[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102333 | 28 Sep 2026 | CVSS 6.1 | cle-b httpdbghttpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers… | |
| CVE-2026-102334 | 28 Sep 2026 | CVSS 7.4 | NginxProxyManager nginx-proxy-managerNginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password… | |
| CVE-2026-101260 | 28 Sep 2026 | CVSS 9.1 | Ziroom ZHOME A0101A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of the file… | |
| CVE-2026-102281 | 28 Sep 2026 | CVSS 7.5 | Nest: Remote process termination via a deeply nested microservice message patternNest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object… | Fix |
| CVE-2026-102296 | 28 Sep 2026 | CVSS 6.5 | zoneminderZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or… | |
| CVE-2026-102297 | 28 Sep 2026 | CVSS 4.3 | zoneminderZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view… | |
| CVE-2026-101188 | 28 Sep 2026 | CVSS 8.3 | Netcore POWER13A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwd_set of the file… | |
| CVE-2026-101202 | 28 Sep 2026 | CVSS 6.3 | FastStone Image ViewerA flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing… | |
| CVE-2026-101203 | 28 Sep 2026 | CVSS 6.3 | FastStone Image ViewerA vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder… | |
| CVE-2026-101204 | 28 Sep 2026 | CVSS 6.3 | FastStone Image ViewerA vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image… | |
| CVE-2026-101205 | 28 Sep 2026 | CVSS 6.3 | FastStone Image ViewerA vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation… | |
| CVE-2026-101091 | 28 Sep 2026 | CVSS 7.1 | siyuan-note siyuanSiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft… | |
| CVE-2026-101092 | 28 Sep 2026 | CVSS 5.3 | siyuan-note siyuanSiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish readers to retrieve image… | |
| CVE-2026-101093 | 28 Sep 2026 | CVSS 5.4 | CotontiCotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without… | |
| CVE-2024-58386 | 28 Sep 2026 | CVSS 6.5 | zoneminderZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary… | |
| CVE-2024-42002 | 28 Sep 2026 | CVSS 8.4 | Open Source Robotics Foundation Robot Operating System 2 (ROS 2)A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2… | |
| CVE-2026-97027 | 28 Sep 2026 | CVSS 3.6 | Red Hat Enterprise Linux 10Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry (.desktop) and D-Bus Service… | |
| CVE-2026-84895 | 28 Sep 2026 | CVSS 7.3 | Facebook proxygenIn proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base… | |
| CVE-2026-91095 | 28 Sep 2026 | CVSS 5.3 | Facebook proxygenIn proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs… | |
| CVE-2026-91096 | 28 Sep 2026 | CVSS 7.5 | Facebook proxygenIn proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before… | |
| CVE-2026-97025 | 28 Sep 2026 | CVSS 3.2 | Red Hat Enterprise Linux 10Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cache directory, allowing other… | |
| CVE-2026-97026 | 28 Sep 2026 | CVSS 3.9 | Red Hat Enterprise Linux 10Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a… | |
| CVE-2026-18413 | 28 Sep 2026 | CVSS 7.8 | zephyrproject zephyrThe ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in… | |
| CVE-2026-18414 | 28 Sep 2026 | CVSS 7.8 | zephyrproject zephyrThe ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size field of struct adc_sequence in… | |
| CVE-2026-18415 | 28 Sep 2026 | CVSS 6.3 | zephyrproject zephyrieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte transmit buffer… | |
| CVE-2026-18416 | 28 Sep 2026 | CVSS 3.7 | zephyrproject zephyrThe CoAP link-format helper match_path_uri() in subsys/net/lib/coap/coap_link_format.c compares a registered resource path against the URI carried in… | |
| CVE-2026-102276 | 28 Sep 2026 | CVSS 7.5 | brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustionThe brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted… | Fix |
| CVE-2026-102277 | 28 Sep 2026 | CVSS 5.3 | brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of serviceThe brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand… | Fix |
| CVE-2026-102278 | 28 Sep 2026 | CVSS 7.5 | brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustionThe brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply… | Fix |
| CVE-2026-102279 | 28 Sep 2026 | CVSS 3.1 | Laravel: XSS in Debug Page InformationLaravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled… | Fix |
| CVE-2026-16513 | 28 Sep 2026 | CVSS 7.8 | zephyrproject zephyrThe userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c (subsys/rtio/rtio_handlers.c before v4.3.0) validated the… | |
| CVE-2026-102271 | 28 Sep 2026 | CVSS 7.4 | PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guardPyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because… | Fix |
| CVE-2026-102272 | 28 Sep 2026 | CVSS 7.4 | PyJWT BOM BypassPyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt/algorithms.py is affected… | Fix |
