CVE-2026-72812

SiYuan has a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint for versions before v3.7.4. The issue allows anonymous readers to trigger persistent server-side writes by supplying an attacker-controlled block ID, which can flush transaction queues, scan all references g...

CVE-2026-72812

SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...

WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Abduvoris Karimov in WordPress Plugin OttoKit versions = 1.1.35...

CVE-2026-65975

A flaw was found in Pydantic AI's UI adapters, specifically within the sanitizemessages function. This vulnerability allows a remote client to bypass security checks and execute server tools with arguments they provide, rather than those generated by the AI model. This occurs when a trailing clie...

GO-2025-3462 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal, temporal-ui-server-fips, temporal-server-fips, temporal-ui-server, temporal-server...

GO-2026-5578 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-server...

GO-2025-3600 vulnerabilities

Vulnerabilities for packages: nats-top, prometheus-nats-exporter, nats-server-fips, nats-server, nats-top-fips...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2044 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2041 vulnerabilities

Vulnerabilities for packages: kind, metrics-server, kubeflow-katib...

GO-2023-2043 vulnerabilities

Vulnerabilities for packages: kind, metrics-server, kubeflow-katib...

GO-2023-2163 vulnerabilities

Vulnerabilities for packages: minio, nats, nats-server, k3s...

GO-2026-4856 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, hubble-ui, hubble-ui-backend-fips, kubescape-server-fips, kubescape-operator, kubescape-server, kubescape, hubble-fips, hubble...

GO-2026-5914 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, hubble-ui, hubble-ui-backend-fips, kubescape-server-fips, kubescape-operator, kubescape-server, kubescape...

GO-2026-5400 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, hubble-ui, hubble-ui-backend-fips, kubescape-server-fips, kubescape-operator, kubescape-server, kubescape, hubble-fips...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, temporal-fips, temporal, temporal-ui-server-fips, kube-metrics-adapter-fips, gotenberg, fq, snyk-cli, temporal-ui-server...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kine, kots, k3s, commercial-chainloop-backend, commercial-grafana, commercial-expanso-edge, envoy-gateway, spire-server, envoy-gateway-fips...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: metrics-server, kubeflow-katib, configmap-reload-fips, smarter-device-manager-fips, kind...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, osv-scanner, livekit-cli, kubescape-server-fips, buildah-fips, conftest-fips, guac, docker-fips, cloudbeat, docker-compose, trivy-fips, trivy, zot, scorecard, kubescape-server, cloudbeat-fips, kaniko, docker-compose-fips, buildah, skaffold,...