CVE-2026-54510: Improper Authentication

Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrfexemptforapitokens beforerequest hook in src/app.py calls csrf.exemptviewfunc, permanently adding the selected view to Flask-WTF's process-global exemption set. The...

CVE-2026-54504: Missing Authentication for Critical Function

MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13.0 until 1.13.1, the automatically started Web UI in src/server.ts calls startWebServer in src/web-server.ts with STARTWEBUI enabled by default and WEBPORT set to 3080...

CVE-2026-71538: Improper Neutralization of Special Elements used in an OS Command

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npmexecpath does not provide the npm CLI path, can construct a shell command containing an untrusted value from the --workspace...

PT-2026-95103

Name of the Vulnerable Software and Affected Versions Speakr versions prior to 0.8.21-alpha Description An issue exists where the csrf exempt for api tokens before request hook in src/app.py calls csrf.exemptview func, which permanently adds the selected view to the process-global exemption set o...

CVE-2026-92474

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92475

A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...

CVE-2026-92473

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gfsgcommanddel of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free. The attack needs to be performed locally. The exploit is publicly available and migh...

CVE-2026-81176 Svelte devalue: DoS via malformed input

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2, devalue.parse does not reject out-of-bounds indices that are greater than or equal to values.length in src/parse.js. A specially crafted untrusted payload c...

CVE-2026-92418 ChangeWeDer crm Save Endpoint customer.serve.js cross site scripting

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/public/js/customerServe/customer.serve.js of the component Save Endpoint. This manipulation of the argument customerName causes...

CVE-2026-92627

A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c of HDF5 versions before 1.14.2 . When converting a compound datatype containing floating-point members during a dataset read, a temporary buffer allocated with calloc() is freed and subsequently read from within the sa...

CVE-2026-81176: Allocation of Resources Without Limits or Throttling

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2, devalue.parse does not reject out-of-bounds indices that are greater than or equal to values.length in src/parse.js. A specially crafted untrusted payload c...

CVE-2026-92472: Use After Free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

CVE-2026-63128: Uncontrolled Resource Consumption

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamablehttpserver/tower.rs allows an unauthenticated client to send a well-formed JSON-RPC POST that is not an initialization request, or a...

PT-2026-93876

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.1 Description A remote attack can be initiated against the PFCP Session Report Request Handler component. The issue resides in the smf n4 handle session report request function within the src/smf/n4-handler.c file...

PT-2026-93944

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description An out-of-bounds read occurs in the wait for header and parse function within the src/utils/downloader.c file. This issue is triggered by the manipulation of the Content-Range argument and requires local acce...

CVE-2026-92213: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

PT-2026-93739

Name of the Vulnerable Software and Affected Versions ag-ui-protocol ag-ui version 1.0 Description A flaw in the JSON Parser component, specifically within the file src/stream/sse parser.cpp, allows a remote attacker to cause resource consumption through manipulation. Recommendations Apply patch...

CVE-2026-92474: Use After Free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

CVE-2026-92363: Uncontrolled Resource Consumption

A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/stream/sseparser.cpp of the component JSON Parser. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. This patch is called...

CVE-2026-92475: Out-of-bounds Read

A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...