CVE-2026-31863

CVE-2026-31863 affects Anytype Heart: the challenge-based authentication for the local gRPC client API can be bypassed, allowing unauthorized access without the 4-digit code via a local attack vector. Affects Anytype Heart; attack vector LOCAL, complexity HIGH, privileges REQUIRED LOW, with only ...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force in the challenge process. An attacker can gain unauthorized access to the local gRPC API by bypassing the 4-digit code authentication mechanism. This is only exploitable if the attacker has local user-level access to the...

PT-2013-1827 · Inkscape +1 · Inkscape +1

Name of the Vulnerable Software and Affected Versions: Inkscape versions prior to 0.48.4 Description: The issue concerns an XML external entity XXE injection attack in the rasterization process. This allows local users to read arbitrary files via an external entity in a SVG file. Recommendations:...