2026

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPad

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 2

A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0,

sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability ex

Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been foun

set-in provides the set value of nested associative structure given array of keys. A prototype pollution vulnerability e

LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langch

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.

Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to es

Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to

A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction di

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craf

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1

OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper acces

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vu

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a

Vikunja is a todo-app to organize your life. Prior to 1.1.0, TaskGlanceTooltip.vue temporarily creates a div and sets th

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulner

Statmatic is a Laravel and Git powered content management system (CMS). From 6.0.0 to before 6.2.3, a stored XSS vulnera

Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permis

Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the va

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability e

Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage compon

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the applica

Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by man

TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sendi

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to c

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a larg

SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to cr

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an

RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflo

RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to cr

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the applicatio

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by suppl

NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to

NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to

NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to cras

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by

Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the applicati