CVEs published June 22, 2026
220 CVEs were published on June 22, 2026: 18 critical, 83 high.
- Published
- 220
- Critical
- 18
- High
- 83
- Medium
- 102
- Low
- 17
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 199
Most affected products
- MessagePack-CSharp · MessagePack
- 12
- aio-libs aiohttp · aiohttp
- 9
- IBM WebSphere Application Server
- 8
- vllm-project vllm · vllm
- 8
- Capgo
- 7
- misp
- 6
- honojs hono · hono
- 5
- Mattermost · github.com/mattermost/mattermost-server
- 5
- presire qSnapper
- 5
- py-pdf pypdf · pypdf
- 5
Critical 18
- CVE-2026-48746vLLM: OpenAI auth bypassvllm-project vllm · vllm
- CVE-2026-56266Crawl4AI - Server-Side Request Forgery via Direct Crawl EndpointsCrawl4AI
- CVE-2026-49468LiteLLM: Authentication Bypass via Host Header InjectionBerriAI litellm · litellm
- CVE-2026-45034PhpSpreadsheet: File::prohibitWrappers bypassPHPOffice PhpSpreadsheet · phpoffice/phpspreadsheet
- CVE-2026-44727Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSPjupyter-server jupyter_server · jupyter-server
- CVE-2026-10789MCP Extension Code Injection Vulnerability in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-7664Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSSIBM Langflow OSS
- CVE-2026-12628Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to systemIBM Storage Protect Client · IBM Storage Protect Snapshot F…
- CVE-2026-10561Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins InjectionIBM Langflow OSS · langflow
- CVE-2026-28381Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUTGrafana Snowflake Datasource
- CVE-2026-7166Multiple vulnerabilities in the Assassin game by GaudireGaudire Assassin game
- CVE-2026-7165Multiple vulnerabilities in the Assassin game by GaudireGaudire Assassin game
- CVE-2026-56447MISP remote code execution via arbitrary rdkafka configuration pathmisp
- CVE-2026-56425MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injectionmisp
- CVE-2026-56423MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpointsmisp
- CVE-2026-56422MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fieldsmisp
- CVE-2026-11373Net::Statsite::Client versions through 1.1.0 for Perl allow metric injectionsJASEI Net::Statsite::Client
- CVE-2026-11746A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting reLY Central Dogma · com.linecorp.centraldogma:centraldogma-s…
High 83
- CVE-2026-10658Out-of-bounds access in Bluetooth ISO receive (`bt_iso_recv`) due to missing SDU-header length validationzephyrproject zephyr
- CVE-2026-10651Out-of-bounds read in Bluetooth Classic SDP attribute parsing (`bt_sdp_parse_attribute`)zephyrproject zephyr
- CVE-2026-41523vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Executionvllm-project vllm · vllm
- CVE-2026-54232vLLM: Dependency Confusion Vulnerability in vLLM Dockerfilevllm-project vllm · vllm
- CVE-2026-55409Filament: Disabled RichEditor field state can be used for XSSfilamentphp filament · filament/forms
- CVE-2026-48505Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submissionfilamentphp filament · filament/filament
- CVE-2026-48109MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad inputMessagePack-CSharp · MessagePack
- CVE-2026-48502MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflowsMessagePack-CSharp · MessagePack
- CVE-2026-48506MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depthMessagePack-CSharp · MessagePack
- CVE-2026-56324Capgo - Rate Limit Bypass via User-Controlled device_id ParameterCapgo
- CVE-2026-56323Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_selfCapgo
- CVE-2026-56314Capgo - Deleted Bundle Selection via Missing Deletion Filter in /updates EndpointCapgo
- CVE-2026-56280Cap-go - Privilege Inversion in Build Log Stream via SSE DisconnectCap-go capgo
- CVE-2026-56221Cap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.tsCap-go capgo
- CVE-2025-71358picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entitypicklescan
- CVE-2025-71344picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Functionpicklescan
- CVE-2025-71339Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length GadgetPicklescan
- CVE-2026-54281Nest: Middleware Bypass on Fastify via Trailing Slashnestjs nest · @nestjs/platform-fastify
- CVE-2026-39904Gophish 0.12.1 Denial of Service via Office Document Uploadgophish · github.com/gophish/gophish
- CVE-2026-55603http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`chimurai http-proxy-middleware · http-proxy-middleware
- CVE-2026-44271Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command Dell Wyse Management Suite
- CVE-2026-44272Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command Dell Wyse Management Suite
- CVE-2026-44274Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability.Dell Wyse Management Suite
- CVE-2026-53779WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windowswebp-sh webp_server_go
