261926 matches found
GHSA-8PV3-6RR2-F4R8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GRFX-V4XP-4M33 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17741 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17952 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-37XG-V5FF-WMH2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17767 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17869 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17948 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17887 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3Q78-FQJ5-G3MC vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-18954
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode...
CVE-2026-18954 Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable aggregation pipeline stages that bypass the read-only mode...
CVE-2026-17623
creationtimestamp| type| source ---|---|--- 2026-08-05 19:54:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecmaqf5a23...
CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts
Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...
Exploit for Eval Injection in Langflow
No d...
CVE-2026-10128
creationtimestamp| type| source ---|---|--- 2026-08-05 18:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cvh7ufxaqy3uh...
CVE-2026-70448
creationtimestamp| type| source ---|---|--- 2026-08-05 18:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3uu2plyyoihiq...
CVE-2026-17632 Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...
CVE-2026-17632
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...
