EuConform

EuConform 🇪🇺 Open-Source Evidence Toolkit For AI Compliance Open evidence format • Local bias evaluation • Schema validation • CycloneDX interoperability Offline-first • Privacy-preserving • Reusable artifacts • WCAG 2.2 AA accessible EuConform defines an open evidence format for AI compliance and...

CVE-2026-125117

A flaw was found in mongoose. When processing untrusted database documents or update queries, the library improperly traverses inherited object properties and overwrites shared built-in functions. A remote attacker can exploit this vulnerability by submitting crafted document keys to cause a Deni...

CVE-2026-125881 Schema-hint SSRF via service import schema validation

Server-Side request forgery SSRF vulnerability in N-able N-central allows Server Side Request Forgery. This issue affects N-central: before 26.4.1...

CVE-2026-125881

A Server-Side Request Forgery (SSRF) vulnerability exists in N-able N-central versions prior to 26.4.1 . The flaw is caused by improper service import schema validation using a schema-hint. This vulnerability allows an attacker to perform SSRF attacks against the server. No specific exploit code ...

CVE-2026-120817

A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server...

CVE-2026-120817 Post-authentication race condition in MongoDB Server geospatial schema validation

A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server...

CVE-2026-120817

A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server...

EUVD-2026-122833

A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server...

CVE-2026-120817

A race condition exists in the schema validation component of MongoDB Server . This vulnerability occurs when concurrent writes are validated against a collection validator utilizing geospatial query operators . An authenticated user with write privileges can trigger this condition, which may lea...

PT-2026-144616

A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server...

CVE-2026-123846

In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation...

CVE-2026-123846

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a blind SSRF (Server-Side Request Forgery) vulnerability exists. The flaw is triggered via remote references during JSON Schema validation . The impact is categorized as a low-severity confidentiality risk requiring user interaction. Remediati...

CVE-2026-123846

In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation...

EUVD-2026-118349

In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation...

CVE-2026-123846: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation

In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation...

CVE-2026-117680

Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches a schema regex only after heavy backtracking...

CVE-2026-117680 jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches a schema regex only after heavy backtracking...

CVE-2026-117680 jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches a schema regex only after heavy backtracking...

CVE-2026-117680

Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches a schema regex only after heavy backtracking...

CVE-2026-117680

The lud jsv library (versions 0.1.0 to 0.26.2 ) contains an Improper Check for Unusual or Exceptional Conditions (CWE-754) in the pattern and patternProperties keywords. The root cause is that JSV.Helpers.RegexExt.bounded_match?/2 executes regexes with a backtracking budget but omits :report_erro...