Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-1333 Clear
ID Title
CVE-2026-55520 Vulnerability in Protego (CVE-2026-55520)
vulnerability in Protego (CVE-2026-55520). Risk of unauthorized operations or information disclosure. Exploitable via ``robots.txt``. Mitigation: upgrade to `0.6.2` or later.
CVE-2026-80205 Vulnerability in dos (CVE-2026-80205)
vulnerability in dos (CVE-2026-80205). Risk of unauthorized operations or information disclosure.
CVE-2026-79770 Vulnerability in dos (CVE-2026-79770)
vulnerability in dos (CVE-2026-79770). Risk of unauthorized operations or information disclosure.
CVE-2026-66766 Vulnerability in dos (CVE-2026-66766)
vulnerability in dos (CVE-2026-66766). Risk of unauthorized operations or information disclosure.
CVE-2026-70656 Vulnerability in CVE-2026-70656 (CVE-2026-70656)
vulnerability in CVE-2026-70656 (CVE-2026-70656). Risk of unauthorized operations or information disclosure.
CVE-2026-72818 Vulnerability in CVE-2026-72818 (CVE-2026-72818)
vulnerability in CVE-2026-72818 (CVE-2026-72818). Risk of unauthorized operations or information disclosure.
CVE-2026-77082 Vulnerability in dos (CVE-2026-77082)
vulnerability in dos (CVE-2026-77082). Risk of unauthorized operations or information disclosure.
CVE-2026-62317 Vulnerability in CVE-2026-62317 (CVE-2026-62317)
vulnerability in CVE-2026-62317 (CVE-2026-62317). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/experience/verification/verification-code`.
CVE-2026-62672 Vulnerability in CVE-2026-62672 (CVE-2026-62672)
vulnerability in CVE-2026-62672 (CVE-2026-62672). Risk of unauthorized operations or information disclosure.
CVE-2026-74039 Vulnerability in dos (CVE-2026-74039)
vulnerability in dos (CVE-2026-74039). Risk of unauthorized operations or information disclosure. Exploitable via `POST /security/user/authenticate/run_as`.
CVE-2026-59893 Vulnerability in sqlparse (CVE-2026-59893)
vulnerability in sqlparse (CVE-2026-59893). Risk of unauthorized operations or information disclosure. Exploitable via ``SQL_REGEX``. Mitigation: upgrade to `0.6.0` or later.
CVE-2026-54284 Vulnerability in sqlparse (CVE-2026-54284)
vulnerability in sqlparse (CVE-2026-54284). Risk of unauthorized operations or information disclosure. Exploitable via ``sqlparse``. Mitigation: upgrade to `0.6.0` or later.
CVE-2026-73556 Vulnerability in CVE-2026-73556 (CVE-2026-73556)
vulnerability in CVE-2026-73556 (CVE-2026-73556). Risk of unauthorized operations or information disclosure.
CVE-2026-67991 Vulnerability in dos (CVE-2026-67991)
vulnerability in dos (CVE-2026-67991). Confidential information can be exposed externally.
CVE-2026-72912 Vulnerability in privilege-escalation (CVE-2026-72912)
vulnerability in privilege-escalation (CVE-2026-72912). Risk of unauthorized operations or information disclosure.
CVE-2026-66062 Vulnerability in @sveltejs/kit (CVE-2026-66062)
vulnerability in @sveltejs/kit (CVE-2026-66062). Risk of unauthorized operations or information disclosure. Exploitable via ``Accept``. Mitigation: upgrade to `2.70.2` or later.
CVE-2026-67422 Vulnerability in pymdown-extensions (CVE-2026-67422)
vulnerability in pymdown-extensions (CVE-2026-67422). Risk of unauthorized operations or information disclosure. Exploitable via ``caret``. Mitigation: upgrade to `10.16.1` or later.
CVE-2026-68749 Vulnerability in rrrene (CVE-2026-68749)
vulnerability in rrrene (CVE-2026-68749). Risk of unauthorized operations or information disclosure.
CVE-2026-71190 Vulnerability in dos (CVE-2026-71190)
vulnerability in dos (CVE-2026-71190). Risk of unauthorized operations or information disclosure.
CVE-2026-70493 Vulnerability in open-webui (CVE-2026-70493)
vulnerability in open-webui (CVE-2026-70493). Risk of unauthorized operations or information disclosure. Exploitable via ``ENABLE_KB_EXEC``. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-70489 Vulnerability in open-webui (CVE-2026-70489)
vulnerability in open-webui (CVE-2026-70489). Risk of unauthorized operations or information disclosure. Exploitable via ``USER_PERMISSIONS_FEATURES_AUTOMATIONS``. Mitigation: upgrade to `0.11.0` or later.
CVE-2026-69207 Vulnerability in hono (CVE-2026-69207)
vulnerability in hono (CVE-2026-69207). Risk of unauthorized operations or information disclosure. Exploitable via ``OPTIONS``. Mitigation: upgrade to `4.12.34` or later.
CVE-2026-23985 Vulnerability in apache (CVE-2026-23985)
vulnerability in apache (CVE-2026-23985). Risk of unauthorized operations or information disclosure.
CVE-2026-60075 Vulnerability in dos (CVE-2026-60075)
vulnerability in dos (CVE-2026-60075). Risk of unauthorized operations or information disclosure.
