3444 matches found
CVE-2026-25703 Potential information leakage from manager /network/graph API in NeuVector
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703
NeuVector up to version 5.4.9 potentially leaks information from the manager, specifically via the /network/graph API, due to missing authentication and cached data containing sensitive information. Affected component: NeuVector manager API surface; vulnerability arises from insufficient access c...
EUVD-2026-53297
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
CVE-2026-25703
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
kin v0.5.0
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
slater v0.24.4
Slater Current version:v0.25.2 — all releases. In one line: Slater serves graphs that don't fit in memory — hundreds of millions of nodes and billions of edges in low hundreds of MB of RAM — over standard Bolt , so any neo4j driver just works, with disk-native vector search sitting next to the...
PT-2026-68089
Name of the Vulnerable Software and Affected Versions NeuVector versions prior to 5.5.0 Description Information may be leaked from the manager '/network/graph' API endpoint due to missing authentication and the presence of cached data containing sensitive information. Recommendations Update to...
CVE-2026-25703: Missing Authentication for Critical Function
NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information...
kin v0.4.8
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
MAL-2026-11696 Malicious code in @or-sdk/graph (npm)
npm/@or-sdk/graph is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...
Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework
While retrieval-augmented generation systems partially address the hallucination issues in large language models, it also introduces new vulnerabilities to knowledge corruption attacks. Adversaries exploit these vulnerabilities by poisoning documents provided by RAG system to manipulate LLM...
CLEAR: Causal Context-Based Agentic Reasoning for Vulnerability Detection
Detecting source code vulnerabilities is increasingly difficult as modern security flaws are rooted in complex causal dependencies between execution flows, control conditions, and program states. Despite recent advances in Large Language Models LLMs and multi-agent frameworks, existing approaches...
EntailLLM: Verifying LLM-Generated Vulnerability Discovery Paths with Domain Knowledge Via Logic Programming
Large language models are increasingly used to reason about software vulnerabilities, but their outputs can silently violate domain knowledge, limiting their reliability in safety-critical settings such as medical devices. Prior work either treats that output as a prediction to be scored or...
kin v0.4.6
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
slater v0.24.3
Slater Current version:v0.25.2 — all releases. In one line: Slater serves graphs that don't fit in memory — hundreds of millions of nodes and billions of edges in low hundreds of MB of RAM — over standard Bolt , so any neo4j driver just works, with disk-native vector search sitting next to the...
kin v0.4.5
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
bunkatopics (>=0.26.0, <=0.34.0), df-graph-construction (0.1.0) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.0)
sentence-transformers PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - bunkatopics =0.26.0, =0.34.0 - df-graph-construction 0.1.0 - envbert 1.0.6 - leet-topic 0.0.3 - textdiversity 0.0.1...
NPM: `nx graph` dev server permissive CORS policy
NPM: nx graph dev server permissive CORS policy vulnerability discovered by ? in WordPress Npm nx versions = 17.0.4, 22.7.2...
`nx graph` dev server permissive CORS policy
Summary The local HTTP server started by nx graph sent Access-Control-Allow-Origin: on every response, letting any website a developer visited read the server's responses cross-origin — including the full project graph and the output of the /help endpoint, which runs a target's configured help...