17734 matches found
PT-2026-39419
Name of the Vulnerable Software and Affected Versions Next.js versions 13.4.6 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description React Server Component responses are susceptible to cache poisoning in deployments utilizing shared caches with insufficient response partitioning...
PT-2026-39417
Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description An external client can send an x-nextjs-data header on a request to a path handled by middleware that returns a redirect. This causes the middleware or...
CVE-2026-44844
creationtimestamp| type| source ---|---|--- 2026-05-08 23:12:51+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g47v-rwmh-r9f8...
CVE-2026-44325
creationtimestamp| type| source ---|---|--- 2026-05-08 22:56:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f8qv-7x5w-qr48...
CVE-2026-44324
creationtimestamp| type| source ---|---|--- 2026-05-08 22:52:20+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jqfc-gwj5-3w63...
CVE-2026-44323
creationtimestamp| type| source ---|---|--- 2026-05-08 22:52:00+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4rqf-grm6-vf75...
CVE-2026-44322
creationtimestamp| type| source ---|---|--- 2026-05-08 22:50:57+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-j59f-x285-69jx...
CVE-2026-44321
creationtimestamp| type| source ---|---|--- 2026-05-08 22:47:24+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-44qj-cghf-9p97...
CVE-2026-44320
creationtimestamp| type| source ---|---|--- 2026-05-08 22:46:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wqfh-gq79-j8mf...
CVE-2026-44319
creationtimestamp| type| source ---|---|--- 2026-05-08 22:44:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rxrq-fv76-26pr...
CVE-2026-44317
creationtimestamp| type| source ---|---|--- 2026-05-08 22:40:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wwqh-7jm5-gj7w...
CVE-2026-44316
creationtimestamp| type| source ---|---|--- 2026-05-08 22:39:43+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wr8j-6chw-gm6p...
CVE-2026-44209
creationtimestamp| type| source ---|---|--- 2026-05-08 20:36:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gphh-9q3h-jgpp...
GHSA-2CM2-M3W5-GP2F vm2 has access to `VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL`
Summary https://github.com/patriksimek/vm2/security/advisories/GHSA-wp5r-2gw5-m7q7 is not fully patched. Details It is still possible to get access to VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL. PoC js const VM = require"vm2"; const vm = new VM; console.logvm.run...
CVE-2026-32707
creationtimestamp| type| source ---|---|--- 2026-05-08 15:00:06+00:00| published-proof-of-concept| Telegram/bpwD1lFGrjpZJE8nZPfkQ7he0n0Dc1Zua8DNoZEQncgtG5Y...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
DIRTYFAIL A unified detector and PoC harness for the Copy...