CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

196380 matches found

Snyk•added 2026/05/11 9:00 p.m.•54 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...

9.8CVSS8AI score0.01054EPSS

SaveExploits3References2

Snyk•added 2026/05/11 9:00 p.m.•23 views

Embedded Malicious Code

9.8CVSS8AI score0.01054EPSS

SaveExploits3References2

Snyk•added 2026/05/11 9:00 p.m.•31 views

Embedded Malicious Code

9.8CVSS8AI score0.01054EPSS

SaveExploits3References2

RedhatCVE•added 2026/05/11 8:26 p.m.•25 views

CVE-2026-44336

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP Model Context Protocol server praisonai mcp serve registers four file-handling tools by default — praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and praisonai.workflow.show. Each accepts a pat...

9.6CVSS6.4AI score0.00674EPSS

SaveExploits1References1

vulnersOsv•added 2026/05/11 7:37 p.m.•9 views

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +244 more potentially affected by CVE-2026-41159 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-41159 Source advisory: OSV:GHSA-87F9-HVMW-GH4P...

5.3CVSS5.8AI score0.00549EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 7:36 p.m.•9 views

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @airp/validate-cli (>=1.1.0, <=1.1.3) +165 more potentially affected by CVE-2026-41150 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =1.1.0, =0.0.3, =0.7.9, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.1.0, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.4.0 - @fgbg/mdocs 1.2.0 and more Source cves: CVE-2026-41150 Source advisory: OSV:GHSA-6M6C-36F7-FHXH...

5.3CVSS5.8AI score0.0053EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 7:36 p.m.•8 views

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @airp/validate-cli (>=1.1.0, <=1.1.3) +165 more potentially affected by CVE-2026-41149 via mermaid (>=11.0.0, <=11.14.0)

5.3CVSS5.8AI score0.00521EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 7:36 p.m.•8 views

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +244 more potentially affected by CVE-2026-41148 via mermaid (>=10.0.0, <=10.9.5)

5.3CVSS5.8AI score0.00603EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:21 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +773 more potentially affected by CVE-2026-45109 via next (>=16.0.0, <=16.2.5)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-45109 Source advisory:...

7.5CVSS7.2AI score0.00761EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:12 p.m.•10 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)

5.9CVSS5.6AI score0.00203EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 4:12 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44572 via next (>=16.0.0, <=16.2.4)

5.9CVSS5.6AI score0.00203EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 3:57 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44581 via next (>=16.0.0, <=16.2.4)

4.7CVSS5.7AI score0.00248EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:57 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44581 via next (>=16.0.0, <=16.2.4)

4.7CVSS5.7AI score0.00248EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•8 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44582 via next (>=16.0.0, <=16.2.4)

3.7CVSS5.6AI score0.00172EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:56 p.m.•11 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44577 via next (>=16.0.0, <=16.2.4)

7.5CVSS7.2AI score0.00943EPSS

SaveExploits1

vulnersOsv•added 2026/05/11 3:54 p.m.•12 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +772 more potentially affected by CVE-2026-44576 via next (>=16.0.0, <=16.2.4)

5.4CVSS6AI score0.00304EPSS

SaveExploits0

vulnersOsv•added 2026/05/11 2:50 p.m.•9 views

@c0va23/react-router-dev (7.8.3-alpha.2), @holocron.so/cli (>=0.6.0, <=0.16.0) +16 more potentially affected by unknown CVE via @vitejs/plugin-rsc (>=0.4.11, <=0.5.24)

@vitejs/plugin-rsc NPM version =0.4.11, =0.6.0, =0.5.0, =0.0.1, =0.0.0-1ae0b37, =0.0.0-experimental-14dc7c1, =0.0.0-pr-32412-sha-076721d1, =1.0.2, =0.1.0, =0.1.1, =0.0.1, =1.18.0-rsc.19, =0.1.0, =0.0.1-alpha.0, =0.0.1-alpha.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W94C-4VHP-2...

5.8AI score

SaveExploits0

EUVD•added 2026/05/11 2:50 p.m.•72 views

EUVD-2026-27867

Facebook React has a Denial of Service Vulnerability in React Server Components...

7.5CVSS7.2AI score0.01533EPSS

SaveExploits1References4

vulnersOsv•added 2026/05/11 2:42 p.m.•10 views

0perator (>=0.1.0, <=0.3.0), 0xble (>=5.0.0, <=14.1.0) +3054 more potentially affected by CVE-2026-44902 via @opentelemetry/sdk-node (>=0.10.2, <=0.216.0)

@opentelemetry/sdk-node NPM version =0.10.2, =0.1.0, =5.0.0, =0.1.1, =0.0.1, =0.8.0, =0.1.1, =0.1.1, =0.1.1, =0.1.8, =0.1.5, =1.0.5, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =0.2.0, =0.2.0, =0.2.6 and more Source cves: CVE-2026-44902 Source advisory: OSV:GHSA-Q7RR-3CGH-J5...

7.5CVSS5.8AI score0.00486EPSS

SaveExploits1

OSV•added 2026/05/11 1:58 p.m.•69 views

GHSA-9MQQ-JQXF-GRVW PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Summary PraisonAI's MCP Model Context Protocol server praisonai mcp serve registers four file-handling tools by default — praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and praisonai.workflow.show. Each accepts a path or filename string from MCP tools/call arguments and joi...

9.6CVSS6.5AI score0.00674EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by