2026

AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing a

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart opera

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview dep

Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, the `trust` setting's

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized ac

A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication

BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory

BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it fa

repomix contains a local file inclusion vulnerability in the git clone endpoint that allows unauthenticated attackers to

SeaweedFS is a distributed storage system. Prior to 4.34, the S3 API gateway does not reject dot-dot path segments in th

SeaweedFS is a distributed storage system. In versions 4.08 through 4.33, requests signed with SigV4 service s3tables ar

File Browser provides a web file managing interface. Prior to 2.63.16, ScopedFs validates the nearest existing ancestor

Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any aut

App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output m

App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc. ac

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up th

An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with

An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with f

An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/

An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W wi

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allo

A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific s

A vulnerability was determined in Harness up to 2.28.2. This vulnerability affects the function getAuthorizedSpaces of t

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Tr

This vulnerability enables large‑scale data harvesting without requiring app‑specific secrets. A single request to a min

In Adalo’s no-code app builder, (Versions 1 and 2) the attackers may extract full user records and correlate user behavi

Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules).

Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Report

MISP’s importModule() path used getEnabledModule() to resolve a single import module by name, but this lookup did not en

An authorization bypass in MISP’s EventsController::importModule() allowed authenticated users or read-only API keys wit

AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vuln

n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy My

n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to f

Grav before 2.0.0 (affected through 2.0.0-rc.9 and the 2.0 branch) contains a stored CSS injection vulnerability in the

Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Cont

The Grav API plugin (getgrav/grav-plugin-api) 1.0.0 contains an unrestricted file upload vulnerability in the avatar upl

Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint,

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization bypass in the POST /workflows/{workflowId}/test-runs/n

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run en

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary ch

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger

n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated use

Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensi

FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and dvcman_call_on_receive due to

Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update deploy_history.owner_org whe

Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC func