2026

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonom

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 2

A flaw has been found in SourceCodester Sales and Inventory System 1.0. The affected element is an unknown function of t

A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the fi

A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0. This issue affects some unk

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of th

An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service inform

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside th

Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterp

Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. The nats-server provides

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit o

NVIDIA Triton Inference Server contains a vulnerability in the HTTP endpoint where an attacker may cause a denial of ser

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a use

NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to lo

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a use

NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user cou

HCL Traveler is susceptible to a weak default HTTP header validation vulnerability, which could allow an attacker to byp

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A success

NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convin

NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code executi

NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted

NVIDIA B300 MCU contains a vulnerability in the CX8 MCU that could allow a malicious actor to modify unsupported registr

NVIDIA Triton Inference Server Sagemaker HTTP server contains a vulnerability where an attacker may cause an exception.

NVIDIA SNAP-4 Container contains a vulnerability in the configuration interface where an attacker on a VM may cause an i

NVIDIA SNAP-4 Container contains a vulnerability in the VIRTIO-BLK component where a malicious guest VM may cause use of

pyLoad is a free and open-source download manager written in Python. From version 0.4.20 to before version 0.5.0b3.dev97

pyLoad is a free and open-source download manager written in Python. From version 0.4.0 to before version 0.5.0b3.dev97,

MinIO is a high-performance object storage system. Prior to RELEASE.2026-03-17T21-25-16Z, MinIO AIStor's STS (Security T

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in

Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.6, an authoriza

fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From version 4.0.

league/commonmark is a PHP Markdown parser. From version 2.3.0 to before version 2.8.2, the DomainFilteringAdapter in th

solidtime is an open-source time-tracking app. Prior to version 0.11.6, the project detail endpoint GET /api/v1/organiza

Dagu is a workflow engine with a built-in Web user interface. From version 2.0.0 to before version 2.3.1, the fix for CV

NiceGUI is a Python-based UI framework. Prior to version 3.9.0, NiceGUI's app.add_media_file() and app.add_media_files()

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to version 1.

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in Fi

FileRise is a self-hosted web file manager / WebDAV server. From version 1.0.1 to before version 3.10.0, the resumableId

Keystone is a content management system for Node.js. Prior to version 6.5.2, {field}.isFilterable access control can be

MinIO is a high-performance object storage system. From RELEASE.2022-11-08T05-27-07Z to before RELEASE.2026-03-17T21-25-

pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoof

sbt is a build tool for Scala, Java, and others. From version 0.9.5 to before version 1.12.7, on Windows, sbt uses Proce

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the ac

HCL Traveler is affected by sensitive information disclosure.  The application generates some error messages that provid

Astro is a web framework. From version 2.10.10 to before version 5.18.1, this issue concerns Astro's remotePatterns path

Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path head

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version