2026

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and H

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absenc

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a res

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal

Armatura One's backup and restore routine records the full database connection command, including the superuser password

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser accoun

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-1

Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simuli

UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary en

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine

UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full admini

UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand(),

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute

Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view refle

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitor

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadata

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows

Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows

Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above

Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (sing

A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enroll

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs fro

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript application

The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12,

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, th

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might a

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated r

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remot

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitr

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb

CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticate

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted docum

probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and li

Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1,

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScri

Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix do

Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration pla

fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fssp