|
cve-2026-77086
|
9.4 (v4.0)
9.1 (v3.1)
|
SiYuan before v3.7.4 Path Traversal via packageName
|
siyuan-note
|
siyuan
|
2026-08-21T11:05:12.989Z |
2026-08-21T11:46:26.985Z |
|
cve-2026-77775
|
8.6 (v3.1)
7.7 (v4.0)
|
Headroom Proxy Sends Upstream Requests to a Client-Sup…
|
Headroom Labs
|
Headroom
|
2026-08-21T11:22:51.107Z |
2026-08-21T11:44:34.968Z |
|
cve-2026-70654
|
|
libvips: A well-crafted PPM image processed via a cust…
|
libvips
|
libvips
|
2026-08-20T21:07:25.540Z |
2026-08-21T11:35:46.559Z |
|
cve-2026-68921
|
|
DiceBear: SVG injection via the unescaped rotate optio…
|
dicebear
|
dicebear
|
2026-08-20T21:08:43.813Z |
2026-08-21T11:32:29.303Z |
|
cve-2026-59089
|
5.5 (v3.1)
|
Gimp: gimp: denial of service via integer overflow in …
|
|
|
2026-07-06T19:38:16.905Z |
2026-08-21T11:32:15.707Z |
|
cve-2026-59088
|
5.5 (v3.1)
|
Gimp: gimp: denial of service via signed integer overf…
|
|
|
2026-08-10T10:53:03.754Z |
2026-08-21T11:32:14.438Z |
|
cve-2026-14544
|
9.8 (v3.1)
|
Hplip: incomplete fix for cve-2026-8631
|
HP
|
HPLIP
|
2026-07-03T07:26:00.402Z |
2026-08-21T11:31:34.139Z |
|
cve-2026-67448
|
|
Mailpit: WebSocket origin check bypass via percent-enc…
|
axllent
|
mailpit
|
2026-08-20T21:29:06.185Z |
2026-08-21T11:31:27.439Z |
|
cve-2026-55489
|
|
BigBlueButton: IDOR on BBB through /api/graphql via PO…
|
bigbluebutton
|
bigbluebutton
|
2026-08-20T21:36:35.127Z |
2026-08-21T11:23:38.257Z |
|
cve-2026-77085
|
6.3 (v4.0)
|
n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool
|
n8n-io
|
n8n
|
2026-08-20T11:21:15.741Z |
2026-08-21T11:21:24.116Z |
|
cve-2026-77083
|
6 (v4.0)
|
n8n before 1.123.69 Code Node Sandbox Escape via Funct…
|
n8n-io
|
n8n
|
2026-08-20T11:21:14.377Z |
2026-08-21T11:21:22.795Z |
|
cve-2026-77081
|
5.1 (v4.0)
|
n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node
|
n8n-io
|
n8n
|
2026-08-20T11:21:13.006Z |
2026-08-21T11:21:21.502Z |
|
cve-2026-77080
|
8.7 (v4.0)
|
n8n before 1.123.69 Arbitrary File Read and Write via …
|
n8n-io
|
n8n
|
2026-08-20T11:21:12.357Z |
2026-08-21T11:21:20.831Z |
|
cve-2026-77077
|
7.2 (v4.0)
|
n8n before 1.123.69 Remote Code Execution via EventEmi…
|
n8n-io
|
n8n
|
2026-08-20T11:21:10.939Z |
2026-08-21T11:21:19.488Z |
|
cve-2026-77075
|
8.4 (v4.0)
|
n8n before 1.123.69 Expression Injection via Resource …
|
n8n-io
|
n8n
|
2026-08-20T11:21:09.583Z |
2026-08-21T11:21:18.192Z |
|
cve-2026-77074
|
6 (v4.0)
|
n8n before 1.123.69 SSRF via Edit Image Node
|
n8n-io
|
n8n
|
2026-08-20T11:21:08.910Z |
2026-08-21T11:21:17.551Z |
|
cve-2026-77072
|
8.4 (v4.0)
|
n8n before 1.123.69 Stored XSS via Form Completion Page
|
n8n-io
|
n8n
|
2026-08-20T11:21:07.588Z |
2026-08-21T11:21:16.263Z |
|
cve-2026-77070
|
7.1 (v4.0)
|
n8n before 1.123.69 NoSQL Injection via MongoDB Node
|
n8n-io
|
n8n
|
2026-08-20T11:21:06.262Z |
2026-08-21T11:21:14.972Z |
|
cve-2026-77069
|
2.3 (v4.0)
|
n8n before 1.123.69 SSRF Protection Bypass via OAuth2
|
n8n-io
|
n8n
|
2026-08-20T11:21:05.599Z |
2026-08-21T11:21:14.301Z |
|
cve-2026-76850
|
9.3 (v4.0)
9.8 (v3.1)
|
LMDeploy Remote Code Execution via Unsafe Pickle Deser…
|
InternLM
|
lmdeploy
|
2026-08-19T21:41:28.068Z |
2026-08-21T11:21:12.965Z |
|
cve-2026-76641
|
8.7 (v4.0)
7.5 (v3.1)
|
Expat Out-of-Bounds Read via dtdCopy
|
libexpat
|
libexpat
|
2026-08-20T17:31:10.610Z |
2026-08-21T11:21:12.314Z |
|
cve-2026-76239
|
5.3 (v4.0)
6.3 (v3.1)
|
Stigmem before 0.9.0a11 SSRF via unvalidated webhook d…
|
eidetic-labs
|
stigmem-node
|
2026-08-19T14:02:17.336Z |
2026-08-21T11:21:10.397Z |
|
cve-2026-76237
|
8.6 (v4.0)
|
stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
|
eidetic-labs
|
stigmem-node
|
2026-08-19T14:02:15.899Z |
2026-08-21T11:21:09.073Z |
|
cve-2026-76234
|
8.7 (v4.0)
7.5 (v3.1)
|
libcrux before 0.0.6 Cryptographic Implementation Bug Fixes
|
celabshq
|
libcrux-ecdh
|
2026-08-19T14:02:14.481Z |
2026-08-21T11:21:07.741Z |
|
cve-2026-76226
|
6.8 (v4.0)
6.3 (v3.1)
|
Renovate 43.65.0 through 43.102.11 Remote Code Executi…
|
renovatebot
|
renovate
|
2026-08-19T14:02:08.689Z |
2026-08-21T11:21:07.057Z |
|
cve-2026-76214
|
9.1 (v4.0)
7.4 (v3.1)
|
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
|
thorsten
|
phpMyFAQ
|
2026-08-19T14:01:59.917Z |
2026-08-21T11:21:06.337Z |
|
cve-2026-75898
|
8.4 (v4.0)
8.5 (v3.1)
|
RAGFlow < 0.26.3 - Server-Side Request Forgery via Age…
|
infiniflow
|
ragflow
|
2026-08-18T14:24:06.089Z |
2026-08-21T11:21:04.965Z |
|
cve-2026-75583
|
2.3 (v4.0)
3.5 (v3.1)
|
keeper.sh Calendar version prior to 2.18.14 SSRF Guard…
|
ridafkih
|
keeper.sh
|
2026-08-19T16:35:53.999Z |
2026-08-21T11:21:04.300Z |
|
cve-2026-75148
|
6.9 (v4.0)
6.1 (v3.1)
|
cgltf 1.15 Integer Overflow via cgltf_validate() Acces…
|
jkuhlmann
|
cgltf
|
2026-08-19T13:37:42.321Z |
2026-08-21T11:21:02.923Z |
|
cve-2026-75140
|
8.7 (v4.0)
7.5 (v3.1)
|
jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
|
jhy
|
soup
|
2026-08-20T15:56:50.377Z |
2026-08-21T11:21:02.259Z |