DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-15603: CVE-2026-15603: Log Forging via Unescaped Unicode Line Separators in morgan Middleware
cverports profile

CVE-2026-15603: CVE-2026-15603: Log Forging via Unescaped Unicode Line Separators in morgan Middleware

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-82333: CVE-2026-82333: Remote Denial of Service via Sparse Array Manipulation in Multer
cverports profile

CVE-2026-82333: CVE-2026-82333: Remote Denial of Service via Sparse Array Manipulation in Multer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77063: CVE-2026-77063: File Size Limit Bypass via Asynchronous Race Condition in Multer
cverports profile

CVE-2026-77063: CVE-2026-77063: File Size Limit Bypass via Asynchronous Race Condition in Multer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77037: CVE-2026-77037: File Descriptor Leak and Denial of Service in Multer Disk Storage
cverports profile

CVE-2026-77037: CVE-2026-77037: File Descriptor Leak and Denial of Service in Multer Disk Storage

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77078: CVE-2026-77078: Remote Denial of Service in Multer Middleware via Array Suffix Handling
cverports profile

CVE-2026-77078: CVE-2026-77078: Remote Denial of Service in Multer Middleware via Array Suffix Handling

#security #cve #cybersecurity
Comments
2 min read
GHSA-2Q42-4Q24-7RGV: Path Traversal Vulnerability in Microsoft TypeSpec Core and Emitter Packages
cverports profile

GHSA-2Q42-4Q24-7RGV: Path Traversal Vulnerability in Microsoft TypeSpec Core and Emitter Packages

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-CC9R-2J5M-2M83: GHSA-CC9R-2J5M-2M83: Parser Differential and Domain Validation Bypass in Nodemailer
cverports profile

GHSA-CC9R-2J5M-2M83: GHSA-CC9R-2J5M-2M83: Parser Differential and Domain Validation Bypass in Nodemailer

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-2X7J-588G-CCC2: GHSA-2x7j-588g-ccc2: Algorithmic Complexity Denial of Service in Nodemailer
cverports profile

GHSA-2X7J-588G-CCC2: GHSA-2x7j-588g-ccc2: Algorithmic Complexity Denial of Service in Nodemailer

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-WMMP-3585-3RMP: GHSA-WMMP-3585-3RMP: IDN/Punycode Domain Allow-list Bypass in Nodemailer
cverports profile

GHSA-WMMP-3585-3RMP: GHSA-WMMP-3585-3RMP: IDN/Punycode Domain Allow-list Bypass in Nodemailer

#security #cve #cybersecurity #ghsa
Comments
1 min read
CVE-2026-86996: CVE-2026-86996: Missing Authorization in n8n AI Agent Workflow Tool Execution
cverports profile

CVE-2026-86996: CVE-2026-86996: Missing Authorization in n8n AI Agent Workflow Tool Execution

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-83612: CVE-2026-83612: Algorithmic Complexity and Denial of Service via Output Amplification in xmldom
cverports profile

CVE-2026-83612: CVE-2026-83612: Algorithmic Complexity and Denial of Service via Output Amplification in xmldom

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-78679: CVE-2026-78679: Arbitrary File Read via Command-Line Option Injection in GitPython
cverports profile

CVE-2026-78679: CVE-2026-78679: Arbitrary File Read via Command-Line Option Injection in GitPython

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-78677: CVE-2026-78677: Path Traversal and Arbitrary File Write in GitPython
cverports profile

CVE-2026-78677: CVE-2026-78677: Path Traversal and Arbitrary File Write in GitPython

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72925: CVE-2026-72925: Cross-Site Scripting via Improper JSON Escaping in SWC HTML Minifier
cverports profile

CVE-2026-72925: CVE-2026-72925: Cross-Site Scripting via Improper JSON Escaping in SWC HTML Minifier

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-79674: CVE-2026-79674: Path Sandbox Bypass in NLTK CorpusReader Constructors
cverports profile

CVE-2026-79674: CVE-2026-79674: Path Sandbox Bypass in NLTK CorpusReader Constructors

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-12259: CVE-2026-12259: Improper Integrity Verification (Extract-Before-Verify) in NLTK Downloader
cverports profile

CVE-2026-12259: CVE-2026-12259: Improper Integrity Verification (Extract-Before-Verify) in NLTK Downloader

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75856: CVE-2026-75856: Server-Side Request Forgery (SSRF) Bypass via DNS Resolution TOCTOU in CodeWhale
cverports profile

CVE-2026-75856: CVE-2026-75856: Server-Side Request Forgery (SSRF) Bypass via DNS Resolution TOCTOU in CodeWhale

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75912: CVE-2026-75912: Argument Injection and Arbitrary File Disclosure in CodeWhale Git Tools
cverports profile

CVE-2026-75912: CVE-2026-75912: Argument Injection and Arbitrary File Disclosure in CodeWhale Git Tools

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63735: CVE-2026-63735: Cross-Tenant Authorization Bypass in SurrealDB Custom API Routing Handler
cverports profile

CVE-2026-63735: CVE-2026-63735: Cross-Tenant Authorization Bypass in SurrealDB Custom API Routing Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63733: CVE-2026-63733: Incorrect Authorization in SurrealDB Permissions Clause
cverports profile

CVE-2026-63733: CVE-2026-63733: Incorrect Authorization in SurrealDB Permissions Clause

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72799: CVE-2026-72799: Missing Authorization in SiYuan Filetree Path-Resolution API
cverports profile

CVE-2026-72799: CVE-2026-72799: Missing Authorization in SiYuan Filetree Path-Resolution API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72798: CVE-2026-72798: Missing Authorization and Information Disclosure in SiYuan renderAttributeView
cverports profile

CVE-2026-72798: CVE-2026-72798: Missing Authorization and Information Disclosure in SiYuan renderAttributeView

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72797: CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint
cverports profile

CVE-2026-72797: CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72794: CVE-2026-72794: Cryptographic Key Leakage and Session Forgery in SiYuan
cverports profile

CVE-2026-72794: CVE-2026-72794: Cryptographic Key Leakage and Session Forgery in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72795: CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering
cverports profile

CVE-2026-72795: CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72793: CVE-2026-72793: Information Disclosure and Session Forgery in SiYuan Note-Taking Application
cverports profile

CVE-2026-72793: CVE-2026-72793: Information Disclosure and Session Forgery in SiYuan Note-Taking Application

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72792: CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan
cverports profile

CVE-2026-72792: CVE-2026-72792: Information Disclosure via Tag API Endpoint in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71486: CVE-2026-71486: Uncontrolled Resource Consumption in vLLM Derender Endpoints
cverports profile

CVE-2026-71486: CVE-2026-71486: Uncontrolled Resource Consumption in vLLM Derender Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73555: CVE-2026-73555: Environment and Information Disclosure via Exception Handling in vLLM
cverports profile

CVE-2026-73555: CVE-2026-73555: Environment and Information Disclosure via Exception Handling in vLLM

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73556: CVE-2026-73556: Regular Expression Denial of Service (ReDoS) in vLLM lm-format-enforcer Backend
cverports profile

CVE-2026-73556: CVE-2026-73556: Regular Expression Denial of Service (ReDoS) in vLLM lm-format-enforcer Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73557: CVE-2026-73557: Race Condition in PyTorch Tensor Invariant Checks within vLLM Engine
cverports profile

CVE-2026-73557: CVE-2026-73557: Race Condition in PyTorch Tensor Invariant Checks within vLLM Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73842: CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway
cverports profile

CVE-2026-73842: CVE-2026-73842: Missing Authentication and Authorization on Internal Management Listener in OpenChoreo cluster-gateway

#security #cve #cybersecurity
Comments
2 min read
GHSA-7Q9C-HPX7-9CWM: GHSA-7Q9C-HPX7-9CWM: Unauthenticated Remote Shutdown in @typespec/spector Mock Server
cverports profile

GHSA-7Q9C-HPX7-9CWM: GHSA-7Q9C-HPX7-9CWM: Unauthenticated Remote Shutdown in @typespec/spector Mock Server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-72796: CVE-2026-72796: Access Control Bypass via Static Routes in SiYuan
cverports profile

CVE-2026-72796: CVE-2026-72796: Access Control Bypass via Static Routes in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75858: CVE-2026-75858: Silent Remote Code Execution via Approval Bypass in CodeWhale Interactive Tools
cverports profile

CVE-2026-75858: CVE-2026-75858: Silent Remote Code Execution via Approval Bypass in CodeWhale Interactive Tools

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75911: CVE-2026-75911: Remote Code Execution via Configuration Override in CodeWhale
cverports profile

CVE-2026-75911: CVE-2026-75911: Remote Code Execution via Configuration Override in CodeWhale

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75914: CVE-2026-75914: Improper Link Resolution and Path Traversal in CodeWhale image_analyze Tool
cverports profile

CVE-2026-75914: CVE-2026-75914: Improper Link Resolution and Path Traversal in CodeWhale image_analyze Tool

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63376: CVE-2026-63376: Prototype Pollution via Path Desynchronization in toml-node
cverports profile

CVE-2026-63376: CVE-2026-63376: Prototype Pollution via Path Desynchronization in toml-node

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-69083: CVE-2026-69083: Unauthenticated SQL Injection and SQL Command Execution in SiYuan Full-Text Search API
cverports profile

CVE-2026-69083: CVE-2026-69083: Unauthenticated SQL Injection and SQL Command Execution in SiYuan Full-Text Search API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68587: CVE-2026-68587: Broken Access Control in SiYuan Note Transaction Endpoints
cverports profile

CVE-2026-68587: CVE-2026-68587: Broken Access Control in SiYuan Note Transaction Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68586: CVE-2026-68586: Missing Authorization in SiYuan Backlink Content Endpoints Allows Information Disclosure
cverports profile

CVE-2026-68586: CVE-2026-68586: Missing Authorization in SiYuan Backlink Content Endpoints Allows Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68585: CVE-2026-68585: Metadata Disclosure via Missing Authorization in SiYuan API
cverports profile

CVE-2026-68585: CVE-2026-68585: Metadata Disclosure via Missing Authorization in SiYuan API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72812: CVE-2026-72812: Broken Access Control and SQL Injection in SiYuan
cverports profile

CVE-2026-72812: CVE-2026-72812: Broken Access Control and SQL Injection in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72811: CVE-2026-72811: Remote SQL Injection in SiYuan Backlink and Mention Search Engine
cverports profile

CVE-2026-72811: CVE-2026-72811: Remote SQL Injection in SiYuan Backlink and Mention Search Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72810: CVE-2026-72810: Publish-Boundary Bypass and Real-Time Data Leakage via WebSocket Session Pollution in SiYuan
cverports profile

CVE-2026-72810: CVE-2026-72810: Publish-Boundary Bypass and Real-Time Data Leakage via WebSocket Session Pollution in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72809: CVE-2026-72809: Authentication Bypass in SiYuan via Localhost Trust Spoofing
cverports profile

CVE-2026-72809: CVE-2026-72809: Authentication Bypass in SiYuan via Localhost Trust Spoofing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72808: CVE-2026-72808: Unauthorized PDF Annotation Access in SiYuan Knowledge Management System
cverports profile

CVE-2026-72808: CVE-2026-72808: Unauthorized PDF Annotation Access in SiYuan Knowledge Management System

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72807: CVE-2026-72807: Second-Order SQL Injection via Attribute View Templates in SiYuan
cverports profile

CVE-2026-72807: CVE-2026-72807: Second-Order SQL Injection via Attribute View Templates in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure
cverports profile

CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72805: CVE-2026-72805: Missing Authorization in SiYuan Note Block APIs Leads to Information Disclosure
cverports profile

CVE-2026-72805: CVE-2026-72805: Missing Authorization in SiYuan Note Block APIs Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints
cverports profile

CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72802: CVE-2026-72802: Sensitive Information Disclosure via Administrative Asset Resolvers in SiYuan Note
cverports profile

CVE-2026-72802: CVE-2026-72802: Sensitive Information Disclosure via Administrative Asset Resolvers in SiYuan Note

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-72801: CVE-2026-72801: Information Disclosure of Cryptographic Key Material in SiYuan
cverports profile

CVE-2026-72801: CVE-2026-72801: Information Disclosure of Cryptographic Key Material in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72800: CVE-2026-72800: Missing Authorization in SiYuan Personal Knowledge Management System
cverports profile

CVE-2026-72800: CVE-2026-72800: Missing Authorization in SiYuan Personal Knowledge Management System

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72803: CVE-2026-72803: Information Disclosure via Missing Authorization in SiYuan API
cverports profile

CVE-2026-72803: CVE-2026-72803: Information Disclosure via Missing Authorization in SiYuan API

#security #cve #cybersecurity
Comments
2 min read
GHSA-7J72-F6WG-CXW6: CVE-2026-68584: Authentication Bypass via Auxiliary Content Endpoints in SiYuan
cverports profile

GHSA-7J72-F6WG-CXW6: CVE-2026-68584: Authentication Bypass via Auxiliary Content Endpoints in SiYuan

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-77465: CVE-2026-77465: Uncontrolled Recursion in toml-node Deserializer Leads to Denial of Service
cverports profile

CVE-2026-77465: CVE-2026-77465: Uncontrolled Recursion in toml-node Deserializer Leads to Denial of Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions
cverports profile

CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71869: CVE-2026-71869: Remote Code Execution in Orval via OpenAPI Default Value Template Literal Injection
cverports profile

CVE-2026-71869: CVE-2026-71869: Remote Code Execution in Orval via OpenAPI Default Value Template Literal Injection

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61625: CVE-2026-61625: Arbitrary File Write via Path Traversal in VictoriaMetrics vmrestore
cverports profile

CVE-2026-61625: CVE-2026-61625: Arbitrary File Write via Path Traversal in VictoriaMetrics vmrestore

#security #cve #cybersecurity
Comments
2 min read
loading...