- CVE-2026-11834Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link RoutersTP-Link Systems Archer MR200 · TP Link Systems Archer MR… +3
- CVE-2026-54299Astro: Host-header full-read SSRF in core prerendered error-page fetch (prerenderedErrorPageFetch default + unvalidated createRequestFromNodeRequest URL)withastro astro · astro
- CVE-2026-50146Astro: Reflected XSS via unescaped slot namewithastro astro · astro
- CVE-2026-54293NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Readnltk
- CVE-2026-54290Hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcardhonojs hono · hono
- CVE-2026-53539Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of serviceKludex python-multipart · python-multipart
- CVE-2026-55388piscina: Prototype Pollution Gadget → RCE via inherited options.filenamepiscinajs piscina · piscina
- CVE-2026-54283Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSKludex starlette · starlette
- CVE-2026-42127Pre-authentication denial of service in the public dashboard query endpointGrafana Enterprise · Grafana OSS +1
- CVE-2026-48712protobufjs: Denial of service through unbounded Any expansion during JSON conversionprotobufjs protobuf.js · protobufjs
- CVE-2026-54271protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor namesprotobufjs-cli
- CVE-2026-53571Vite: `server.fs.deny` bypass on Windows alternate pathsvitejs vite · vite +1
- CVE-2026-56109ALSA Library < 1.2.16.1 Double-Free via parse_def() in conf.calsa-project alsa-lib
- CVE-2026-50171Angular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)angular · @angular/common
- CVE-2026-12249Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollmentadsys · Canonical Ubuntu 20.04 LTS +4
- CVE-2026-46417Angular: SSRF via Hostname Hijacking in @angular/platform-serverangular · @angular/platform-server
- CVE-2026-50168Angular: URL Parser Differential in @angular/platform-server leading to SSRF Allowlist Bypassangular · @angular/platform-server
- CVE-2026-50170Angular: Information Leak via Default Caching of Credentialed Requests in HttpTransferCacheangular · @angular/common
- CVE-2026-50556Angular: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSRangular · @angular/platform-server
- CVE-2026-50555Angular: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in @angular/platform-serverangular · @angular/platform-server
- CVE-2026-41049Caching of Authentication allows Authentication Bypass between users in qSnapperpresire qSnapper
- CVE-2026-54264Angular: Sensitive Header Leakage on Cross-Origin Redirects in Angular Service Workerangular · @angular/service-worker
- CVE-2026-54268Angular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)angular · @angular/common
- CVE-2026-41048Caching of Authentication allows Authentication Bypass in qSnapperpresire qSnapper
- CVE-2026-54267Angular Client Hydration DOM Clobbering & Response-Cache Poisoningangular · @angular/core
- CVE-2026-54266Angular: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoningangular · @angular/common
- CVE-2026-50178Angular: Remote Code Execution via JSDoc Hover Command Injection in VS Code Angular Language Service Extensionangular · Angular.ng-template
- CVE-2026-41046path traversal via `config` parameter in qSnapperpresire qSnapper
- CVE-2026-41045Weak polkit authentication check in qSnapperpresire qSnapper
- CVE-2026-49241Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extensionangular
- CVE-2026-9071IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource ConsumptionIBM WebSphere Application Server
- CVE-2026-9006IBM WebSphere Application Server is affected by server-side request forgeryIBM WebSphere Application Server
- CVE-2026-8646IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2026-10845IBM WebSphere Application Server is affected by an authentication bypass vulnerabilityIBM WebSphere Application Server
- CVE-2026-9072WebSphere Application Server Remote Code ExecutionIBM WebSphere Application Server
- CVE-2026-56104Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restorationchainlit
- CVE-2026-8858WebSphere Application Server Remote Code ExecutionIBM WebSphere Application Server
- CVE-2026-9029Stored XSS in the Geomap panel tile-layer attributionGrafana OSS · github.com/grafana/grafana
- CVE-2026-42129Path traversal in the Loki data source pluginGrafana OSS · github.com/grafana/grafana
- CVE-2026-56448Authenticated Path Traversal in AIL Framework Investigation Downloads Allows Arbitrary File Readail project ail framework
- CVE-2026-54100Windows-machine-config-operator: windows-machine-config-operator: ssh host key not verified enables credential theftRed Hat OpenShift for Windows Containers · Red Hat OpenShif…
- CVE-2026-54099Windows-machine-config-operator: windows-machine-config-operator: wicd csr extra-organization allows privilege escalation to system:mastersRed Hat OpenShift for Windows Containers · Red Hat OpenShif…
