|
cve-2026-61816
|
|
zbateson/mail-mime-parser has uncontrolled resource co…
|
zbateson
|
mail-mime-parser
|
2026-09-24T17:55:11.439Z |
2026-09-24T18:11:49.772Z |
|
cve-2026-61815
|
|
zbateson/mail-mime-parser has CRLF header injection vi…
|
zbateson
|
mail-mime-parser
|
2026-09-24T17:53:32.355Z |
2026-10-05T15:32:42.078Z |
|
cve-2026-81508
|
|
ESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sin…
|
espressif
|
esp-idf
|
2026-09-24T17:52:54.643Z |
2026-09-24T18:07:30.991Z |
|
cve-2026-71540
|
|
Wazuh Manager cluster header parsing allows pre-authen…
|
wazuh
|
wazuh
|
2026-09-24T17:49:29.865Z |
2026-09-28T15:02:02.851Z |
|
cve-2026-61741
|
|
http4s-scala-xml has an XML External Entity (XXE) proc…
|
http4s
|
http4s-scala-xml
|
2026-09-24T17:48:09.628Z |
2026-09-29T03:02:07.912Z |
|
cve-2026-61811
|
|
Wazuh: Unbounded Recursion in os_xml `_getattributes()…
|
wazuh
|
wazuh
|
2026-09-24T17:48:01.629Z |
2026-09-24T18:02:33.090Z |
|
cve-2026-61604
|
|
ixo Blockchain x/bonds DID-resolved payer drain + x/en…
|
ixofoundation
|
ixo-blockchain
|
2026-09-24T17:45:20.684Z |
2026-09-24T18:04:39.737Z |
|
cve-2026-61732
|
|
Decepticon: Role-boundary forgery via ChatML special-t…
|
BitterSecurity
|
Decepticon
|
2026-09-24T17:40:51.248Z |
2026-09-24T18:00:43.383Z |
|
cve-2026-63645
|
|
OpenObserve: Unauthenticated /config/runtime endpoint …
|
openobserve
|
openobserve
|
2026-09-24T17:39:42.911Z |
2026-10-05T15:32:48.634Z |
|
cve-2026-54461
|
|
Habitica: Regex Injection / ReDoS in Member Search
|
HabitRPG
|
habitica
|
2026-09-24T17:37:59.280Z |
2026-09-28T14:57:19.854Z |
|
cve-2026-61788
|
|
@bytebase/dbhub's read-only mode does not prevent data…
|
bytebase
|
dbhub
|
2026-09-24T17:37:40.409Z |
2026-09-29T03:00:45.367Z |
|
cve-2026-61784
|
|
xhtml-purifier has HTML attribute-injection (sanitizer…
|
cstigler
|
node-xhtml-purifier
|
2026-09-24T17:35:57.096Z |
2026-09-24T18:03:05.576Z |
|
cve-2026-85056
|
|
ZITADEL: MFA bypass via session reuse in Login V2
|
zitadel
|
zitadel
|
2026-09-24T17:34:13.328Z |
2026-09-28T14:56:04.082Z |
|
cve-2026-61782
|
|
@rsdoctor/rspack-plugin has Unauthenticated HTTP API t…
|
web-infra-dev
|
rsdoctor
|
2026-09-24T17:32:39.856Z |
2026-09-29T02:59:36.042Z |
|
cve-2026-85057
|
|
ZITADEL: Actions V1 sandbox escape: host file read via…
|
zitadel
|
zitadel
|
2026-09-24T17:31:19.929Z |
2026-10-05T15:32:54.542Z |
|
cve-2026-97233
|
|
volotat Anagnorisis Media Filename PlaylistManager.js …
|
volotat
|
Anagnorisis
|
2026-09-24T17:30:11.486Z |
2026-10-05T15:33:00.926Z |
|
cve-2026-61742
|
|
DBHub HTTP transport DNS rebinding allows unauthentica…
|
bytebase
|
dbhub
|
2026-09-24T17:30:11.283Z |
2026-09-24T17:42:27.772Z |
|
cve-2026-57179
|
|
social-auth-core has a Session Fixation issue
|
python-social-auth
|
social-core
|
2026-09-24T17:27:00.152Z |
2026-09-24T18:11:46.002Z |
|
cve-2026-57178
|
|
social-auth-core: VK App backend accepts unsigned call…
|
python-social-auth
|
social-core
|
2026-09-24T17:25:47.225Z |
2026-09-28T17:34:38.454Z |
|
cve-2026-57177
|
|
social-auth-core has Login CSRF via Missing State Para…
|
python-social-auth
|
social-core
|
2026-09-24T17:24:11.391Z |
2026-10-05T15:33:08.902Z |
|
cve-2026-57176
|
|
social-auth-core Vulnerable to Account Takeover via Id…
|
python-social-auth
|
social-core
|
2026-09-24T17:22:54.850Z |
2026-09-29T02:58:21.006Z |
|
cve-2026-57175
|
|
social-auth-core has an Improper Authentication issue
|
python-social-auth
|
social-core
|
2026-09-24T17:11:49.925Z |
2026-10-05T15:33:16.020Z |
|
cve-2026-95985
|
8.8 (v3.1)
8.6 (v4.0)
|
Kiro IDE Allows Agentic Writes to Global Configuration…
|
Amazon
|
Kiro IDE
|
2026-09-24T17:07:47.783Z |
2026-09-24T17:24:09.224Z |
|
cve-2026-91119
|
|
Discourse: Encode action_code_who in mention URLs
|
discourse
|
discourse
|
2026-09-24T17:07:04.367Z |
2026-09-28T15:00:02.275Z |
|
cve-2026-91121
|
|
Discourse: Chat upload filenames rendered as raw HTML …
|
discourse
|
discourse
|
2026-09-24T17:05:20.530Z |
2026-09-24T17:27:43.580Z |
|
cve-2026-97232
|
|
volotat Anagnorisis page.html start_streaming path traversal
|
volotat
|
Anagnorisis
|
2026-09-24T17:00:14.817Z |
2026-09-24T17:28:32.507Z |
|
cve-2026-91120
|
|
Discourse: Stored HTML injection in video notification…
|
discourse
|
discourse
|
2026-09-24T17:00:05.331Z |
2026-09-24T17:24:59.169Z |
|
cve-2026-91132
|
|
Discourse: Wildcard iframe origin allowlist bypass via…
|
discourse
|
discourse
|
2026-09-24T16:57:43.082Z |
2026-09-29T02:57:34.925Z |
|
cve-2026-91122
|
|
Discourse: Chat MessageBus delivers read-restricted me…
|
discourse
|
discourse
|
2026-09-24T16:56:26.568Z |
2026-09-24T17:25:54.573Z |
|
cve-2026-56744
|
|
`@bsv/wallet-toolbox` / `-client` / `-mobile` don't ve…
|
bsv-blockchain
|
@bsv/wallet-toolbox
|
2026-09-24T16:56:12.791Z |
2026-09-28T17:17:16.996Z |