2026

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled inp

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an a

protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.1 and 8.4.1, protobufjs could recu

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attacke

An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Servic

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow.

A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 a

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with t

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 a

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy co

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud C

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution an

Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests whi

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 ar

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve use

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site script

IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and

IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send

Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and i

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= recor

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithm

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. the client-side

The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4

Incorrect caching of authentication between different users of the  qSnapper dbus service before version 1.3.3 allowed a

Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local at

Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacke

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to

A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of

IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a gene

A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on i