2026

Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea

Greenshot is an open source Windows screenshot utility. Versions 1.3.312 and below have untrusted executable search path

Uptime Kuma is an open source, self-hosted monitoring tool. In versions 1.23.0 through 2.2.0, the fix from GHSA-vffh-c9p

H3 is a minimal H(TTP) framework. Versions 2.0.1-beta.0 through 2.0.0-rc.8 contain a Timing Side-Channel vulnerability i

H3 is a minimal H(TTP) framework. In versions prior to 1.15.6 and between 2.0.0 through 2.0.1-rc.14, createEventStream i

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In versions 0.16.2 and be

Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Versions prior to 0.17.0-

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Versions 0.8.2 and below

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injectio

Cross-Site request forgery (CSRF) vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Vasilis Triantafyl

The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17.

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.

Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.8.4 and

FastGPT is an AI Agent building platform. In versions 4.14.8.3 and below, the fastgpt-preview-image.yml workflow is vuln

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.9.0, a hardcoded default encryption k

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, the WebDAV upload endpoint accep

FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, a missing-authentication vulnera

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading

Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, includ

SiYuan is a personal knowledge management system. Versions 3.6.0 and below render package metadata fields (displayName,

SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the backend renderREADME function uses lu

Qwik is a performance-focused JavaScript framework. Versions prior to 1.19.2 improperly inferred arrays from dotted form

The CM Custom Reports – Flexible reporting to track what matters most plugin for WordPress is vulnerable to Stored Cross

The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, an

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. In versions prior to 2.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending catch

In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: fix NULL pointer dereference in ip

In the Linux kernel, the following vulnerability has been resolved: net: add xmit recursion limit to tunnel xmit functi

In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task work

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM

In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_com

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set->nel

In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_fr

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. In versions prior to 1.

Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions prior to 1.4.2

Jexactyl is a customisable game management panel and billing system. Commits after 025e8dbb0daaa04054276bda814d922cf4af5

CKAN MCP Server is a tool for querying CKAN open data portals. Versions prior to 0.4.85 provide tools including ckan_pac

Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explic

tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, th

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Versions 0.60.0 through 1.0.0

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function

A vulnerability was determined in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This affects an unknown function

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The impacted element is an unknown fun

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The affected element is an unknow

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adm

tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips th