[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111804 | 21 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache Traffic ServerApache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric… | |
| CVE-2026-111813 | 21 Oct 2026 | CVSS 10.0 | Apache Software Foundation Apache Traffic ServerApache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned)… | |
| CVE-2026-111816 | 21 Oct 2026 | CVSS 9.3 | Apache Software Foundation Apache Traffic ServerApache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked… | |
| CVE-2026-113461 | 21 Oct 2026 | CVSS 5.2 | Checkmk GmbH CheckmkLocal privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed… | |
| CVE-2026-110803 | 21 Oct 2026 | CVSS 8.7 | vaadin frameworkVaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the block that releases the… | |
| CVE-2026-111401 | 21 Oct 2026 | CVSS 6.5 | Tailored Media Tailored ToolsCross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects… | |
| CVE-2026-105942 | 21 Oct 2026 | CVSS 7.7 | Apache Software Foundation Apache PulsarWhen a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broker is designed to authorize… | |
| CVE-2026-105944 | 21 Oct 2026 | CVSS 10.0 | Apache Software Foundation Apache Pulsar ManagerApache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured… | |
| CVE-2026-105945 | 21 Oct 2026 | CVSS 7.7 | Apache Software Foundation Apache PulsarThe Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage… | |
| CVE-2026-107588 | 21 Oct 2026 | CVSS 8.4 | vaadinVaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an… | |
| CVE-2026-105934 | 21 Oct 2026 | CVSS 7.2 | Apache Software Foundation Apache PulsarThe Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE… | |
| CVE-2026-105935 | 21 Oct 2026 | CVSS 4.9 | Apache Software Foundation Apache PulsarThe Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's… | |
| CVE-2026-105936 | 21 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache PulsarThe Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the… | |
| CVE-2026-105937 | 21 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache PulsarApache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic… | |
| CVE-2026-105938 | 21 Oct 2026 | CVSS 2.3 | Apache Software Foundation Apache PulsarApache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication mode, which requires a… | |
| CVE-2026-105931 | 21 Oct 2026 | CVSS 2.3 | Apache Software Foundation Apache PulsarThe Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and authorization are… | |
| CVE-2026-105932 | 21 Oct 2026 | CVSS 2.3 | Apache Software Foundation Apache PulsarThe Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent… | |
| CVE-2026-105933 | 21 Oct 2026 | CVSS 2.3 | Apache Software Foundation Apache PulsarApache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the encryption_required… | |
| CVE-2025-55702 | 21 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache Traffic ServerWhen a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body… | |
| CVE-2025-31699 | 21 Oct 2026 | CVSS 8.9 | Apache Software Foundation Apache Traffic ServerApache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but… | |
| CVE-2026-92205 | 21 Oct 2026 | CVSS 6.1 | BusyBoxBusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary… | |
| CVE-2026-92206 | 21 Oct 2026 | CVSS 8.8 | CrewAICrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… | |
| CVE-2026-92207 | 21 Oct 2026 | CVSS 8.8 | MindsDBMindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… | |
| CVE-2026-92208 | 21 Oct 2026 | CVSS 8.8 | NoMachineNoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… | |
| CVE-2026-92209 | 21 Oct 2026 | CVSS 7.8 | NoMachineNoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on… | |
| CVE-2026-92210 | 21 Oct 2026 | CVSS 7.2 | NoMachineNoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary… | |
| CVE-2026-89035 | 21 Oct 2026 | CVSS 7.4 | MikroTik RouterOSMikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication… | |
| CVE-2026-92183 | 21 Oct 2026 | CVSS 7.8 | GIMPGIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… | |
| CVE-2026-92202 | 21 Oct 2026 | CVSS 7.8 | Luxion KeyShotLuxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… | |
| CVE-2026-92203 | 21 Oct 2026 | CVSS 7.7 | AirbyteAirbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows… | |
| CVE-2026-92204 | 21 Oct 2026 | CVSS 7.7 | AirbyteAirbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows… | |
| CVE-2026-114493 | 21 Oct 2026 | CVSS 8.6 | LocalAILocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial… | |
| CVE-2026-114264 | 21 Oct 2026 | CVSS 4.7 | ProjectWorlds Advanced Library Management SystemA security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file… | |
| CVE-2026-114265 | 21 Oct 2026 | CVSS 6.3 | ProjectWorlds Advanced Library Management SystemA weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli_query of the file… | |
| CVE-2026-114491 | 21 Oct 2026 | CVSS 5.3 | bpampuch pdfmakepdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG content, allowing attackers to read… | |
| CVE-2026-114492 | 21 Oct 2026 | CVSS 6.5 | flipped-aurora gin-vue-admingin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary… | |
| CVE-2026-114132 | 21 Oct 2026 | CVSS 6.3 | Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitiveNuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by default while Nitro matches… | Fix |
| CVE-2026-114133 | 21 Oct 2026 | CVSS 5.4 | Nuxt server islands render `useHeadSafe` input without sanitisationNuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer serializes raw useHeadSafe entry… | Fix |
| CVE-2026-114176 | 21 Oct 2026 | CVSS 4.3 | DigitalME eRoomMissing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-114262 | 21 Oct 2026 | CVSS 7.3 | file-management-systemA vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file… | |
| CVE-2026-114263 | 21 Oct 2026 | CVSS 7.3 | ProjectWorlds Advanced Library Management SystemA vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file… | |
| CVE-2026-114126 | 21 Oct 2026 | CVSS 8.7 | Storybook dev server vulnerable to code injection from the local networkStorybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and… | Fix |
| CVE-2026-114127 | 21 Oct 2026 | CVSS 2.3 | Astro: Arbitrary CSS injection in Astro View TransitionsAstro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string… | Fix |
| CVE-2026-114128 | 21 Oct 2026 | CVSS 6.5 | Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX renderingAstro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats string children of script and… | Fix |
| CVE-2026-114129 | 21 Oct 2026 | CVSS 6.2 | stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of servicestream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0… | Fix |
| CVE-2026-114130 | 21 Oct 2026 | CVSS 2.3 | Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabledNuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages… | Fix |
| CVE-2026-114131 | 21 Oct 2026 | CVSS 6.5 | Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routesNuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rule keys with the raw request… | Fix |
| CVE-2026-112868 | 21 Oct 2026 | CVSS 4.3 | H5PAuthorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-114124 | 21 Oct 2026 | CVSS 3.9 | Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometryElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3… | Fix |
| CVE-2026-114125 | 21 Oct 2026 | CVSS 8.6 | Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitesStorybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and… | Fix |
| CVE-2026-105930 | 21 Oct 2026 | CVSS 6.0 | Apache Software Foundation Apache PulsarWhen package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package stored in the Pulsar Packages… | |
| CVE-2026-110744 | 21 Oct 2026 | CVSS 7.2 | Red Hat Multicluster Global HubA flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC)… | |
| CVE-2026-111183 | 21 Oct 2026 | CVSS 9.8 | GStreamerGStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… | |
| CVE-2026-111184 | 21 Oct 2026 | CVSS 7.8 | NoMachineNoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate… | |
| CVE-2026-105869 | 21 Oct 2026 | CVSS 9.2 | Apache Software Foundation Apache PulsarApache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Token (JWT). The provider… | |
| CVE-2026-105926 | 21 Oct 2026 | CVSS 5.3 | Apache Software Foundation Apache PulsarThe Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and… | |
| CVE-2026-105927 | 21 Oct 2026 | CVSS 2.3 | Apache Software Foundation Apache PulsarThe Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query parameters of the consumer endpoint… | |
| CVE-2026-76495 | 21 Oct 2026 | CVSS 7.8 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76496 | 21 Oct 2026 | CVSS 7.0 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76497 | 21 Oct 2026 | CVSS 6.6 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76505 | 21 Oct 2026 | CVSS 7.5 | Cisco IOS XR SoftwareA vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services… | |
| CVE-2026-76524 | 21 Oct 2026 | CVSS 7.8 | Cisco Open Source Snort3A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low… | |
| CVE-2026-76487 | 21 Oct 2026 | CVSS 5.3 | Cisco Unified Communications ManagerA vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM… | |
| CVE-2026-76489 | 21 Oct 2026 | CVSS 5.8 | Cisco Open Source Snort3Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated… | |
