CVE-2026-87859 vulnerabilities

Vulnerabilities for packages: json-server, tileserver-gl...

GHSA-9F6G-J8CH-79G4 vulnerabilities

Vulnerabilities for packages: json-server, tileserver-gl...

GHSA-9F6G-J8CH-79G4 vulnerabilities

Vulnerabilities for packages: tileserver-gl, json-server...

CVE-2026-87859 vulnerabilities

Vulnerabilities for packages: tileserver-gl, json-server...

CVE-2026-102906

The 0xshariq github-mcp-server is vulnerable to an OS command injection in the Git Remove MCP Tool component. The flaw exists within the child_process.exec function of the src/github.ts file, where manipulation of the File argument allows for remote code execution. The exploit is publicly availab...

EUVD-2026-89579

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

EUVD-2026-89576

Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node inaccessible...

CVE-2026-103101

The Pexip Infinity software versions 30.0 through 40.x before 41.0 are impacted by a vulnerability caused by improper input validation in the web server . A malicious attacker can exploit this flaw to render a Pexip Infinity node inaccessible . No specific remediation steps, exploit code, or in-t...

EUVD-2026-78277

moment vulnerable to Path Traversal via crafted non-string locale name...

CVE-2026-84292 vulnerabilities

Vulnerabilities for packages: renovate, serve, yaml-language-server...

GHSA-58MR-GQGX-XQ4G vulnerabilities

Vulnerabilities for packages: renovate, serve, yaml-language-server...

GHSA-QW65-CVWX-89V3 vulnerabilities

Vulnerabilities for packages: renovate, serve, yaml-language-server...

CVE-2026-84394 vulnerabilities

Vulnerabilities for packages: renovate, serve, yaml-language-server...

CVE-2026-84292 vulnerabilities

Vulnerabilities for packages: serve, yaml-language-server, renovate...

GHSA-QW65-CVWX-89V3 vulnerabilities

Vulnerabilities for packages: serve, yaml-language-server, renovate...

GHSA-58MR-GQGX-XQ4G vulnerabilities

Vulnerabilities for packages: serve, yaml-language-server, renovate...

CVE-2026-84394 vulnerabilities

Vulnerabilities for packages: serve, yaml-language-server, renovate...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...