DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler
cverports profile

CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores
cverports profile

CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115886: CVE-2026-115886: Unauthenticated Server-Side Request Forgery and Unsafe Reflection in MLflow Scorer…
cverports profile

CVE-2026-115886: CVE-2026-115886: Unauthenticated Server-Side Request Forgery and Unsafe Reflection in MLflow Scorer…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-113872: CVE-2026-113872: Unauthenticated Process Crash in Express Multer via Late Busboy Stream Resumption
cverports profile

CVE-2026-113872: CVE-2026-113872: Unauthenticated Process Crash in Express Multer via Late Busboy Stream Resumption

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript
cverports profile

CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109841: CVE-2026-109841: Subresource Integrity Verification Bypass in Node.js Undici
cverports profile

CVE-2026-109841: CVE-2026-109841: Subresource Integrity Verification Bypass in Node.js Undici

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109924: CVE-2026-109924: Unbounded Memory Allocation in Node.js Undici EventSource Stream Parser
cverports profile

CVE-2026-109924: CVE-2026-109924: Unbounded Memory Allocation in Node.js Undici EventSource Stream Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation
cverports profile

CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM
cverports profile

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109461: CVE-2026-109461: Origin Validation Error in @azure/msal-node Leads to Information Disclosure
cverports profile

CVE-2026-109461: CVE-2026-109461: Origin Validation Error in @azure/msal-node Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113719: CVE-2026-113719: Arbitrary File Deletion via Path Traversal in virtualenv Seed Package Metadata
cverports profile

CVE-2026-113719: CVE-2026-113719: Arbitrary File Deletion via Path Traversal in virtualenv Seed Package Metadata

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113715: CVE-2026-113715: Configuration Key Injection via Unicode Line Boundary in virtualenv
cverports profile

CVE-2026-113715: CVE-2026-113715: Configuration Key Injection via Unicode Line Boundary in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113723: CVE-2026-113723: OS Command Injection via Unsafe Prompt Expansion in PyPA virtualenv
cverports profile

CVE-2026-113723: CVE-2026-113723: OS Command Injection via Unsafe Prompt Expansion in PyPA virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113720: CVE-2026-113720: Local Permission Inheritance Vulnerability in virtualenv
cverports profile

CVE-2026-113720: CVE-2026-113720: Local Permission Inheritance Vulnerability in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113718: CVE-2026-113718: Code Injection in pypa/virtualenv XonshActivator via Multibyte Encoding Misalignment
cverports profile

CVE-2026-113718: CVE-2026-113718: Code Injection in pypa/virtualenv XonshActivator via Multibyte Encoding Misalignment

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113714: CVE-2026-113714: Cache Poisoning and Unvalidated Wheel Download in virtualenv
cverports profile

CVE-2026-113714: CVE-2026-113714: Cache Poisoning and Unvalidated Wheel Download in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113717: CVE-2026-113717: Package Digest Verification Bypass in virtualenv Pip Seeder
cverports profile

CVE-2026-113717: CVE-2026-113717: Package Digest Verification Bypass in virtualenv Pip Seeder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113713: CVE-2026-113713: Insecure Temporary File Symlink Handling in PyPA virtualenv
cverports profile

CVE-2026-113713: CVE-2026-113713: Insecure Temporary File Symlink Handling in PyPA virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-112937: CVE-2026-112937: Arbitrary Directory Deletion via TOCTOU Race Condition in filelock ReadWriteLock
cverports profile

CVE-2026-112937: CVE-2026-112937: Arbitrary Directory Deletion via TOCTOU Race Condition in filelock ReadWriteLock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-112906: CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock
cverports profile

CVE-2026-112906: CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114055: CVE-2026-114055: Uncontrolled Resource Consumption in vLLM via Unvalidated Multimodal Kwargs
cverports profile

CVE-2026-114055: CVE-2026-114055: Uncontrolled Resource Consumption in vLLM via Unvalidated Multimodal Kwargs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62204: CVE-2026-62204: Arbitrary Bazaar Package Overwrite in SiYuan via Parameter Mismatch
cverports profile

CVE-2026-62204: CVE-2026-62204: Arbitrary Bazaar Package Overwrite in SiYuan via Parameter Mismatch

