2026

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection.

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS com

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive inf

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successf

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS com

NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper en

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper cer

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an in

NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code inj

NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution

ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to

The MCP PHP SDK (Composer package mcp/sdk) is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtif

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary c

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remot

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3a

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result

The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs o

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion pictu

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows

A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write a

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion pictu

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Comp

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0,

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0,

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed i

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malic

ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoi

Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. Authorizat

In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `de

Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauth

Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI wit

Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion pictu

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 un

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well

sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear

github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted fil

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file syst