2026

Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.format in src/lib/addons/

Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsy

DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, the VisitEmojiAsync method in DiscordChatExporte

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created

Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged t

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and

The Brushfire platform's video content streaming application (https://online.brushfire.com) exposes database path in req

Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of `restricte

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 h

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompt

The ProfilePress WordPress plugin before 4.17.1 does not strip shortcodes from two of its profile fields before renderin

The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which RE

The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events

The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification m

The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites

The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned get

The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(repo

The filestore backend in pkg/object/file.go, used for file:// stores and as a common juicefs sync destination, derived e

A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php o

Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a danger

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown function

An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vulnerable to denial of serv

@fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only o

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while lis

Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. Whe

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Lock User Functionality. Th

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary scrip

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data.

The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a nonce, or any capability on its p

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it in

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict acc

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in

The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on a

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and s

Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6. 8.3.8, 8.2.8, 8.1.8, and 7.10.15, the Meteor DDP metho

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possib

Use of hard-coded credentials issue exists in VOCALOID6 , which may allow an attacker to impersonate a legitimate VOCALO

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impact

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This a

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Ta

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and be

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a networ

Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin mid

Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go rea

TREK is a collaborative travel planner. Prior to 3.1.3, TREK file upload, update, and link actions accept attacker-contr

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton failed to escape meetingName in record

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentation