerability in dos (CVE-2026-15154). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59928 |
|
Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59925 |
|
Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-59922 |
|
Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2026-14895 |
|
Vulnerability in dos (CVE-2026-14895)
vulnerability in dos (CVE-2026-14895). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55574 |
|
Vulnerability in vllm (CVE-2026-55574)
vulnerability in vllm (CVE-2026-55574). Risk of unauthorized operations or information disclosure. Exploitable via ``structured_outputs.regex``. Mitigation: upgrade to `0.24.0` or later.
|
| CVE-2026-58578 |
|
Vulnerability in dos (CVE-2026-58578)
vulnerability in dos (CVE-2026-58578). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-52746 |
|
Vulnerability in jsonata (CVE-2026-52746)
vulnerability in jsonata (CVE-2026-52746). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.9` or later.
|
| CVE-2026-48801 |
|
Vulnerability in linkify-it (CVE-2026-48801)
vulnerability in linkify-it (CVE-2026-48801). Risk of unauthorized operations or information disclosure. Exploitable via ``LinkifyIt.prototype.match``. Mitigation: upgrade to `5.0.1` or later.
|
| CVE-2026-52794 |
|
Vulnerability in dos (CVE-2026-52794)
vulnerability in dos (CVE-2026-52794). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.5.2` or later.
|
| CVE-2026-49851 |
|
Vulnerability in mistune (CVE-2026-49851)
vulnerability in mistune (CVE-2026-49851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
|
| CVE-2025-71379 |
|
Vulnerability in dos (CVE-2025-71379)
vulnerability in dos (CVE-2025-71379). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49293 |
|
Vulnerability in js-toml (CVE-2026-49293)
vulnerability in js-toml (CVE-2026-49293). Risk of unauthorized operations or information disclosure. Exploitable via ``parseBigInt``. Mitigation: upgrade to `1.1.1` or later.
|
| CVE-2026-55470 |
|
Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-55470)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-55470). Risk of unauthorized operations or information disclosure. Exploitable via ``RegexTimeout``. Mitigation: upgrade to `6.9.10` or later.
|
| CVE-2026-48125 |
|
Vulnerability in ua-parser-js (CVE-2026-48125)
vulnerability in ua-parser-js (CVE-2026-48125). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.10` or later.
|
| CVE-2026-54268 |
|
Vulnerability in @angular/common (CVE-2026-54268)
vulnerability in @angular/common (CVE-2026-54268). Risk of unauthorized operations or information disclosure. Exploitable via ``formatDate``.
|
| CVE-2026-41848 |
|
Vulnerability in org.springframework:spring-core (CVE-2026-41848)
vulnerability in org.springframework:spring-core (CVE-2026-41848). Risk of unauthorized operations or information disclosure.
|