[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100134 | 20 Oct 2026 | CVSS 8.8 | Adobe Acrobat for EdgeAcrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-113710 | 20 Oct 2026 | CVSS 5.9 | ApostropheCMS: No Attempt Throttling on Authenticated Password-Change Endpoint Enables Unlimited Current-Password GuessingApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint verifies the current… | Fix |
| CVE-2026-113711 | 20 Oct 2026 | CVSS 7.5 | ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-exportApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import… | Fix |
| CVE-2026-113802 | 20 Oct 2026 | CVSS 9.8 | Wavlink WL-WN530BE1-AWavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary… | |
| CVE-2026-113666 | 20 Oct 2026 | CVSS 7.1 | ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of serviceApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with… | Fix |
| CVE-2026-113667 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS: CAPTCHA response token not URL-encodedApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of… | Fix |
| CVE-2026-113668 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS: :_id/locales REST route omits the public-API authorization gate its sibling read routes enforce (unauthenticated doc-existence + locale metadata disclosure)ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET /api/v1/<piece-type>/:_id/locales (and the… | Fix |
| CVE-2026-113669 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS: Cross-domain session token in URL confers session takeoverApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bridge, cross-host or… | Fix |
| CVE-2026-113671 | 20 Oct 2026 | CVSS 4.3 | ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRFApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with… | Fix |
| CVE-2026-113672 | 20 Oct 2026 | CVSS 9.9 | argoproj argo-cdArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server… | |
| CVE-2026-113659 | 20 Oct 2026 | CVSS 6.1 | ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated usersApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query… | Fix |
| CVE-2026-113660 | 20 Oct 2026 | CVSS 4.3 | ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft IdentifiersApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, ApostropheCMS’s exist-in-locale API allows an authenticated… | Fix |
| CVE-2026-113661 | 20 Oct 2026 | CVSS 5.4 | ApostropheCMS: Incomplete CVE-2026-53606: `meta http-equiv=refresh` `content` still ships `javascript:` / `data:` URLsApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to… | Fix |
| CVE-2026-113662 | 20 Oct 2026 | CVSS 5.4 | ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified documentApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with import… | Fix |
| CVE-2026-113664 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring testApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a… | Fix |
| CVE-2026-113665 | 20 Oct 2026 | CVSS 3.7 | ApostropheCMS: Missing Authorization on Notification PATCH/DELETE EndpointsApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the notification module exposes PATCH and DELETE REST endpoints… | Fix |
| CVE-2026-111756 | 20 Oct 2026 | CVSS 8.2 | follow-redirects array-form headers bypass cross-origin credential strippingfollow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1… | Fix |
| CVE-2026-112861 | 20 Oct 2026 | CVSS 6.3 | xnau webdesign Participants DatabaseAuthorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting… | |
| CVE-2026-113506 | 20 Oct 2026 | CVSS 9.9 | aaPanelA vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the… | |
| CVE-2026-113507 | 20 Oct 2026 | CVSS 5.3 | aaPanelA vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The… | |
| CVE-2026-105772 | 20 Oct 2026 | CVSS 9.1 | Google ADK TypeScript (@google/adk)Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated… | |
| CVE-2026-92539 | 20 Oct 2026 | CVSS 6.7 | Grafana EnterpriseA service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on… | |
| CVE-2026-28329 | 20 Oct 2026 | CVSS 6.4 | SolarWinds Observability Self-HostedSolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated… | Fix |
| CVE-2026-28330 | 20 Oct 2026 | CVSS 4.6 | SolarWinds Observability Self-HostedSolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated… | Fix |
| CVE-2026-28331 | 20 Oct 2026 | CVSS 4.4 | SolarWinds Patch ManagerSolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges. | Fix |
| CVE-2026-28328 | 20 Oct 2026 | CVSS 8.8 | SolarWinds Observability Self-HostedSolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and… | Fix |
| CVE-2026-113652 | 20 Oct 2026 | CVSS 5.6 | ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token… | Fix |
| CVE-2026-113653 | 20 Oct 2026 | CVSS 6.9 | ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous visitors when a developer… | Fix |
| CVE-2026-113654 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS sanitize-html: nonTextTags discard region ends early on an implied close, letting <noscript> content renderApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to… | Fix |
| CVE-2026-113655 | 20 Oct 2026 | CVSS 4.3 | ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorizationApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated editor with legitimate edit rights on a… | Fix |
