2026

Capgo before 12.128.2 contains an improper access control vulnerability in the public.get_org_members RPC function that

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users

Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns th

Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY

Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations th

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attacker

picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in

picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allow

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config funct

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_vi

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_open

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_ope

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm

A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::exec

A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerabi

A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unk

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessio

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the librar

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function i

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.s

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in th

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects a

A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affecte

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the functi

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file lite

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the

A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/pro

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering d

AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that

AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php end

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows aut

AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authori

vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because P

vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Severa

Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to re

Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept

Capgo before 12.128.2 uses ILIKE pattern matching instead of exact matching for app_id lookup in the preview subdomain r

Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that

Nuxt before 4.4.7 (and the 3.x branch before 3.21.7) contains a cross-site scripting vulnerability in the NoScript compo

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudf

picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to cr

Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-exp