Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 326/1809
N/A
CVE-2026-105786

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1

4.8
CVE-2026-105785

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Jopli

4.6
CVE-2026-105784

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1

8.0
CVE-2026-105783

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1

7.5
CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scr

N/A
CVE-2026-105764

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin

9.6
CVE-2026-105763

Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQ

8.3
CVE-2026-105762

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in a

7.3
CVE-2026-105471

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87b

7.1
CVE-2026-105761

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server en

5.3
CVE-2026-105760

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level m

5.9
CVE-2026-105759

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metri

5.3
CVE-2026-105758

vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and

6.5
CVE-2026-105757

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures c

6.5
CVE-2026-105756

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models acc

4.2
CVE-2026-105755

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at th

6.5
CVE-2026-105754

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint

6.5
CVE-2026-105753

vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU

3.1
CVE-2026-105752

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted

7.3
CVE-2026-105470

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

7.3
CVE-2026-105469

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c9

N/A
CVE-2026-104852

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tool

N/A
CVE-2026-93321

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds

N/A
CVE-2026-93315

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause clea

N/A
CVE-2026-91107

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record thr

7.5
CVE-2026-21589KEV

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft

7.5
CVE-2026-105751

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

5.9
CVE-2026-105750

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

6.5
CVE-2026-105749

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

4.3
CVE-2026-105748

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

4.3
CVE-2026-105747

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

2.2
CVE-2026-105746

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

6.7
CVE-2026-105745

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

7.5
CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

4.0
CVE-2026-105743

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

3.7
CVE-2026-105742

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

7.3
CVE-2026-105468

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d

4.3
CVE-2026-103546

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who

N/A
CVE-2026-103433

Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake defin

N/A
CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modificati

N/A
CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices co

N/A
CVE-2026-93326

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build def

N/A
CVE-2026-84900

Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP ha

8.1
CVE-2026-77226

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run

7.0
CVE-2026-105773

Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Help

N/A
CVE-2026-105768

apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before versio

7.1
CVE-2026-105741

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing v

9.9
CVE-2026-105740

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflo

N/A
CVE-2026-105699

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenti

5.4
CVE-2026-105698

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach