2026

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resum

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend di

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend us

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted

Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query p

An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X se

An out-of-bounds read in libXi's XListInputDevices() in libXi before 1.8.4 could be used by malicious X servers to crash

An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X serv

An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be

OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/{sessionId}/grou

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the Discourse post

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, authenticated user

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, sites using wildca

Mini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data() during malformed XML parsing. Specially crafted

OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file conta

libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data c

Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasteriz

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI revie

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0

phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injecti

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the

A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/contro

An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party who

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embe

An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a

Araxis Merge for Windows version 2011.4074 through 2026.0 stores user-configured credentials for remote servers in the W

ZBar commit 2ea2ca58 contains an undefined-behavior vulnerability in the Code 128 decode6() function. When processing sp

libconfini 1.16.4 contains a heap out-of-bounds write condition involving the bundled load_ini_buffer.h utility and stri

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parse_unpadded(). A specially crafte

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/docum

HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file package

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint

Improper certificate validation vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM)

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Mi

IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to uninte

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.

Aureus ERP through 1.6.0, fixed in commit 53ad76d, stores uploaded SVG files on its public disk and serves them from the

Black Candy through 3.2.1 fails to scope playlist search queries to the authenticated session user, allowing any authent

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted Y

Velociraptor contains a deadlock condition that may be triggered by authenticated users. The issue stems from a lock man

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.