CVE-2026-16270 Vulnerability in dos (CVE-2026-16270)
vulnerability in dos (CVE-2026-16270). Risk of unauthorized operations or information disclosure.
CVE-2026-58436 Vulnerability in code.gitea.io/gitea (CVE-2026-58436)
vulnerability in code.gitea.io/gitea (CVE-2026-58436). Risk of unauthorized operations or information disclosure. Exploitable via ``main``. Mitigation: upgrade to `1.27.0` or later.
CVE-2026-14741 Vulnerability in dos (CVE-2026-14741)
vulnerability in dos (CVE-2026-14741). Risk of unauthorized operations or information disclosure. Exploitable via ``Date``.
CVE-2026-62237 Vulnerability in dos (CVE-2026-62237)
vulnerability in dos (CVE-2026-62237). Risk of unauthorized operations or information disclosure.
CVE-2026-6850 Vulnerability in dos (CVE-2026-6850)
vulnerability in dos (CVE-2026-6850). Risk of unauthorized operations or information disclosure.
CVE-2026-57584 Vulnerability in phalcon/cphalcon (CVE-2026-57584)
vulnerability in phalcon/cphalcon (CVE-2026-57584). Risk of unauthorized operations or information disclosure. Exploitable via ``URI_SOURCE_GET_URL``. Mitigation: upgrade to `5.15.0` or later.
CVE-2026-59220 Vulnerability in open-webui (CVE-2026-59220)
vulnerability in open-webui (CVE-2026-59220). Risk of unauthorized operations or information disclosure. Exploitable via ``SKILL_MENTION_RE``. Mitigation: upgrade to `0.10.0` or later.
CVE-2026-49485 Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-49485). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.9.4.2` or later.
CVE-2026-49477 Vulnerability in soupsieve (CVE-2026-49477)
vulnerability in soupsieve (CVE-2026-49477). Risk of unauthorized operations or information disclosure. Exploitable via ``VALUE``. Mitigation: upgrade to `2.8.4` or later.
CVE-2026-15154 Vulnerability in dos (CVE-2026-15154)
vulnerability in dos (CVE-2026-15154). Risk of unauthorized operations or information disclosure.
CVE-2026-59928 Vulnerability in mistune (CVE-2026-59928)
vulnerability in mistune (CVE-2026-59928). Risk of unauthorized operations or information disclosure. Exploitable via ``ref_links``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59925 Vulnerability in mistune (CVE-2026-59925)
vulnerability in mistune (CVE-2026-59925). Risk of unauthorized operations or information disclosure. Exploitable via ``EMPHASIS_END_RE``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-59922 Vulnerability in mistune (CVE-2026-59922)
vulnerability in mistune (CVE-2026-59922). Risk of unauthorized operations or information disclosure. Exploitable via ``mark``. Mitigation: upgrade to `3.3.0` or later.
CVE-2026-14895 Vulnerability in dos (CVE-2026-14895)
vulnerability in dos (CVE-2026-14895). Risk of unauthorized operations or information disclosure.
CVE-2026-55574 Vulnerability in vllm (CVE-2026-55574)
vulnerability in vllm (CVE-2026-55574). Risk of unauthorized operations or information disclosure. Exploitable via ``structured_outputs.regex``. Mitigation: upgrade to `0.24.0` or later.
CVE-2026-58578 Vulnerability in dos (CVE-2026-58578)
vulnerability in dos (CVE-2026-58578). Risk of unauthorized operations or information disclosure.
CVE-2026-52746 Vulnerability in jsonata (CVE-2026-52746)
vulnerability in jsonata (CVE-2026-52746). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.9` or later.
CVE-2026-48801 Vulnerability in linkify-it (CVE-2026-48801)
vulnerability in linkify-it (CVE-2026-48801). Risk of unauthorized operations or information disclosure. Exploitable via ``LinkifyIt.prototype.match``. Mitigation: upgrade to `5.0.1` or later.
CVE-2026-52794 Vulnerability in dos (CVE-2026-52794)
vulnerability in dos (CVE-2026-52794). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.5.2` or later.
CVE-2026-49851 Vulnerability in mistune (CVE-2026-49851)
vulnerability in mistune (CVE-2026-49851). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.3.0` or later.
CVE-2025-71379 Vulnerability in dos (CVE-2025-71379)
vulnerability in dos (CVE-2025-71379). Risk of unauthorized operations or information disclosure.
CVE-2026-49293 Vulnerability in js-toml (CVE-2026-49293)
vulnerability in js-toml (CVE-2026-49293). Risk of unauthorized operations or information disclosure. Exploitable via ``parseBigInt``. Mitigation: upgrade to `1.1.1` or later.
CVE-2026-55470 Vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-55470)
vulnerability in ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (CVE-2026-55470). Risk of unauthorized operations or information disclosure. Exploitable via ``RegexTimeout``. Mitigation: upgrade to `6.9.10` or later.
CVE-2026-48125 Vulnerability in ua-parser-js (CVE-2026-48125)
vulnerability in ua-parser-js (CVE-2026-48125). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.10` or later.
CVE-2026-54268 Vulnerability in @angular/common (CVE-2026-54268)
vulnerability in @angular/common (CVE-2026-54268). Risk of unauthorized operations or information disclosure. Exploitable via ``formatDate``.
CVE-2026-41848 Vulnerability in org.springframework:spring-core (CVE-2026-41848)
vulnerability in org.springframework:spring-core (CVE-2026-41848). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →