2026

openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting i

ApostropheCMS is an open-source content management framework. Prior to version 3.5.3 of `@apostrophecms/import-export`,

ApostropheCMS is an open-source content management framework. Prior to version 4.28.0, the bearer token authentication m

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar a

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color space

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-a

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.35, SandboxJS timers have an execution-quota bypass. A global

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process

OpenProject is an open-source, web-based project management software. In versions prior to 16.6.9, 17.0.6, 17.1.3, and 1

OpenProject is an open-source, web-based project management software. Versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2

Devise is an authentication solution for Rails based on Warden. Prior to version 5.0.3, a race condition in Devise's Con

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.4, the REST API `get

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-17 and 6.9

ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability ex

SAMtools is a program for reading, manipulating and writing bioinformatics file formats. Starting in version 1.17, in th

SAMtools is a program for reading, manipulating and writing bioinformatics file formats. The `mpileup` command outputs D

OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows r

OpenEMR is a free and open source electronic health records and medical practice management application. In versions up

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker t

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZ

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same secur

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports v

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glance

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, the `/

Glances is an open-source system cross-platform monitoring tool. Glances recently added DNS rebinding protection for the

Glances is an open-source system cross-platform monitoring tool. The GHSA-x46r fix (commit 39161f0) addressed SQL inject

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA se

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hard

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web manag

The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure

A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied inpu

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a cra

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensiti