Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

13645 matches found

vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•3 views

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.30.1) +268 more potentially affected by CVE-2026-73420 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: CVE-2026-73420 Source...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•3 views

@aangeles/jefeui (>=1.10.0, <=1.11.6), @aion0/forge (>=0.1.0, <=0.15.56) +67 more potentially affected by CVE-2026-73420 via next-auth (>=5.0.0-beta.3, <=5.0.0-beta.31)

next-auth NPM version =5.0.0-beta.3, =1.10.0, =0.1.0, =1.2.0, =0.1.0, =1.2.4-main.127b5b3.33, =0.0.2, =0.1.0-rc.1, =1.0.0, =0.1.6, =1.0.0, =0.106.0-rc.0, =1.0.16, =1.0.17 - @irshadkhan-dev/pandapulse-db 0.0.1 and more Source cves: CVE-2026-73420 Source advisory: GHSA-7RQJ-J65F-68WH...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•4 views

@aangeles/jefeui (>=1.10.0, <=1.11.6), @aion0/forge (>=0.1.0, <=0.15.56) +67 more potentially affected by CVE-2026-73420 via next-auth (>=5.0.0-beta.3, <=5.0.0-beta.31)

next-auth NPM version =5.0.0-beta.3, =1.10.0, =0.1.0, =1.2.0, =0.1.0, =1.2.4-main.127b5b3.33, =0.0.2, =0.1.0-rc.1, =1.0.0, =0.1.6, =1.0.0, =0.106.0-rc.0, =1.0.16, =1.0.17 - @irshadkhan-dev/pandapulse-db 0.0.1 and more Source cves: CVE-2026-73420 Source advisory: OSV:GHSA-7RQJ-J65F-68WH...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0
Patchstack
Patchstack•added 2026/07/23 2:40 p.m.•19 views

NPM: Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass

NPM: Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass vulnerability discovered by ? in WordPress Npm next-auth versions = 4.10.3, 4.24.15...

5.3AI score
SaveExploits0References7Affected Software1
vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•16 views

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +51 more potentially affected by CVE-2026-73420 via next-auth (>=4.10.3, <=4.24.13)

next-auth NPM version =4.10.3, =1.9.0, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =0.0.0-experimental-20251015143743, =0.0.0-experimental-20231123101256, =4.4.0 and more Source cves: CVE-2026-73420 Source advisory: OSV:GHSA-7RQJ-J65F-68WH...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•24 views

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.30.1) +268 more potentially affected by unknown CVE via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: unknown CVE Source advisory...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•3 views

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +51 more potentially affected by CVE-2026-73420 via next-auth (>=4.10.3, <=4.24.13)

next-auth NPM version =4.10.3, =1.9.0, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =0.0.0-experimental-20251015143743, =0.0.0-experimental-20231123101256, =4.4.0 and more Source cves: CVE-2026-73420 Source advisory: GHSA-7RQJ-J65F-68WH...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:40 p.m.•18 views

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.30.1) +268 more potentially affected by CVE-2026-73420 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: CVE-2026-73420 Source...

9.1CVSS5.8AI score0.00725EPSS
SaveExploits0
Snyk
Snyk•added 2026/07/23 2:31 p.m.•31 views

Improper Verification of Source of a Communication Channel

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim's...

7.6CVSS5.9AI score
SaveExploits0References4
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•2 views

@aangeles/jefeui (>=1.10.0, <=1.11.6), @aion0/forge (>=0.1.0, <=0.15.56) +67 more potentially affected by unknown CVE via next-auth (>=5.0.0-beta.3, <=5.0.0-beta.31)

next-auth NPM version =5.0.0-beta.3, =1.10.0, =0.1.0, =1.2.0, =0.1.0, =1.2.4-main.127b5b3.33, =0.0.2, =0.1.0-rc.1, =1.0.0, =0.1.6, =1.0.0, =0.106.0-rc.0, =1.0.16, =1.0.17 - @irshadkhan-dev/pandapulse-db 0.0.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTAUTH-18306841...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•2 views

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.30.1) +270 more potentially affected by unknown CVE via @auth/core (>=0.0.0-380f8d56, <=0.41.2)

@auth/core NPM version =0.0.0-380f8d56, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: unknown CVE Source...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•3 views

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.30.1) +270 more potentially affected by CVE-2026-73419 via @auth/core (>=0.0.0-380f8d56, <=0.41.2)

@auth/core NPM version =0.0.0-380f8d56, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: CVE-2026-73419...