- CVE-2026-6653libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingGNOME libxml2
- CVE-2026-12602Incorrect permissions in ArubaSign by ArubaArubaSign
- CVE-2026-56446Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISPmisp
- CVE-2026-56424Broken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying modelsmisp
- CVE-2026-12581Digiwin｜EasyFlow .NET - Session FixationDigiwin EasyFlow .NET
- CVE-2023-45795Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xxPilz PMI v8xx · Pilz PASvisu
- CVE-2023-45796XSS vulnerability in Pilz PASvisu and PMI v8xxPilz PMI v8xx · Pilz PASvisu
- CVE-2025-4994Authentication Bypass for SafeLine SL6 and SL6+SafeLine SL6/SL6+
- CVE-2026-44914Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow ContentsApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2025-66336Apache Doris MCP Server: SQL injection leading the authentication bypassApache Software Foundation Apache Doris MCP Server · doris-…
- CVE-2026-8157Vitepos < 3.4.2 - Outlet Manager+ Privilege EscalationVitepos
- CVE-2026-6858Transbank Webpay < 1.14.0 - Unauthenticated Stored XSSTransbank Webpay
- CVE-2026-4259Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctionsultimate-woocommerce-auction-pro
- CVE-2026-6645Insecure Search Path Vulnerability in PaperCut Print Deploy Client for WindowsPaperCut Print Deploy
- CVE-2026-11745A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verLY Central Dogma · com.linecorp.centraldogma:centraldogma-s…
- CVE-2026-8918A permissive list of allowed inputs in ASUS Armoury Crate allows a local administrator to perform arbitrary memory read/write operations or ASUS Armoury Crate
- CVE-2025-66389GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fe
Medium, low and unrated 119
- CVE-2026-10645Out-of-bounds read in Zephyr ext2 directory entry traversal from a crafted filesystem imagezephyrproject zephyr
- CVE-2026-47155vLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processorsvllm-project vllm · vllm
- CVE-2026-54233vLLM: OOM Denial of Service via Audio Decompression Bombvllm-project vllm · vllm
- CVE-2026-54236vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic routervllm-project vllm · vllm
- CVE-2026-54235vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernelsvllm-project vllm · vllm
- CVE-2026-53923vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflowvllm-project vllm · vllm
- CVE-2026-48067Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fieldsfilamentphp filament · filament/tables +1
- CVE-2026-48167Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSSfilamentphp filament · filament/infolists +1
- CVE-2026-48500Filament: Unauthenticated temporary file upload on auth pagesfilamentphp filament · filament/filament
- CVE-2026-48166Filament: Timing-based user enumeration on login pagefilamentphp filament · filament/filament
- CVE-2026-44889WebOb: Location header normalization during redirect leads to open redirectPylons webob · webob
- CVE-2026-48509MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodiesMessagePack-CSharp · MessagePack
- CVE-2026-48510MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengthsMessagePack-CSharp · MessagePack
- CVE-2026-48511MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted mapsMessagePack-CSharp · MessagePack
- CVE-2026-48512MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcementMessagePack-CSharp · MessagePack
- CVE-2026-48513MessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcementMessagePack-CSharp · MessagePack
- CVE-2026-48514MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte lengthMessagePack-CSharp · MessagePack
- CVE-2026-48515MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensionsMessagePack-CSharp · MessagePack
- CVE-2026-48516MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settingsMessagePack-CSharp · MessagePack
- CVE-2026-56698Nuxt - Cross-Site Scripting via navigateTo open OptionNuxt
- CVE-2026-56697Nuxt - Open Redirect via Protocol-Relative Paths in reloadNuxtAppNuxt
- CVE-2026-56357n8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook Triggern8n
- CVE-2026-56348n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpointn8n
- CVE-2026-56326Nuxt - Server-Side Open Redirect via Path-Normalization Bypass in navigateToNuxt
- CVE-2026-56321Capgo - Missing Authentication Middleware on GET /private/role_bindings EndpointCapgo
- CVE-2026-56311Capgo - Unauthenticated Cross-Tenant Disclosure via get_current_plan_max_org RPCCapgo
- CVE-2026-56306Capgo - Subkey Enforcement Bypass via x-limited-key-id Header ParsingCapgo
- CVE-2026-56268Flowise - Cross-Workspace Information Disclosure via chatflows/apikey EndpointFlowise
- CVE-2026-56255Capgo - Denial of Service via Unlimited Demo App CreationCapgo
