CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- GHSA-7XGJ-8392-5Q4RFastMCP: Post-transform component authorization is skipped on direct callsfastmcp · fastmcp-slim
- GHSA-VQQP-X5QM-5QP4FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorifastmcp · fastmcp-slim
- CVE-2026-115893Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instructionbytecodealliance wasmtime · wasmtime
- CVE-2026-115892Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload typebytecodealliance wasmtime · wasmtime
- CVE-2026-115889Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationbytecodealliance wasmtime · wasmtime
- CVE-2026-115887graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of servicegraphql-hive graphql-scalars · graphql-scalars
- CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpointsmlflow
- CVE-2026-115885LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputlangchain-ai langgraph · langgraph-cli
- CVE-2026-115883LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storeslangchain-ai langgraph · langchain-ai langgraph-checkpoi… +3
- CVE-2026-113951If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in…Apple Container
- CVE-2026-75525OpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenantopen-reception appointment-booking-software
- CVE-2026-115800UbiquitousLearning mllm Convertor __init__.py load_model path traversalUbiquitousLearning mllm
- CVE-2026-75524OpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agentopen-reception appointment-booking-software
- CVE-2026-65825OpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenantsopen-reception appointment-booking-software
- CVE-2026-65824OpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookieopen-reception appointment-booking-software
- CVE-2026-58202OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`open-reception appointment-booking-software
- CVE-2026-115877Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Valuetwisted
- CVE-2026-83813Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validationtwisted
- CVE-2026-115778Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffertwisted
- CVE-2026-115776Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffertwisted
- CVE-2026-115775Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Treetwisted
- CVE-2026-115774Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCHtwisted
- CVE-2026-113877HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressionsHTTP-Headers-ActionPack
- CVE-2026-115797Tenda F6 Web Management cleartext transmissionTenda F6
- CVE-2026-79982Out-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet…zephyrproject zephyr
- CVE-2026-79981DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofingzephyrproject zephyr
- CVE-2026-79980Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNSzephyrproject zephyr
- CVE-2026-79979Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frameszephyrproject zephyr
- CVE-2026-79978Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read pathzephyrproject zephyr
- CVE-2026-79977WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyrzephyrproject zephyr