CVE-2026-24155

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-24155

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-24155

CVE-2026-24155 affects NVIDIA NeMo Framework for all platforms, described as a code injection vulnerability (CWE-94) that can lead to code execution, privilege escalation, information disclosure, and data tampering. The NVIDIA security bulletin states that CVE-2026-24155 is addressed by updating ...

CVE-2026-41459

creationtimestamp| type| source ---|---|--- 2026-06-16 15:57:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/xerteunauthenticatedmediaupload.rb 2026-09-08 06:50:23+00:00| seen|...

eurelis-kb-framework (>=0.0.1, <=0.0.4) potentially affected by CVE-2026-55443 via langchain (0.0.306)

langchain PYPI version 0.0.306 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - eurelis-kb-framework =0.0.1, =0.0.4 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

carton-mcp (>=0.1.80, <=0.1.83), heaven-framework (>=0.1.24, <=0.1.36) +4 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.13)

langchain-anthropic PYPI version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - carton-mcp =0.1.80, =0.1.24, =0.1.5, =0.1.0, =0.1.0, =2.6.13, =2.6.22 Source cves: CVE-2026-55443 Source advisory:...

claraterm (>=0.1.0, <=0.3.6), eurelis-kb-framework (>=0.0.5, <=0.0.7) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.348)

langchain PYPI version 0.0.348 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - claraterm =0.1.0, =0.0.5, =0.0.2b2, =0.2.2, =0.2.7 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

@a1st/aix (>=0.0.3, <=0.8.0), @a1st/aix-core (>=0.2.0, <=0.8.0) +18 more potentially affected by CVE-2026-54299 via astro (>=6.0.0-beta.1, <=6.4.4)

astro NPM version =6.0.0-beta.1, =0.0.3, =0.2.0, =1.11.1, =2.7.0, =0.3.0, =1.4.1, =0.19.0, =0.19.0, =1.10.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-54299 Source advisory: SNYK:JS-ASTRO-17356189...

Improperly Implemented Security Check for Standard

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard in the Lambda@Edge adapter that truncates repeated request headers. An attacker can bypass access restrictions or affect auditing...

Directory Traversal

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Directory Traversal via the serve-static method on Windows hosts when an encoded backslash %5C in the request path is decoded to , which is treated as a separator by the Windows path...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @agent-vm/agent-vm (>=0.0.138, <=0.0.148) +695 more potentially affected by CVE-2026-54286 via hono (>=4.0.0, <=4.12.24)

hono NPM version =4.0.0, =0.3.1, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.0.138, =0.9.0, =0.1.9, =0.2.0, =0.0.1-alpha.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.1-alpha.0, =0.0.1-alpha.37 and more Source cves: CVE-2026-54286 Source advisory: SNYK:JS-HONO-17356405...

CVE-2026-55847

creationtimestamp| type| source ---|---|--- 2026-06-16 13:42:25+00:00| published-proof-of-concept| https://github.com/allure-framework/allure2/security/advisories/GHSA-gx93-m64w-5m6h 2026-09-14 18:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7sny77l36bfpy...

CVE-2026-55846

creationtimestamp| type| source ---|---|--- 2026-06-16 13:40:55+00:00| published-proof-of-concept| https://github.com/allure-framework/allure2/security/advisories/GHSA-82cg-3hv7-74gc 2026-09-14 18:36:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e62n2vhixzajn...

[SECURITY] Fedora 43 Update: hugo-0.162.1-1.fc43

The world=E2=80=99s fastest framework for building websites...

CVE-2026-24155: Improper Control of Generation of Code

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-24228: Deserialization of Untrusted Data

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure...

PT-2026-49976

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Extensibility Framework component of the Oracle Enterprise Manager Base Platform. A high privileged...

PT-2026-50005

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework versions V15 through V16 Description An issue in the Core component of the Oracle Enterprise Command Center Framework allows an unauthenticated attacker with network access via HTTPS to compromise the...

PT-2026-50007

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework versions V15 through V16 Description An issue in the Core component of the Oracle Enterprise Command Center Framework allows a low privileged attacker with network access via HTTPS to compromise the...

PT-2026-49905

Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: Java Business Objects. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the...