2026

A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of

A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this vulnerability is the function get_o

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function T

A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php o

A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. T

A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the

A security flaw has been discovered in Wavlink WL-NU516U1 260515. This affects the function wlink_uci_set_value of the f

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some un

A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _validate_urls of the

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the f

A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this is

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutate

A security flaw has been discovered in Shibby Tomato up to 1.28.0000. Affected by this issue is the function sub_2D568 o

A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub_2D048 of the component CI

A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issu

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the

A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/ob

The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplie

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma

A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the fi

A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the function tools.webFetch of

A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function

A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function ExecApprovalManager.

A vulnerability was determined in nextlevelbuilder GoClaw 3.13.3-beta.3. This affects the function writeFile of the file

A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue affects the function

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the fil

A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the function WebTool.Execute

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the fil

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/

A vulnerability was determined in kofrasa mingo up to 7.2.1. This impacts the function update/updateOne/updateMany of th

A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the f

A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file co

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a phys

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authori

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perfor

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of t

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Ar

A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected is a

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish conn

HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints ar

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that al

Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Pr