6.8CVSS5.8AI score0.00249EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•3 views

@aangeles/jefeui (>=1.10.0, <=1.11.6), @aion0/forge (>=0.1.0, <=0.15.56) +67 more potentially affected by CVE-2026-73419 via next-auth (>=5.0.0-beta.3, <=5.0.0-beta.31)

next-auth NPM version =5.0.0-beta.3, =1.10.0, =0.1.0, =1.2.0, =0.1.0, =1.2.4-main.127b5b3.33, =0.0.2, =0.1.0-rc.1, =1.0.0, =0.1.6, =1.0.0, =0.106.0-rc.0, =1.0.16, =1.0.17 - @irshadkhan-dev/pandapulse-db 0.0.1 and more Source cves: CVE-2026-73419 Source advisory: GHSA-X445-F3H2-J279...

6.8CVSS5.8AI score0.00249EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•3 views

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.30.1) +270 more potentially affected by CVE-2026-73419 via @auth/core (>=0.0.0-380f8d56, <=0.41.2)

@auth/core NPM version =0.0.0-380f8d56, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: CVE-2026-73419...

6.8CVSS5.8AI score0.00249EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•2 views

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +54 more potentially affected by CVE-2026-73419 via next-auth (>=4.0.0-beta.6, <=4.24.13)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: CVE-2026-73419 Source advisory: GHSA-X445-F3H2-J279...

6.8CVSS5.8AI score0.00249EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•20 views

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +54 more potentially affected by unknown CVE via next-auth (>=4.0.0-beta.6, <=4.24.13)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-NEXTAUTH-18306841...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•3 views

@aangeles/jefeui (>=1.10.0, <=1.11.6), @aion0/forge (>=0.1.0, <=0.15.56) +67 more potentially affected by CVE-2026-73419 via next-auth (>=5.0.0-beta.3, <=5.0.0-beta.31)

next-auth NPM version =5.0.0-beta.3, =1.10.0, =0.1.0, =1.2.0, =0.1.0, =1.2.4-main.127b5b3.33, =0.0.2, =0.1.0-rc.1, =1.0.0, =0.1.6, =1.0.0, =0.106.0-rc.0, =1.0.16, =1.0.17 - @irshadkhan-dev/pandapulse-db 0.0.1 and more Source cves: CVE-2026-73419 Source advisory: OSV:GHSA-X445-F3H2-J279...

6.8CVSS5.8AI score0.00249EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/07/23 2:31 p.m.•26 views

@chirpy-dev/analytics (0.0.1), @chirpy-dev/bootstrapper (0.1.0) +54 more potentially affected by CVE-2026-73419 via next-auth (>=4.0.0-beta.6, <=4.24.13)

next-auth NPM version =4.0.0-beta.6, =0.1.0, =1.9.0, =1.9.9, =0.1.0-0, =1.5.0, =0.0.2, =1.0.0, =1.0.0, =0.0.0-experimental-20231123101256, =5.1.0 and more Source cves: CVE-2026-73419 Source advisory: OSV:GHSA-X445-F3H2-J279...

6.8CVSS5.8AI score0.00249EPSS
SaveExploits0
osv_pysec
osv_pysec•added 2026/07/23 11:41 a.m.•36 views

PYSEC-2026-3475 LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

Summary When LightRAG is deployed with LIGHTRAGAPIKEY set but AUTHACCOUNTS unset an officially documented "API-Key authentication" mode, the X-API-Key protection can be bypassed by any remote unauthenticated attacker. The bypass does not require network contact with the victim server — an attacke...

9.3CVSS6.2AI score0.00509EPSS
SaveExploits0References8
osv_pysec
osv_pysec•added 2026/07/23 11:41 a.m.•39 views

PYSEC-2026-3484 meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token Summary AuthInjectionMiddleware in meta-ads-mcp rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent. Because extracttokenfromheaders does not recognise the X-Pipeboard-Token header, an attacker who sends...

7.4CVSS6AI score0.00518EPSS
SaveExploits0References6
Rows per page
Query Builder