- CVE-2026-48517MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic argumentsMessagePack-CSharp · MessagePack
- CVE-2026-54911UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()ultrajson · ujson
- CVE-2026-44311Fabric.js: Improper escaping in fabric.Gradient colorStops leads to XSS in SVG serializationfabricjs fabric.js · fabric
- CVE-2026-41479Authlib OAuth 2.0 authorization endpoint open redirects to attacker-controlled redirect_uri on unsupported response_typeauthlib
- CVE-2026-54651pypdf: Possible infinite loop when processing threads/articles in writerpy-pdf pypdf · pypdf
- CVE-2026-49460pypdf: Inefficient decoding of FlateDecode PNG predictor streamspy-pdf pypdf · pypdf
- CVE-2026-49461pypdf: Possible large memory usage for form XObjects during text extractionpy-pdf pypdf · pypdf
- CVE-2026-54531pypdf: Possible infinite loop when processing outlines/bookmarks in writerpy-pdf pypdf · pypdf
- CVE-2026-54530pypdf: Possible infinite loop when retrieving fonts for layout-mode text extractionpy-pdf pypdf · pypdf
- CVE-2026-47242Net::IMAP: Command Injection via ID command argumentruby net-imap · net-imap
- CVE-2026-47240Net::IMAP: Command Injection via non-synchronizing literal in "raw" argumentruby net-imap · net-imap
- CVE-2026-47241Net::IMAP: Denial of Service via incomplete raw argument validationruby net-imap · net-imap
- CVE-2026-55599phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Accessphpseclib · phpseclib/phpseclib
- CVE-2026-10852Websphere Application Server is Affected By a Denial of ServiceIBM WebSphere Application Server
- CVE-2026-48931A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request.nodejs node
- CVE-2026-44273Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability.Dell Wyse Management Suite
- CVE-2026-53663React Router: `handleDocumentRequest` CSRF check covers `POST` only; PUT/PATCH/DELETE bypassremix-run react-router · @remix-run server-runtime +2
- CVE-2026-54298Astro: XSS via Unescaped Attribute Names in Spread Propswithastro astro · astro
- CVE-2026-54300@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN configwithastro astro · @astrojs/netlify
- CVE-2026-55443LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaderslangchain-ai langchain · langchain-ai langchain-anthropic +2
- CVE-2026-54288Hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`honojs hono · hono
- CVE-2026-54289Hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the resthonojs hono · hono
- CVE-2026-54286Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)honojs hono · hono
- CVE-2026-54287Hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Latticehonojs hono · hono
- CVE-2026-53540Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memoryKludex python-multipart · python-multipart
- CVE-2026-53537Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parametersKludex python-multipart · python-multipart
- CVE-2026-53538Python-Multipart: Semicolon treated as querystring field separator enables parameter smugglingKludex python-multipart · python-multipart
- CVE-2026-54285opentelemetry-js: Unbounded memory allocation in W3C Baggage propagationopen-telemetry opentelemetry-js · @opentelemetry/core
- CVE-2026-54282Starlette: Unvalidated request path concatenated into authority poisons request.url.hostnameKludex starlette · starlette
- CVE-2026-54273AIOHTTP: HTTP/1 Pipelined Requests Queue Without Limitaio-libs aiohttp · aiohttp
- CVE-2026-54280AIOHTTP: Payload Response Resources Are Not Closed After Mid-Body Disconnectaio-libs aiohttp · aiohttp
- CVE-2026-54278AIOHTTP: Unread Compressed Request Bodies Bypass client_max_size During Cleanupaio-libs aiohttp · aiohttp
- CVE-2026-54277AIOHTTP: C HTTP Parser Bypasses max_line_size for Fragmented Linesaio-libs aiohttp · aiohttp
- CVE-2026-54276AIOHTTP: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challengesaio-libs aiohttp · aiohttp
- CVE-2026-54275AIOHTTP: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connectionsaio-libs aiohttp · aiohttp
- CVE-2026-54274AIOHTTP: Incomplete websocket frame payloads bypass memory limitsaio-libs aiohttp · aiohttp
- CVE-2026-54279AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistenceaio-libs aiohttp · aiohttp
- CVE-2026-50269AIOHTTP: CRLF injection in multipart headersaio-libs aiohttp · aiohttp
- CVE-2026-54269protobufjs: Schema-derived names can shadow runtime-significant propertiesprotobufjs protobuf.js · protobufjs +1
- CVE-2026-54270protobufjs: Memory amplification from preserved unknown fields in binary decodeprotobufjs protobuf.js · protobufjs
- CVE-2026-49356Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/corebabel · @babel/core
- CVE-2026-55602http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypasschimurai http-proxy-middleware · http-proxy-middleware
- CVE-2026-53632NTLMv2 hash disclosure via UNC path handling on Windowsvitejs launch-editor · vitejs vite +4
