EUVD-2026-58627

SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...

CVE-2026-72812

SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...

WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Abduvoris Karimov in WordPress Plugin OttoKit versions = 1.1.35...

CVE-2026-65975

A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...

GO-2025-3462 vulnerabilities

Vulnerabilities for packages: temporal-ui-server-fips, temporal-ui-server, temporal-fips, temporal-server-fips, temporal, temporal-server...

GO-2026-5578 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server, temporal-server-fips...

GO-2025-3600 vulnerabilities

Vulnerabilities for packages: nats-server-fips, prometheus-nats-exporter, nats-top-fips, nats-server, nats-top...

GO-2023-2044 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2041 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GO-2023-2043 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

GO-2023-2163 vulnerabilities

Vulnerabilities for packages: nats, k3s, nats-server, minio...

GO-2026-4856 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kubescape-operator-fips, hubble-ui, kubescape-operator, hubble-ui-backend-fips, kubescape-server, kubescape, hubble, hubble-fips...

GO-2026-5914 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kubescape-operator-fips, hubble-ui, kubescape-operator, hubble-ui-backend-fips, kubescape-server, kubescape...

GO-2026-5400 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kubescape-operator-fips, hubble-ui, kubescape-operator, hubble-ui-backend-fips, kubescape-server, kubescape, hubble-fips...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: gotenberg, kube-metrics-adapter, temporal-ui-server-fips, temporal-ui-server, fq, temporal-fips, temporal, snyk-cli, kube-metrics-adapter-fips...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway, commercial-expanso-edge, spire-server, commercial-chainloop-backend, envoy-gateway-fips, commercial-grafana, kots, k3s, kine...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, metrics-server, configmap-reload-fips, smarter-device-manager-fips...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, conftest, docker-cli-buildx, cloudbeat-fips, kaniko, kubescape-server, trivy-operator-fips, conftest-fips, osv-scanner, podman-fips, trivy, livekit-cli, docker-fips, skaffold-fips, trivy-fips, buildah, docker-compose-fips, cloudbeat, kubescape,...