CVEs
Browse the synced catalog, newest first.
- CVE-2026-125116Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collectionsAutomattic mongoose · mongoose
- CVE-2026-125115Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter conditionnovuhq novu · @novu application-generic +1
- CVE-2026-125114Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protectionnovuhq novu
- CVE-2026-125113XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." patternxrootd
- CVE-2026-125112djust: A template binding inherits a context safety grant it never earned (XSS)djust-org djust
- CVE-2026-90591NXP ENET-QOS Ethernet driver re-arms RX descriptors with a clobbered DMA buffer address on packet dropzephyrproject zephyr
- CVE-2026-90590Permanent loss of transmit capability in the NXP ENET QoS Ethernet driver after an Ethernet link dropzephyrproject zephyr
- CVE-2026-90589Memory-mapped thread stack is never unmapped when a thread is aborted by another thread, exhausting kernel virtual address spacezephyrproject zephyr
- CVE-2026-90588Out-of-bounds read in Zephyr HTTP client debug logging of response header fieldszephyrproject zephyr
- CVE-2026-90587NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurationszephyrproject zephyr
- CVE-2026-90586Xtensa MMU userspace: uninitialized thread page-table pointer leads to out-of-bounds supervisor-mode writeszephyrproject zephyr
- CVE-2026-90585Renesas RA SCI UART driver: unacknowledged receive-error interrupt causes a permanent interrupt storm and CPU lockupzephyrproject zephyr
- CVE-2026-125111Rack: Multipart parsing allows DoS via unbounded scan buffer growthrack
- CVE-2026-125110Rack: Rack::Static header_rules bypass via dot-segment normalization mismatchrack
- CVE-2026-124999braindecode Hub Integration base.py EEGModuleMixin._from_pretrained path traversalbraindecode
- CVE-2026-125109Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835rack
- CVE-2026-125108Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypassrack
- CVE-2026-77473AsyncSSH: SFTP Recursive Copy Path Traversal via Unsanitized Server-Supplied Filenamesronf asyncssh
- CVE-2026-102643AsyncSSH: SFTPServer Chroot Escaperonf asyncssh
- CVE-2026-124996Turboderp-org ExLlamaV3 hash-MoE routing routing.cu routing_sel_norm_kernel out-of-boundsTurboderp-org ExLlamaV3
- CVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartextzizmorcore zizmor · zizmor
- CVE-2026-61812ModSecurity: HTML decoder missing entities, leading to evasionowasp-modsecurity ModSecurity
- CVE-2026-73857ModSecurity v3 XML Request Body Processor Uninitialized Pointer Dereference Vulnerabilityowasp-modsecurity ModSecurity
- CVE-2026-104259ModSecurity: removeComments Transformation Fails to Strip Adjacent Comments, Enabling WAF Rule Bypassowasp-modsecurity ModSecurity
- CVE-2026-114032Local privilege escalation via untrusted OpenSSL configurationIllumio Core Ven
- CVE-2026-114031Local privilege escalation via insecure folder permissionsIllumio Core Ven
- CVE-2026-125107Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange keyjulianhille MuhammaraJS · muhammara
- CVE-2026-125106Wagtail: Improper restriction handling on Page translation API endpointwagtail
- CVE-2026-125105Wagtail: Identification of documents by SHA1 hashwagtail
- CVE-2026-123820Wagtail: Improper restriction handling on descendant collections in Documents and Images APIwagtail