| CVE-2026-76490 | 21 Oct 2026 | CVSS 8.6 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76491 | 21 Oct 2026 | CVSS 7.5 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76492 | 21 Oct 2026 | CVSS 7.5 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76493 | 21 Oct 2026 | CVSS 7.5 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76494 | 21 Oct 2026 | CVSS 7.8 | Cisco TelePresence Video Communication Server (VCS) ExpresswayAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted… | |
| CVE-2026-76474 | 21 Oct 2026 | CVSS 9.8 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76475 | 21 Oct 2026 | CVSS 9.3 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76476 | 21 Oct 2026 | CVSS 8.8 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76477 | 21 Oct 2026 | CVSS 8.8 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76478 | 21 Oct 2026 | CVSS 8.8 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76479 | 21 Oct 2026 | CVSS 7.8 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76481 | 21 Oct 2026 | CVSS 7.5 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-76435 | 21 Oct 2026 | CVSS 5.3 | Cisco TelePresence Video Communication Server (VCS) ExpresswayA vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device… | |
| CVE-2026-76445 | 21 Oct 2026 | CVSS 5.3 | Cisco Open Source Snort3Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause… | |
| CVE-2026-76462 | 21 Oct 2026 | CVSS 5.5 | Cisco Secure ClientA vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an… | |
| CVE-2026-76466 | 21 Oct 2026 | CVSS 9.8 | Cisco TelePresence Video Communication Server (VCS) ExpresswayA vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a… | |
| CVE-2026-76473 | 21 Oct 2026 | CVSS 9.8 | Cisco Emergency ResponderAs part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime… | |
| CVE-2026-53986 | 21 Oct 2026 | CVSS 5.3 | Girafit camera appGirafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded credentials vulnerability that allows… | |
| CVE-2026-20236 | 21 Oct 2026 | CVSS 7.5 | Cisco Cyber VisionAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has… | |
| CVE-2026-20291 | 21 Oct 2026 | CVSS 7.8 | Cisco Cyber VisionAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has… | |
| CVE-2026-20356 | 21 Oct 2026 | CVSS 7.5 | Cisco Cyber VisionAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has… | |
| CVE-2026-20043 | 21 Oct 2026 | CVSS 9.0 | Cisco Cyber VisionAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has… | |
| CVE-2026-20179 | 21 Oct 2026 | CVSS 5.8 | Cisco Open Source Snort3Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an… | |
| CVE-2026-20197 | 21 Oct 2026 | CVSS 5.8 | Cisco Open Source Snort3Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker… | |
| CVE-2026-20218 | 21 Oct 2026 | CVSS 5.8 | Cisco Open Source Snort3A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated… | |
| CVE-2026-20221 | 21 Oct 2026 | CVSS 5.8 | Cisco Cyber VisionMultiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3… | |
| CVE-2026-114259 | 21 Oct 2026 | CVSS 7.3 | oretnom23 file-management-system-phpA flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of… | |
| CVE-2026-114260 | 21 Oct 2026 | CVSS 6.5 | oretnom23 file-management-system-phpA vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the… | |
| CVE-2026-114261 | 21 Oct 2026 | CVSS 7.3 | MomoTommy file-management-systemA vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function… | |
| CVE-2026-20011 | 21 Oct 2026 | CVSS 5.8 | Cisco Open Source Snort3Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to… | |
| CVE-2026-20019 | 21 Oct 2026 | CVSS 5.8 | Cisco Open Source Snort3Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker… | |
| CVE-2026-113799 | 21 Oct 2026 | CVSS 5.3 | Slack Morphism verifier errors disclose valid HMACs in the logsSlack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request… | Fix |
| CVE-2026-113800 | 21 Oct 2026 | CVSS 5.4 | Electron: HID and USB permission checks can be attributed to the wrong originElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0… | Fix |
| CVE-2026-114121 | 21 Oct 2026 | CVSS 5.4 | Electron: openExternal permission requests can be attributed to the wrong originElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0… | Fix |
| CVE-2026-114122 | 21 Oct 2026 | CVSS 3.9 | Electron: Frame subscription trusts GPU-supplied frame geometryElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3… | Fix |
| CVE-2026-114123 | 21 Oct 2026 | CVSS 7.5 | dynamics365ninja d365fo-mcp-serverD365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadata. Prior to version 1.11.0… |
Page 7 of 168