- CVE-2026-50184Angular: Request Credential & Cache Policy Stripping in Angular Service Workerangular · @angular/service-worker
- CVE-2026-50169Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilitiesangular · @angular/service-worker
- CVE-2026-11994Akaunting 3.1.21 - Authenticated stored XSS in report description renderingAkaunting
- CVE-2026-11943Akaunting 3.1.21 - Authenticated stored XSS in document timelineAkaunting
- CVE-2026-54265Angular: Two-Way Property Binding Sanitization Bypass (XSS)angular · @angular/compiler
- CVE-2026-41047Information leak via “diff” methods in qSnapperpresire qSnapper
- CVE-2026-7253IBM Sterling File Gateway SQL InjectionIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2026-12479Path Traversal in keras-team/keraskeras-team/keras · keras
- CVE-2026-8934Cross-Project Information Leakage in Google App Engine UIGoogle Cloud Cloud Console UIs
- CVE-2026-52725Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)angular · @angular/core
- CVE-2026-11942Akaunting 3.1.21 - Stored XSS in delete confirmation modalAkaunting
- CVE-2026-50557Angular: Template and Attribute Namespace Sanitization Bypass (XSS)angular · @angular/core +1
- CVE-2026-53550js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliasesnodeca js-yaml · js-yaml
- CVE-2026-53655node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)isaacs node-tar · tar
- CVE-2026-9320IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesIBM WebSphere Application Server
- CVE-2024-51454IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observedIBM Engineering Workflow Management
- CVE-2023-33854Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pa…
- CVE-2026-9610Multiple Vulnerabilities in IBM DatacapIBM Datacap
- CVE-2026-8636Multiple Vulnerabilities in IBM DatacapIBM Datacap
- CVE-2026-8059Multiple Vulnerabilities in IBM DatacapIBM Datacap
- CVE-2026-11372IBM TRIRIGA Cross-Site Scripting VulnerabilityIBM TRIRIGA Application Platform
- CVE-2026-12549Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserverRed Hat Enterprise Linux
- CVE-2026-12725Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey repliesRed Hat Enterprise Linux · Red Hat OpenShift Container Plat…
- CVE-2026-8823User Manager can demote bot accounts to guest without bot-management permissionMattermost · github.com/mattermost/mattermost-server +3
- CVE-2026-6062IDOR in Jira plugin subscription edit endpointMattermost · github.com/mattermost/mattermost-server
- CVE-2026-6673Mattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud installMattermost · github.com/mattermost/mattermost-server
- CVE-2026-8074Improper Permission Check Allows User Manager to Deactivate Bot AccountsMattermost · github.com/mattermost/mattermost-server
- CVE-2026-9162Global session revocation does not invalidate active WebSocket connectionsMattermost · github.com/mattermost/mattermost-server
- CVE-2026-5139GitLab Plugin Allows Non-Admin Users to Modify Default Instance ConfigurationMattermost · github.com/mattermost/mattermost-server
- CVE-2025-33128IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observedIBM Engineering Workflow Management
- CVE-2025-2669Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pa…
- CVE-2026-10601Path traversal in the Tempo and Loki data source pluginsGrafana OSS · github.com/grafana/grafana
- CVE-2024-54178Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pa…
- CVE-2026-12888HTML injection in the Canarytoken Google Chat notificationThinkst Applied Research Canarytokens
- CVE-2026-56450AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Against Two-Factor Authentication Codesail project ail framework
- CVE-2026-7167Multiple vulnerabilities in the Assassin game by GaudireGaudire Assassin game
- CVE-2026-12580Digiwin｜EasyFlow .NET - Stored Cross-Site ScriptingDigiwin EasyFlow .NET
- CVE-2026-12863Open redirectpretix Venueless
- CVE-2026-12862XLSX formula injection in exportspretix Venueless
- CVE-2025-62198Apache Atlas: Stored XSS in Create Entity pageApache Software Foundation Apache Atlas · org.apache.atlas:…
- CVE-2026-44911Apache NiFi: Incorrect Authorization for Configuration Verification RequestsApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2026-44913Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQLApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2026-54665Apache NiFi: Missing Validation for Proxy Host HeadersApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2026-7859Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_mediaMotors
- CVE-2026-4110Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_listultimate-woocommerce-auction-pro
- CVE-2026-10530Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable TokenPie Register
- CVE-2026-11748A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm suLY Central Dogma · com.linecorp.centraldogma:centraldogma-s…