CVEs
Browse the synced catalog, newest first.
- CVE-2026-112907filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale breaktox-dev filelock · filelock
- CVE-2026-111490Insecure direct object reference (IDOR) vulnerability in the MatchPoint APITPC Software Matchpoint
- CVE-2026-112913filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its databasetox-dev filelock · filelock
- CVE-2026-111489A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platformTPC Software Matchpoint
- CVE-2026-112910filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACLtox-dev filelock · filelock
- CVE-2026-100395LXC: lxc-copy host-context hostname update follows symlinklxc
- CVE-2026-119757BTCPay Server < 2.4.2 LND Macaroon Credential File DisclosureBTCPay Server
- CVE-2026-33944Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameterdolibarr · dolibarr/dolibarr
- CVE-2026-111770Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to anothermodelcontextprotocol typescript-sdk · @modelcontextprotocol…
- CVE-2026-111768Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validationmodelcontextprotocol typescript-sdk · @modelcontextproto… +3
- CVE-2026-111769Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom…modelcontextprotocol typescript-sdk · @modelcontextproto… +3
- CVE-2026-111771Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another servicemodelcontextprotocol typescript-sdk · @modelcontextproto… +7
- CVE-2026-49272OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflowoauthlib
- CVE-2026-77463Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deploymentumputun remark42 · github.com/umputun/remark42/backend +1
- CVE-2026-77622Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG DecoderBishopFox sliver · github.com/BishopFox/sliver
- CVE-2026-81190KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRFkurrent-io KurrentDB
- CVE-2026-111062A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the requestEugeny russh
- CVE-2026-48705MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)Project-MONAI MONAI · monai
- CVE-2026-110802Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandboxaltair-graphql altair · altair-graphql altair-express-mi… +7
- CVE-2026-112902Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagspython-pillow Pillow · pillow
- CVE-2026-114604GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segmentsardatan graphql-tools · @graphql-tools/utils
- CVE-2026-112899Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limitpython-pillow Pillow · pillow
- CVE-2026-54442NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRFNationalSecurityAgency emissary · gov.nsa.emissary:emissary
- CVE-2026-62268borg extract might modify out-of-tree files when extracting maliciously crafted archivesborgbackup borg · borgbackup
- CVE-2026-85076Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)jhuckaby Cronicle
- CVE-2026-34157Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOriginswailsapp wails · github.com/wailsapp/wails/v2
- CVE-2026-111753Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)angular · @angular/common
- CVE-2026-114134Black: GitHub Action installs unvalidated required-version from pyproject.tomlpsf black · black
- CVE-2026-46350dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASSdcmjs-org dcmjs · dcmjs
- CVE-2026-119434Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffersilviucpp ezstd · ezstd