2026

Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resol

Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the fi

A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the comp

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown process

A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unkno

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the

A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoL

A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the fi

A security flaw has been discovered in FascinatedBox lily up to 2.3. Impacted is the function clear_storages of the file

A vulnerability was identified in FascinatedBox lily up to 2.3. This issue affects the function patch_line_end of the fi

A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the l

A vulnerability was found in Squirrel up to 3.2. This affects the function SQCompiler::Factor/SQCompiler::UnaryOP of the

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArgu

A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file s

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wre

A security vulnerability has been detected in ChaiScript up to 6.1.0. This impacts the function chaiscript::eval::AST_No

A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::Boxed_Number::go of the

A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::Boxed_Nu

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl

Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administra

A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the conf

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner

A vulnerability was determined in berry-lang berry up to 1.1.0. The affected element is the function scan_string of the

A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conver

A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file li

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file li

An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to

wger is a free, open-source workout and fitness manager. Five routine detail action endpoints check a cache before calli

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users can publ

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, moderators could e

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, DM communication-p

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, the `move_posts` a

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing `validate_

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able

VideoLAN VLC for Android prior to version 3.7.0 contains an authentication bypass in the Remote Access Server feature du

Golioth Firmware SDK version 0.19.1 prior to 0.22.0, fixed in commit 0e788217, contain an out-of-bounds read due to impr

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit d7f55b38, contain an out-of-bounds read in LightDB

Golioth Firmware SDK version 0.10.0 prior to 0.22.0, fixed in commit 48f521b, contain a stack-based buffer overflow in P

A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /send_transaction. Th

A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This vulnerability affects unknown code

In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk

A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted w

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller c

A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by thi

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected

A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_he