2026

SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to version 0.25.1, the ajax_lookup endpoint in appli

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker. Prior to version 6.6.1, P

Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `or

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to v

Xibo is an open source digital signage platform with a web content management system and Windows display player software

Dulwich is a pure-Python implementation of the Git file formats and protocols. Versions starting with 0.10.0 and prior t

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, r

Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the

Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal withou

Yoast Duplicate Post through 4.6 inserts an unescaped post title and permalink into the Classic Editor scheduled republi

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicate_post_dismiss_notic

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handli

Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page.

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handle

Sharp is a content management framework built for Laravel as a package. From version 9.0.0 to before version 9.22.3, the

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SS

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.0, several russh client and serv

Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, russh did not enforce

Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-

Shopware is an open commerce platform. Prior to versions 6.6.10.18 and 6.7.10.1, an attacker is able to enumerate the us

Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, the russh server authe

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabl

Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endp

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions

Russh is a Rust SSH client & server library. Prior to version 0.60.3, CryptoVec used unchecked capacity growth, unchecke

OpenVM is a performant and modular zkVM framework built for customization and extensibility. Prior to version 1.6.0, the

SpiceDB is an open source database system for creating and managing security-critical application permissions. From vers

Plonky3 is a toolkit for polynomial IOPs (PIOPs). Prior to versions 0.4.3 and 0.5.3, an attacker controlling prover-side

JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal as

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.2

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.2

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated remote pee

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

Sharp is a content management framework built for Laravel as a package. Prior to version 9.22.0, Sharp exposes a generic

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.9.11, 1.10

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allo

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a ma