308156 matches found
CVE-2026-72824
The Grav API plugin getgrav/grav-plugin-api before 1.0.13 contains an API key scope-cap bypass in PagesController::guardTwigContent. The Twig-toggle check uses a bare isSuperAdmin gate that does not consult apikeyscopes, so a least-privilege API key scoped only to api.pages.write and minted on a...
CVE-2026-72812 SiYuan before v3.7.4 Missing Authorization via refreshBacklink
SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...
CVE-2026-72812
SiYuan has a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint for versions before v3.7.4. The issue allows anonymous readers to trigger persistent server-side writes by supplying an attacker-controlled block ID, which can flush transaction queues, scan all references g...
CVE-2026-72812
SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...
WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by Abduvoris Karimov in WordPress Plugin OttoKit versions = 1.1.35...
CVE-2026-65975
A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...
GO-2025-3462 vulnerabilities
Vulnerabilities for packages: temporal-fips, temporal-ui-server, temporal, temporal-server, temporal-ui-server-fips, temporal-server-fips...
GO-2026-5578 vulnerabilities
Vulnerabilities for packages: temporal-fips, temporal-server, temporal-server-fips...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-server-fips, prometheus-nats-exporter, nats-server, nats-top, nats-top-fips...
GO-2023-2044 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2023-2045 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2023-2042 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2023-2041 vulnerabilities
Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...
GO-2023-2043 vulnerabilities
Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...
GO-2023-2163 vulnerabilities
Vulnerabilities for packages: nats, minio, k3s, nats-server...
GO-2026-4856 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, kubescape-operator-fips, hubble-ui, kubescape-server, kubescape-operator, hubble, hubble-fips, kubescape-server-fips, kubescape...
GO-2026-5914 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, hubble-ui-backend-fips, hubble-ui, kubescape-server, kubescape-operator, kubescape-server-fips, kubescape...
GO-2026-5400 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, kubescape-operator-fips, hubble-ui, kubescape-server, kubescape-operator, hubble-fips, kubescape-server-fips, kubescape...