261058 matches found
EUVD-2026-52742
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching...
EUVD-2026-52728
Memory corruption while processing a packet with a size close to the maximum allowed value...
CVE-2026-60007
creationtimestamp| type| source ---|---|--- 2026-08-04 13:30:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i 2026-08-04 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117037480022382500 2026-08-04 14:06:28+00:00| seen|...
EEF-CVE-2026-66884 Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection
Summary Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc\plug Oidcc.Plug.AuthorizationCallback module allows an attacker to make a victim's browser complete an authorization flow the victim never initiated. This vulnerability is associated with program file...
Exploit for Interpretation Conflict in Wordpress
C...
ROOT-APP-PYPI-CVE-2026-48735 CVE-2026-48735 in pypdf - Patched by Root
Root has patched CVE-2026-48735 in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54530 CVE-2026-54530 in pypdf - Patched by Root
Root has patched CVE-2026-54530 in the pypdf package for Root:PyPI. Multiple fixed versions available...
CVE-2026-14465 Session Fixation in Bilin Software's HUMANIST Digital Human Resources
Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs aka Session Replay. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-67243
freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands...
CVE-2026-16069
The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...
ROOT-APP-PYPI-CVE-2026-47265 CVE-2026-47265 in aiohttp - Patched by Root
Root has patched CVE-2026-47265 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54278 CVE-2026-54278 in aiohttp - Patched by Root
Root has patched CVE-2026-54278 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69225 CVE-2025-69225 in aiohttp - Patched by Root
Root has patched CVE-2025-69225 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34517 CVE-2026-34517 in aiohttp - Patched by Root
Root has patched CVE-2026-34517 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
EUVD-2026-52586
The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's...
EUVD-2026-52585
The Quiz and Survey Master QSM WordPress plugin before 11.2.2 does not properly escape a question setting before outputting it into an unquoted HTML attribute, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the browser of any user viewing th...
ROOT-APP-PYPI-CVE-2026-48775 CVE-2026-48775 in langgraph-checkpoint - Patched by Root
Root has patched CVE-2026-48775 in the langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available...
CVE-2026-18739
A flaw was found in popt, a command-line option parsing library. An of...