2026

FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vuln

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.9.0, a hardcoded default encryption k

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, the WebDAV upload endpoint accep

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, a missing-authentication vulnera

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading

Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, includ

SiYuan is a personal knowledge management system. Versions 3.6.0 and below render package metadata fields (displayName,

SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the backend renderREADME function uses lu

Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form

The CM Custom Reports – Flexible reporting to track what matters most plugin for WordPress is vulnerable to Stored Cross

The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, an

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catch

In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: fix NULL pointer dereference in ip

In the Linux kernel, the following vulnerability has been resolved: net: add xmit recursion limit to tunnel xmit functi

In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task work

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM

In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_com

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nel

In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_fr

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2

Jexactyl is a customisable game management panel and billing system. Commits after 025e8dbb0daaa04054276bda814d922cf4af5

CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_pac

Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explic

tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, th

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Versions 0.60.0 through 1.0.0

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function

A vulnerability was determined in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This affects an unknown function

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The impacted element is an unknown fun

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The affected element is an unknow

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adm

tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips th

Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Pat

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the delete_ap

A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown proce

Craft CMS is a content management system (CMS). In versions 5.9.0-beta.1 through 5.9.10, the revision/draft context menu

WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/phpsessionid.json.php exposes the cur

WWBN AVideo is an open source video platform. In versions 25.0 and below, /objects/encryptPass.json.php exposes the appl

libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.49.3, th

WWBN AVideo is an open source video platform. In versions 25.0 and below, the plugin/LiveLinks/proxy.php endpoint valida

WWBN AVideo is an open source video platform. Versions 25.0 and below are vulnerable to unauthenticated application take

WWBN AVideo is an open source video platform. In versions 25.0 and below, the official Docker deployment files (docker-c

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Versions 4.0.0-be

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. In versions prior to 0.6.5,

A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability a

A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of

A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is s

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability i