2026

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be

A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS

A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, m

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 2

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, i

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS

An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malic

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a malicious

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. P

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Se

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Gold

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, mac

This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, m

This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker wit

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec

Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users

Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never

Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenti

Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands

DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static

DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agen

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell comman

Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating s

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name with

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoi

The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15

An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia

The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A mali

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS

OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run

JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating

piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat

LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on

LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-

Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set i

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe

A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the f