28545 matches found
CVE-2026-107290
The Pydantic AI Python agent framework is vulnerable to a denial-of-service condition in the local web_fetch_tool and the WebFetch local fallback process. Specifically, versions 1.77.0 to 1.107.6 and 2.44.0 exhibit quadratic title extraction , whitespace normalization, and ordered-list numbering ...
CVE-2026-107290 Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and...
CVE-2026-107290
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and...
CVE-2026-107290 Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and...
CVE-2026-107290 Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and...
EUVD-2026-95093
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and...
Azure Event Grid Spoofing Vulnerability
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network...
CVE-2026-105891
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105893
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105888
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105893
The Liquid Web / StellarWP Event Tickets plugin (version 5.30.0.1 and earlier) is vulnerable to an Authorization Bypass caused by a User-Controlled Key vulnerability. This flaw allows for the manipulation of User-Controlled Variables , potentially leading to unauthorized access. The CVSS 3.1 scor...
CVE-2026-105893 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...
EUVD-2026-94954
Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Event Tickets versions = 5.30.0.1...
CVE-2026-105891 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105891
The Liquid Web / StellarWP Event Tickets plugin (event-tickets) is affected by a Missing Authorization vulnerability in versions up to and including 5.30.0.1 . This issue allows for the exploitation of incorrectly configured access control security levels , potentially leading to unauthorized act...
EUVD-2026-94951
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...
CVE-2026-105888
The Liquid Web / StellarWP Event Tickets WordPress plugin (versions
CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...