CVE-2026-107314

The pgjdbc PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 , contains a vulnerability where the requireAuth connection property fails to enforce restrictions if all six known authentication methods are excluded (e.g., requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none). In these ...

CVE-2026-44450: Improper Neutralization of Argument Delimiters in a Command

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the args array to the child process without any validation. Every binary on the allowlist accepts an inline-code executi...