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-115478: CVE-2026-115478: Incorrect Authorization and Incomplete Cleanup in obsidian-tc
cverports profile

CVE-2026-115478: CVE-2026-115478: Incorrect Authorization and Incomplete Cleanup in obsidian-tc

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-115477: CVE-2026-115477: Human-in-the-Loop Authorization Bypass in obsidian-tc
cverports profile

CVE-2026-115477: CVE-2026-115477: Human-in-the-Loop Authorization Bypass in obsidian-tc

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113790: CVE-2026-113790: Uncontrolled Resource Consumption in pypdf Container Parsing
cverports profile

CVE-2026-113790: CVE-2026-113790: Uncontrolled Resource Consumption in pypdf Container Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113789: CVE-2026-113789: Algorithmic Complexity and Resource Exhaustion in pypdf Interactive Form Parsing
cverports profile

CVE-2026-113789: CVE-2026-113789: Algorithmic Complexity and Resource Exhaustion in pypdf Interactive Form Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114131: CVE-2026-114131: Nuxt Route Rules appMiddleware Bypass via Percent-Encoded Route Segments
cverports profile

CVE-2026-114131: CVE-2026-114131: Nuxt Route Rules appMiddleware Bypass via Percent-Encoded Route Segments

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114130: CVE-2026-114130: Cross-Site Scripting via ASCII Control Characters in Nuxt Fallback Router
cverports profile

CVE-2026-114130: CVE-2026-114130: Cross-Site Scripting via ASCII Control Characters in Nuxt Fallback Router

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114133: CVE-2026-114133: Stored Cross-Site Scripting via useHeadSafe in Nuxt Server Islands
cverports profile

CVE-2026-114133: CVE-2026-114133: Stored Cross-Site Scripting via useHeadSafe in Nuxt Server Islands

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114132: CVE-2026-114132: Case-Sensitivity Route Rule Bypass in Nuxt Framework
cverports profile

CVE-2026-114132: CVE-2026-114132: Case-Sensitivity Route Rule Bypass in Nuxt Framework

#security #cve #cybersecurity
Comments
2 min read
GHSA-78G4-XQWV-Q3G8: GHSA-78G4-XQWV-Q3G8: Heap-Based Buffer Overflow in Pillow (libopenjp2)
cverports profile

GHSA-78G4-XQWV-Q3G8: GHSA-78G4-XQWV-Q3G8: Heap-Based Buffer Overflow in Pillow (libopenjp2)

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-88779: CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix NetScaler…
cverports profile

CVE-2026-88779: CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix NetScaler…

#security #cve #cybersecurity
Comments
2 min read
GHSA-9CQF-HHRQ-7V45: Missing publish-access check on getAttributeViewSearchTarget endpoint exposes database row content to…
cverports profile

GHSA-9CQF-HHRQ-7V45: Missing publish-access check on getAttributeViewSearchTarget endpoint exposes database row content to…

#security #cve #cybersecurity #ghsa
Comments
1 min read
CVE-2026-109619: CVE-2026-109619: Remote Code Execution in PHP Core via Stale Global State Memory Corruption (PHP2Shell)
cverports profile

CVE-2026-109619: CVE-2026-109619: Remote Code Execution in PHP Core via Stale Global State Memory Corruption (PHP2Shell)

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-61782: CVE-2026-61782: Sensitive Information Disclosure and Source Code Exfiltration via Insecure HTTP Server…
cverports profile

CVE-2026-61782: CVE-2026-61782: Sensitive Information Disclosure and Source Code Exfiltration via Insecure HTTP Server…

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-109618: CVE-2026-109618: Remote Code Execution in PHP Core via Out-of-Memory longjmp() Uninitialized Memory Access
cverports profile

CVE-2026-109618: CVE-2026-109618: Remote Code Execution in PHP Core via Out-of-Memory longjmp() Uninitialized Memory Access

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113721: CVE-2026-113721: Unsafe Link Resolution in virtualenv File Generation
cverports profile

CVE-2026-113721: CVE-2026-113721: Unsafe Link Resolution in virtualenv File Generation