| CVE-2026-113656 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoSApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages… | Fix |
| CVE-2026-113657 | 20 Oct 2026 | CVSS 3.7 | ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From… | Fix |
| CVE-2026-113658 | 20 Oct 2026 | CVSS 7.5 | ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directoryApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a… | Fix |
| CVE-2026-113648 | 20 Oct 2026 | CVSS 3.1 | ApostropheCMS: Missing Authentication in `cleanExport` RouteApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST… | Fix |
| CVE-2026-113649 | 20 Oct 2026 | CVSS 6.5 | ApostropheCMS: Import API bypasses publication roles for protected contentApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an… | Fix |
| CVE-2026-113650 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an <iframe> is not allowed and disallowedTagsMode is… | Fix |
| CVE-2026-113651 | 20 Oct 2026 | CVSS 3.3 | ApostropheCMS: Path traversal in uploadfsApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0… | Fix |
| CVE-2026-113505 | 20 Oct 2026 | CVSS 4.3 | aaPanelA flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of the component Download… | |
| CVE-2026-112957 | 20 Oct 2026 | CVSS 4.3 | ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged usersApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the getOne REST endpoint for pages does not apply viewRole… | Fix |
| CVE-2026-112958 | 20 Oct 2026 | CVSS 5.4 | ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute SerializationApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry an… | Fix |
| CVE-2026-94192 | 20 Oct 2026 | CVSS 8.5 | Eclipse Foundation Eclipse ThreadXA ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by… | |
| CVE-2026-94202 | 20 Oct 2026 | CVSS 4.8 | Eclipse Foundation Eclipse ThreadXThe Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memory-protected module supplies… | |
| CVE-2026-95107 | 20 Oct 2026 | CVSS 7.0 | Eclipse Foundation Eclipse ThreadXA ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that… | |
| CVE-2026-95108 | 20 Oct 2026 | CVSS 6.8 | Eclipse Foundation Eclipse ThreadXOne logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a… | |
| CVE-2026-95109 | 20 Oct 2026 | CVSS 8.5 | Eclipse Foundation Eclipse ThreadXThe Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands… | |
| CVE-2026-92843 | 20 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse ThreadX - NetX DuoA missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer underflow… | |
| CVE-2026-92853 | 20 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the… | |
| CVE-2026-93003 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header section. A header… | |
| CVE-2026-93475 | 20 Oct 2026 | CVSS 9.3 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers… | |
| CVE-2026-94018 | 20 Oct 2026 | CVSS 8.8 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT`… | |
| CVE-2026-94023 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse ThreadXA ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question about the pointer… | |
| CVE-2026-94024 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse ThreadXThe Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much of it as the module… | |
| CVE-2026-90800 | 20 Oct 2026 | CVSS 8.1 | Apache Software Foundation Apache CouchDBMissing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed… | |
| CVE-2026-91057 | 20 Oct 2026 | CVSS 4.6 | Eclipse Foundation Eclipse ThreadX - GUIX`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a… | |
| CVE-2026-86471 | 20 Oct 2026 | CVSS 9.3 | Apache Software Foundation Apache CouchDBAn unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell… | |
| CVE-2026-90797 | 20 Oct 2026 | CVSS 7.7 | Apache Software Foundation Apache CouchDBAn unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to cause a denial of… | |
| CVE-2026-90798 | 20 Oct 2026 | CVSS 0.6 | Apache Software Foundation Apache CouchDBA missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to… | |
| CVE-2026-90799 | 20 Oct 2026 | CVSS 1.3 | Apache Software Foundation Apache CouchDBUnsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service… | |
| CVE-2026-113681 | 20 Oct 2026 | CVSS 5.5 | AcademySoftwareFoundation OpenImageIOOpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that… | |
| CVE-2026-113682 | 20 Oct 2026 | CVSS 7.4 | networknt light-4jNetworknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers… | |
| CVE-2026-113683 | 20 Oct 2026 | CVSS 6.1 | jcrodriguez-dis moodle-mod_vplVPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject… | |
| CVE-2026-113703 | 20 Oct 2026 | CVSS 9.3 | giuseppe99barchetta SuggestArrSuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in… | |
| CVE-2026-113676 | 20 Oct 2026 | CVSS 4.3 | froxlorFroxlor from 0.10.0 before 2.3.15 contains an authorization bypass vulnerability in the Admins.get API command that allows resellers to read any… | |
| CVE-2026-113677 | 20 Oct 2026 | CVSS 5.4 | froxlorFroxlor from 0.10.0 before 2.3.15 contains a missing authorization vulnerability in the SubDomains.delete API command that allows authenticated… | |
| CVE-2026-113678 | 20 Oct 2026 | CVSS 9.9 | froxlorFroxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take… | |
