15899 matches found
CVE-2026-34733
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
CVE-2026-34733 AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI Guard
WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a PHP operator precedence bug in its CLI-only access guard. The script is intended to run exclusively from the command line, but the guard condition...
@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +251 more potentially affected by CVE-2026-2950 via lodash.unset (>=4.0.2, <=4.5.2)
lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2026-2950 Source advisory: MEND:CVE-2026-2950...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=7.4.5) +223 more potentially affected by CVE-2026-34361 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=1.0.0, <=6.9.3)
ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =1.0.0, =4.0.0, =5.6.5, =4.1.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =4.0.0, =4.0.0, =8.8.2 and more Source cves: CVE-2026-34361 Source advisory: MEND:CVE-2026-34361...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5, <=7.4.5) +223 more potentially affected by CVE-2026-34360 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=1.0.0, <=6.9.3)
ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =1.0.0, =4.0.0, =5.6.5, =4.1.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =4.0.0, =4.0.0, =8.8.2 and more Source cves: CVE-2026-34360 Source advisory: MEND:CVE-2026-34360...
CVE-2026-33762 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, crossplane, snyk-cli, grafana-alloy, kots, pulumi-language-dotnet, src-fingerprint-fips, commercial-chainloop-cli, osv-scanner, kubevela-fips, chezmoi, pulumi-kubernetes-operator, witness, jfrog-cli, kubescape, melange, external-secrets-operator-fips...
CVE-2026-34165 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, crossplane, snyk-cli, grafana-alloy, kots, pulumi-language-dotnet, src-fingerprint-fips, commercial-chainloop-cli, osv-scanner, kubevela-fips, chezmoi, pulumi-kubernetes-operator, witness, jfrog-cli, kubescape, melange, external-secrets-operator-fips...
GHSA-GM2X-2G9H-CCM8 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, crossplane, snyk-cli, grafana-alloy, kots, pulumi-language-dotnet, src-fingerprint-fips, commercial-chainloop-cli, osv-scanner, kubevela-fips, chezmoi, pulumi-kubernetes-operator, witness, jfrog-cli, kubescape, melange, external-secrets-operator-fips...
moca (0.3.3), oraclebmc (>=1.1.0, <=1.1.1) +2 more potentially affected by CVE-2026-34073 via cryptography (1.5.2)
cryptography PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - moca 0.3.3 - oraclebmc =1.1.0, =2.1.0, =2.1.3 - teamvault 0.6.1 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...
aba-cli-scrapper (>=0.6.0, <=0.7.6), agixt (>=1.7.0, <=1.7.2) +130 more potentially affected by CVE-2026-34073 via cryptography (43.0.1)
cryptography PYPI version 43.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aba-cli-scrapper =0.6.0, =1.7.0, =3.0.0, =2.9.0, =0.2.1, =0.0.81, =1.0.648, =1.0.2, =0.1.0.post173, =0.1.1, =1.1.45, =0.0.1, =0.0.5 and...
ais-dom (>=0.96.10, <=0.98.9), ali-cli (>=0.5.1, <=0.7.2) +52 more potentially affected by CVE-2026-34073 via cryptography (2.7.0)
cryptography PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.96.10, =0.5.1, =0.0.1, =0.5.0, =1.0.1, =1.0.1, =0.0.5a0, =0.2.12, =2.5.6, =0.1.0, =0.5.1, =0.5.2 - duo-universal 1.0.1 -...
ais-dom (>=0.92.5, <=0.95.7), bitwarden-simple-cli (>=1.0.0, <=1.3.1) +29 more potentially affected by CVE-2026-34073 via cryptography (2.6.1)
cryptography PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.92.5, =1.0.0, =1.7.1, =0.2.5, =0.0.0, =0.0.17, =0.0.1.dev33, =0.1.8, =0.4.3, =0.1.0, =1.0.5 - ezissue-br 1.0.0 and more Sourc...
algorin-cli (>=0.0.1, <=0.21.0), alita-sdk (>=0.0.1, <=0.0.16) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.1.30)
langchain-core PYPI version 0.1.30 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - algorin-cli =0.0.1, =0.0.1, =0.0.2, =0.0.6 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...
pdd-cli (>=0.0.28, <=0.0.94) potentially affected by CVE-2026-34070 via langchain-core (0.3.56)
langchain-core PYPI version 0.3.56 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - pdd-cli =0.0.28, =0.0.94 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...
aa-rag (>=0.4.2, <=0.4.3), ai-parrot (>=0.5.18, <=0.6.4) +11 more potentially affected by CVE-2026-34070 via langchain-core (0.3.51)
langchain-core PYPI version 0.3.51 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.4.2, =0.5.18, =2025.4.71026, =2025.5.11802, =0.1.0, =2025.4.101146, =2025.9.111721, =2025.4.181139, =2025.5.91122, =0.1.8...
ai-parrot (>=0.5.0, <=0.5.17), aiagents4pharma (>=0.0.0, <=1.49.1) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.40)
langchain-core PYPI version 0.3.40 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ai-parrot =0.5.0, =0.0.0, =0.0.18, =0.0.21 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...
CVE-2026-4923 vulnerabilities
Vulnerabilities for packages: gemini-cli, opensearch-dashboards, saf, vitess, tileserver-gl, langfuse, kibana, langfuse-fips, tileserver-gl-fips, opensearch-dashboards-fips, thingsboard, redisinsight, wazuh-dashboard, code-server...
CVE-2026-4926 vulnerabilities
Vulnerabilities for packages: gemini-cli, opensearch-dashboards, saf, vitess, tileserver-gl, langfuse, kibana, langfuse-fips, tileserver-gl-fips, opensearch-dashboards-fips, thingsboard, redisinsight, wazuh-dashboard, code-server...
GHSA-27V5-C462-WPQ7 vulnerabilities
Vulnerabilities for packages: gemini-cli, opensearch-dashboards, saf, vitess, tileserver-gl, langfuse, kibana, langfuse-fips, tileserver-gl-fips, opensearch-dashboards-fips, thingsboard, redisinsight, wazuh-dashboard, code-server...
GHSA-J3Q9-MXJG-W52F vulnerabilities
Vulnerabilities for packages: gemini-cli, opensearch-dashboards, saf, vitess, tileserver-gl, langfuse, kibana, langfuse-fips, tileserver-gl-fips, opensearch-dashboards-fips, thingsboard, redisinsight, wazuh-dashboard, code-server...