2026

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/ob

The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplie

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma

A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the fi

A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of

A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function

A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.

A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file

A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue affects the function

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the fil

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the fil

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/

A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/updateOne/updateMany of th

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the f

A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file co

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a phys

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authori

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of t

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Ar

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is a

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish conn

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints ar

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that al

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Pr

Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provide

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parseP

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file

A vulnerability was determined in poco-ai poco-claw up to 0.5.4. This vulnerability affects the function create_task of

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. Impacted is the function list/remove of the file to

A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function update_plugin/update_all_plu

A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function OpenApiRoute.chat_se

SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used

SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches databases using the USE clau

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file

A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the function matchesAllowlis

A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.2. Affected is the function isSafeBin of the file i

A weakness has been identified in nextlevelbuilder GoClaw up to 3.13.2. Affected by this issue is the function ToolsInvo

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function Ch

A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the f

A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the function extendDefaults/e

A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilter of the file src/f

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of