| CVE-2026-102273 | 28 Sep 2026 | CVSS 7.4 | PyJWT accepts public JWK containers as HMAC secretsPyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because HMAC key… | Fix |
| CVE-2026-102274 | 28 Sep 2026 | CVSS 7.5 | PyJWT: Malformed RSA JWK aborts parsing of an entire JWK SetPyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch the plain ValueError raised for… | Fix |
| CVE-2026-102275 | 28 Sep 2026 | CVSS 8.2 | PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusionPyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in jwt/algorithms.py is affected… | Fix |
| CVE-2026-102265 | 28 Sep 2026 | CVSS 5.3 | PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token headerPyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWS._load in jwt/api_jws.py is affected because parser… | Fix |
| CVE-2026-102266 | 28 Sep 2026 | CVSS 9.1 | PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validationPyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification… | Fix |
| CVE-2026-102267 | 28 Sep 2026 | CVSS 9.1 | PyJWT: PyJWKClient follows redirects when fetching JWKSPyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not… | Fix |
| CVE-2026-102268 | 28 Sep 2026 | CVSS 9.1 | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guardPyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does… | Fix |
| CVE-2026-102269 | 28 Sep 2026 | CVSS 5.4 | PyJWT: Non-canonical signature segments enable raw-token revocation bypassPyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding… | Fix |
| CVE-2026-102270 | 28 Sep 2026 | CVSS 4.9 | PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT is_pem_format is affected because lazy PEM regular expression… | Fix |
| CVE-2026-101916 | 28 Sep 2026 | CVSS 7.4 | @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, getAuthContext does… | Fix |
| CVE-2026-101917 | 28 Sep 2026 | CVSS 7.5 | PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affected because unknown kid misses… | Fix |
| CVE-2026-101918 | 28 Sep 2026 | CVSS 7.5 | PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.get_signing_key_from_jwt is affected… | Fix |
| CVE-2026-102005 | 28 Sep 2026 | CVSS 5.5 | Wind River Inc VxWorks 7Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service… | |
| CVE-2026-102006 | 28 Sep 2026 | CVSS 5.5 | Wind River Systems Inc VxWorks 7In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release… | |
| CVE-2026-101144 | 28 Sep 2026 | CVSS 6.3 | Eleveo Call Recording SoftwareA vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the… | |
| CVE-2026-101145 | 28 Sep 2026 | CVSS 4.3 | Eleveo Call Recording SoftwareA vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do… | |
| CVE-2026-101146 | 28 Sep 2026 | CVSS 4.3 | Eleveo Quality ManagementA security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file… | |
| CVE-2026-101187 | 28 Sep 2026 | CVSS 9.1 | Ziroom ZHOME A0101A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of the file… | |
| CVE-2026-100371 | 28 Sep 2026 | CVSS 8.7 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, an authorization guard to… | |
| CVE-2026-100392 | 28 Sep 2026 | CVSS 7.0 | InvoicePlaneInvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. In version 1.7.2, Users::form() performs no… | |
| CVE-2026-100370 | 28 Sep 2026 | CVSS 4.7 | rhukster dom-sanitizerDOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is responsible for rejecting dangerous… | |
| CVE-2026-86950 | 28 Sep 2026 | CVSS 8.8 | Exploited out-of-bounds write in Apple iOS, iPadOS and macOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1… | ExploitedFix |
| CVE-2026-87741 | 28 Sep 2026 | CVSS 8.8 | Brainstorm Force ConvertPlusThe ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 3.6.3 via the style… | |
| CVE-2026-93355 | 28 Sep 2026 | CVSS 8.1 | BerriAI litellmLiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to… | |
| CVE-2026-96760 | 28 Sep 2026 | CVSS 9.8 | AuthlibAuthlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON… | |
| CVE-2026-101914 | 28 Sep 2026 | CVSS 6.5 | @grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path (method… | Fix |
| CVE-2026-101915 | 28 Sep 2026 | CVSS 3.7 | @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application… | Fix |
| CVE-2026-102004 | 28 Sep 2026 | CVSS 7.8 | Wind River Systems Inc VxWorks 7Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in… | |
| CVE-2026-101141 | 28 Sep 2026 | CVSS 3.5 | Eleveo Call Recording SoftwareA flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play… | |
| CVE-2026-101142 | 28 Sep 2026 | CVSS 6.3 | Eleveo Quality ManagementA vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file… | |
| CVE-2026-101143 | 28 Sep 2026 | CVSS 4.3 | Eleveo Quality ManagementA vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file… | |
| CVE-2026-84894 | 28 Sep 2026 | CVSS 7.5 | Meta Platforms, Inc moxygenIn moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the… | |
| CVE-2026-97023 | 28 Sep 2026 | CVSS 7.1 | Red Hat Enterprise Linux 10A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause… | |
| CVE-2026-97686 | 28 Sep 2026 | CVSS 5.5 | Wind River VxWorks 7Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel… | |
| CVE-2026-13018 | 28 Sep 2026 | CVSS 4.3 | Google ChromeInsufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of… | |
| CVE-2026-102010 | 28 Sep 2026 | CVSS 7.0 | Red Hat Hardened ImagesA flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates… | |
| CVE-2026-101109 | 28 Sep 2026 | CVSS 5.3 | ordasoft.com Vehicle Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view)… | |
| CVE-2026-101110 | 28 Sep 2026 | CVSS 9.8 | ordasoft.com Book Library (Free) extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the… | |
| CVE-2026-101111 | 28 Sep 2026 | CVSS 6.1 | ordasoft.com Book Library (Free) extension for JoomlaJoomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template… | |
| CVE-2026-101131 | 28 Sep 2026 | CVSS 3.3 | deepseek-ai deepseek-harnessA vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file… | |
| CVE-2026-101132 | 28 Sep 2026 | CVSS 3.1 | deepseek-harnessA security flaw has been discovered in DeepSeek deepseek-harness up to 0.1.7-rc.2. The affected element is the function loadProfile of the file… | |
| CVE-2026-101139 | 28 Sep 2026 | CVSS 2.7 | Webkul BagistoA vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file… | |
| CVE-2026-100752 | 28 Sep 2026 | CVSS 9.3 | ordasoft.com Real Estate Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER… | |
| CVE-2026-100753 | 28 Sep 2026 | CVSS 5.3 | ordasoft.com Real Estate Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a… | |
| CVE-2026-101105 | 28 Sep 2026 | CVSS 6.3 | code-projects Matrimonial SystemA vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file… | |
| CVE-2026-101108 | 28 Sep 2026 | CVSS 9.3 | ordasoft.com Vehicle Manager (Free) extension for JoomlaJoomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and… | |
| CVE-2026-96740 | 28 Sep 2026 | CVSS 6.5 | Red Hat StreamsHub Console for Apache Kafka®A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the Console custom resource are copied into… | |
| CVE-2026-75600 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of… | |
| CVE-2026-54710 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the superfecta… | |
| CVE-2026-55156 | 28 Sep 2026 | CVSS 5.3 | ooples token-optimizer-mcpToken Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients… | |
| CVE-2026-55157 | 28 Sep 2026 | CVSS 8.4 | ooples token-optimizer-mcpToken Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients… | |
| CVE-2026-55160 | 28 Sep 2026 | CVSS 7.6 | stringer-rss stringerStringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery (SSRF) vulnerability allows… | |
| CVE-2026-49994 | 28 Sep 2026 | CVSS 9.1 | dannymcc bluehoodBluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML page handlers enforced… | |
| CVE-2026-54674 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel (UCP) are able to execute… | |
| CVE-2026-54675 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion… | |
| CVE-2026-54708 | 28 Sep 2026 | CVSS 8.8 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows… | |
| CVE-2026-101912 | 28 Sep 2026 | CVSS 6.3 | ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its rangeip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet… | Fix |
| CVE-2026-101913 | 28 Sep 2026 | CVSS 6.3 | ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hostsip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in… | Fix |
| CVE-2026-45562 | 28 Sep 2026 | CVSS 7.2 | FreePBX security-reportingFreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module contains a critical security flaw that… | |
| CVE-2026-101910 | 28 Sep 2026 | CVSS 6.9 | ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypassip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate… | Fix |
| CVE-2026-101911 | 28 Sep 2026 | CVSS 6.3 | ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the processip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor… | Fix |
| CVE-2026-101906 | 28 Sep 2026 | CVSS 8.2 | Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect LocationAxios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot… | Fix |
| CVE-2026-101907 | 28 Sep 2026 | CVSS 7.0 | Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRFAxios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect… | Fix |
| CVE-2026-101908 | 28 Sep 2026 | CVSS 6.9 | Axios: Prototype pollution gadget in fetch adapter can alter outbound requestsAxios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized… | Fix |
| CVE-2026-101909 | 28 Sep 2026 | CVSS 8.3 | Axios: Prototype Pollution Gadget in axios toFormData OptionsAxios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited… | Fix |
| CVE-2026-101900 | 28 Sep 2026 | CVSS 6.9 | Axios: Fetch Adapter Header Injection via Inherited FormData getHeadersAxios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append… | Fix |
| CVE-2026-101901 | 28 Sep 2026 | CVSS 8.2 | Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session InitializationAxios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling… | Fix |
Page 144 of 168