| CVE-2026-113679 | 20 Oct 2026 | CVSS 7.0 | harfbuzzHarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string… | |
| CVE-2026-113680 | 20 Oct 2026 | CVSS 5.5 | harfbuzzHarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly shaper host imports… | |
| CVE-2026-113608 | 20 Oct 2026 | CVSS 5.3 | jleyva moodle-block_configurablereportsConfigurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in… | |
| CVE-2026-113609 | 20 Oct 2026 | CVSS 3.3 | Bandisoft BandizipBandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based… | |
| CVE-2026-113610 | 20 Oct 2026 | CVSS 5.4 | vatesfr xen-orchestraXen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allows low-privileged… | |
| CVE-2026-113611 | 20 Oct 2026 | CVSS 4.9 | outlineOutline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep receiving document contents… | |
| CVE-2026-113612 | 20 Oct 2026 | CVSS 5.4 | CodeWithCJ SparkyFitnessSparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' food variants via… | |
| CVE-2026-113613 | 20 Oct 2026 | CVSS 8.1 | FlexGetFlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by… | |
| CVE-2026-113603 | 20 Oct 2026 | CVSS 6.5 | x402-foundation @x402/extensionsThe x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module 2.16.0 through 2.28.0… | |
| CVE-2026-113604 | 20 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated… | |
| CVE-2026-113605 | 20 Oct 2026 | CVSS 7.2 | Stirling-Tools Stirling-PDFStirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass… | |
| CVE-2026-113606 | 20 Oct 2026 | CVSS 7.1 | Stirling-Tools Stirling-PDFStirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files… | |
| CVE-2026-113607 | 20 Oct 2026 | CVSS 6.5 | jleyva moodle-block_configurablereportsConfigurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted… | |
| CVE-2026-113599 | 20 Oct 2026 | CVSS 5.4 | modoboaModoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create auto-reply messages for… | |
| CVE-2026-113600 | 20 Oct 2026 | CVSS 5.4 | fatfreecrm fat_free_crmFat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other… | |
| CVE-2026-113601 | 20 Oct 2026 | CVSS 4.3 | usememos memosMemos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity API methods that allows… | |
| CVE-2026-113602 | 20 Oct 2026 | CVSS 5.3 | json-smartjson-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by… | |
| CVE-2026-113595 | 20 Oct 2026 | CVSS 4.3 | sharkordSharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to… | |
| CVE-2026-113596 | 20 Oct 2026 | CVSS 3.1 | webstudio-is webstudioWebstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the… | |
| CVE-2026-113597 | 20 Oct 2026 | CVSS 5.4 | blinkospace blinkoBlinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to read and… | |
| CVE-2026-113598 | 20 Oct 2026 | CVSS 4.3 | modoboaModoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via… | |
| CVE-2026-113594 | 20 Oct 2026 | CVSS 5.4 | sharkordSharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling… | |
| CVE-2026-112952 | 20 Oct 2026 | CVSS 4.3 | ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated userApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body { "slug"… | Fix |
| CVE-2026-112953 | 20 Oct 2026 | CVSS 6.0 | ApostropheCMS: Exposure of Sensitive Information via predictable export filenamesApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames… | Fix |
| CVE-2026-112954 | 20 Oct 2026 | CVSS 5.3 | ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST APIApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose… | Fix |
| CVE-2026-112955 | 20 Oct 2026 | CVSS 6.5 | ApostropheCMS: Import archives can exhaust server storage and deny serviceApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit… | Fix |
| CVE-2026-112956 | 20 Oct 2026 | CVSS 6.5 | ApostropheCMS: Archive duplicate continuation lets contributors overwrite published contentApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation accepts… | Fix |
| CVE-2026-113359 | 20 Oct 2026 | CVSS 4.3 | BaserowBaserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via… | |
| CVE-2026-112945 | 20 Oct 2026 | CVSS 2.1 | Vite: Cross origin script execution through Vite custom middlewareVite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custom middleware are… | Fix |
| CVE-2026-112946 | 20 Oct 2026 | CVSS 6.3 | Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machineVite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative… | Fix |
| CVE-2026-112947 | 20 Oct 2026 | CVSS 6.3 | Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be… | Fix |
| CVE-2026-112948 | 20 Oct 2026 | CVSS 6.5 | Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token fileVitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.deny because project servers… | Fix |
| CVE-2026-112949 | 20 Oct 2026 | CVSS 4.7 | Vitest: Code injection via unauthenticated manual mock registrationVitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticated… | Fix |
| CVE-2026-112950 | 20 Oct 2026 | CVSS 5.9 | Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fixVitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until 4.1.12 and 5.0.3, isFileLoadingAllowed and the… | Fix |
| CVE-2026-112951 | 20 Oct 2026 | CVSS 5.4 | ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefixApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb() or… | Fix |
Page 27 of 168