2026

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker w

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions befo

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary ve

Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary v

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated atta

Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network)

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell C

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernete

A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary ve

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary ve

Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 unt

Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions befo

Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and cana

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulner

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vuln

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in t

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in t

A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_an

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely ne

i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Pri

LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacke

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-commen

Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20,

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the p

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the r

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP