2026

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, ma

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoi

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An a

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be a

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supp

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access contro

A path-traversal vulnerability in the logout functionality of Shenzhen Zhibotong Electronics ZBT WE2001 23.09.27 allows

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and i

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPad

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 2

A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.4, macOS

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0,

sf-mcp-server is an implementation of Salesforce MCP server for Claude for Desktop. A command injection vulnerability ex

Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been foun

set-in provides the set value of nested associative structure given array of keys. A prototype pollution vulnerability e

LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langch

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.

Vulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17 allows attackers to es

Vulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before 9.17 allow attackers to

A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction di

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craf

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1

OpenMetadata is a unified metadata platform. Prior to 1.11.8, calls issued by the UI against /api/v1/ingestionPipelines

Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper acces

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vu

Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a

Vikunja is a todo-app to organize your life. Prior to 1.1.0, TaskGlanceTooltip.vue temporarily creates a div and sets th

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulner

Statmatic is a Laravel and Git powered content management system (CMS). From 6.0.0 to before 6.2.3, a stored XSS vulnera

Statamic is a, Laravel + Git powered CMS designed for building websites. Prior to 5.73.6 and 6.2.5, users without permis

Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the va

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's

Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability e

Unrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and document manage compon

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the applica

Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by man

TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sendi