#security #cve #cybersecurity
Comments
2 min read
GHSA-JR78-W6W5-M8F8: GHSA-JR78-W6W5-M8F8: Missing Authorization in Semantic MediaWiki smwtask API Module Allows…
cverports profile

GHSA-JR78-W6W5-M8F8: GHSA-JR78-W6W5-M8F8: Missing Authorization in Semantic MediaWiki smwtask API Module Allows…

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-87697: CVE-2026-87697: Untrusted Deserialization in .NET PresentationCore Clipboard Handling
cverports profile

CVE-2026-87697: CVE-2026-87697: Untrusted Deserialization in .NET PresentationCore Clipboard Handling

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem
cverports profile

CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-70186: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability via Framework Deadlock
cverports profile

CVE-2026-70186: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability via Framework Deadlock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70035: CVE-2026-70035: Insecure Deserialization Remote Code Execution in Microsoft .NET Framework and .NET Runtime
cverports profile

CVE-2026-70035: CVE-2026-70035: Insecure Deserialization Remote Code Execution in Microsoft .NET Framework and .NET Runtime

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition
cverports profile

CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107844: CVE-2026-107844: Path Traversal Vulnerability in Contao ImagesController
cverports profile

CVE-2026-107844: CVE-2026-107844: Path Traversal Vulnerability in Contao ImagesController

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107848: CVE-2026-107848: Cross-Site Request Forgery (CSRF) in Contao Backend Actions via GET Requests
cverports profile

CVE-2026-107848: CVE-2026-107848: Cross-Site Request Forgery (CSRF) in Contao Backend Actions via GET Requests

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107843: CVE-2026-107843: Unthrottled Activation Email Resend and Account Enumeration in Contao CMS
cverports profile

CVE-2026-107843: CVE-2026-107843: Unthrottled Activation Email Resend and Account Enumeration in Contao CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107842: CVE-2026-107842: Information Disclosure via Stale Indexing in Contao Search Module
cverports profile

CVE-2026-107842: CVE-2026-107842: Information Disclosure via Stale Indexing in Contao Search Module

#security #cve #cybersecurity
Comments
2 min read
GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation
cverports profile

GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja
cverports profile

GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8WVG-R2J4-3737: GHSA-8wvg-r2j4-3737: Email Address Exposure in Vikunja Task Assignees API
cverports profile

GHSA-8WVG-R2J4-3737: GHSA-8wvg-r2j4-3737: Email Address Exposure in Vikunja Task Assignees API

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-W2CH-4XGR-22WW: GHSA-W2CH-4XGR-22WW: Missing Authorization in Vikunja Task Relation Deletion
cverports profile

GHSA-W2CH-4XGR-22WW: GHSA-W2CH-4XGR-22WW: Missing Authorization in Vikunja Task Relation Deletion

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-108258: CVE-2026-108258: Path Traversal in Shiny for Python Bookmark Restoration
cverports profile

CVE-2026-108258: CVE-2026-108258: Path Traversal in Shiny for Python Bookmark Restoration

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-108260: CVE-2026-108260: Stored Cross-Site Scripting (XSS) in @tinacms/web-components
cverports profile

CVE-2026-108260: CVE-2026-108260: Stored Cross-Site Scripting (XSS) in @tinacms/web-components

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-108261: CVE-2026-108261: Admin Preview Cross-Origin Bypass and GraphQL Hijacking in TinaCMS
cverports profile

CVE-2026-108261: CVE-2026-108261: Admin Preview Cross-Origin Bypass and GraphQL Hijacking in TinaCMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-108259: CVE-2026-108259: Code Injection in @tinacms/cli via Unsanitized Git Branch Name Interpolation
cverports profile

CVE-2026-108259: CVE-2026-108259: Code Injection in @tinacms/cli via Unsanitized Git Branch Name Interpolation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107804: CVE-2026-107804: Client IP Resolution Flaw & Authentication Lockout in Nginx UI
cverports profile

CVE-2026-107804: CVE-2026-107804: Client IP Resolution Flaw & Authentication Lockout in Nginx UI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication
cverports profile

CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication

#security #cve #cybersecurity
Comments
2 min read
GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline
cverports profile

GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja
cverports profile

GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja
cverports profile

GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
loading...