CVE-2026-55157

creationtimestamp| type| source ---|---|--- 2026-08-14 22:35:05+00:00| published-proof-of-concept| https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46...

CVE-2026-48804

A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...

CVE-2026-53708

creationtimestamp| type| source ---|---|--- 2026-08-14 20:35:03+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm...

CVE-2026-73653 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GO-2026-6179 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, snyk-cli, k3s, prometheus-mongodb-exporter, langfuse-fips, spire-server, kyverno, k3d, k8s-device-plugin, kots, reports-server, commercial-grafana, terraform, zot, aactl, langfuse...

GO-2026-6180 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, snyk-cli, k3s, prometheus-mongodb-exporter, langfuse-fips, spire-server, kyverno, k3d, k8s-device-plugin, kots, reports-server, commercial-grafana, terraform, zot, aactl, langfuse...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, snyk-cli, k3s, prometheus-mongodb-exporter, langfuse-fips, spire-server, kyverno, k3d, k8s-device-plugin, kots, reports-server, commercial-grafana, terraform, zot, aactl, langfuse...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: containerd, nerdctl, snyk-cli, k3s, prometheus-mongodb-exporter, langfuse-fips, spire-server, kyverno, k3d, k8s-device-plugin, kots, reports-server, commercial-grafana, terraform, zot, aactl, langfuse...

CVE-2026-73646 vulnerabilities

Vulnerabilities for packages: nextcloud-server, keep-fips, pelias-api, unleash-fips, authentik-fips, homepage, semaphore, langfuse-fips, vitess, authentik, unleash, jitsucom-jitsu, librechat, arangodb, keep, cadence-web, langfuse...

CVE-2026-73646 vulnerabilities

Vulnerabilities for packages: vitess, nextcloud-server, jitsucom-jitsu, langfuse...

CVE-2026-49457

erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...

CVE-2026-73844

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at or redirected/SSRF'd to a host that returns a...

CVE-2026-73846

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...

CVE-2026-73845

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

CVE-2026-49826

Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and send a user a URL that will redirect the user from the Concourse web server to any other site. This could be used in a phishing attack to steal user's credentials. This has bee...

CVE-2026-73846 CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...

CVE-2026-73846 CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...

CVE-2026-73846

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...

CVE-2026-73846

The CVE describes a vulnerability in CKAN MCP Server prior to version 0.4.112 where canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters. This causes different logical parameter sets used by buildCacheKey to coll...

EUVD-2026-58727

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...