115909 matches found
Arbitrary Command Injection
Overview @idachev/mcp-javadc is a Model Context Protocol MCP server for Java decompilation Affected versions of this package are vulnerable to Arbitrary Command Injection via the HTTP Interface component when processing the jarFilePath argument. An attacker can execute arbitrary operating system...
CVE-2026-5436 MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys
The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1. This is due to insufficient validation of the $name parameter upload field key passed to the generateuserfiledirpath function, which uses WordPress's pathjoin — a function that...
CVE-2026-35476
InvenTree is an Open Source Inventory Management System. Prior to 1.2.7 and 1.3.0, a non-staff authenticated user can elevate their account to a staff level via a POST request against their user account endpoint. The write permissions on the API endpoint are improperly configured, allowing any us...
@activeboxes/piece-sftp (0.2.6), @activepieces/piece-sftp (>=0.2.6, <=0.4.6) +23 more potentially affected by CVE-2026-39983 via basic-ftp (>=5.0.2, <=5.1.0)
basic-ftp NPM version =5.0.2, =0.2.6, =1.0.0, =1.0.0, =2.0.18, =1.9.2, =1.2.0, =4.6.0-blowfish, =1.0.3, =1.0.4, =0.1.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-39983 Source advisory: SNYK:JS-BASICFTP-15953339...
CVE-2026-34782
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the REST endpoint POST /api/v1/aiassistance/texttools/:id was not checking if a user is privileged to use the text tool, resulting in being able to use it in all situations. This vulnerability is fixed i...
@frontmcp/adapters (>=0.5.0, <=1.0.3), frontmcp (0.5.0) potentially affected by CVE-2026-39885 via mcp-from-openapi (>=2.0.0, <=2.1.2)
mcp-from-openapi NPM version =2.0.0, =0.5.0, =1.0.3 - frontmcp 0.5.0 Source cves: CVE-2026-39885 Source advisory: OSV:GHSA-V6PH-XCQ9-QXXJ...
@frontmcp/adapters (>=1.0.0-beta.1, <=1.0.3), @frontmcp/plugin-approval (>=1.0.0-beta.1, <=1.0.3) +7 more potentially affected by CVE-2026-39885 via @frontmcp/sdk (>=1.0.0, <=1.0.3)
@frontmcp/sdk NPM version =1.0.0, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =1.0.0-beta.1, =0.0.1, =1.0.0-beta.1, =1.0.0-beta.1, =0.0.1, =1.0.3 Source cves: CVE-2026-39885 Source advisory: OSV:GHSA-V6PH-XCQ9-QXXJ...
CVE-2026-23869
A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4. The vulnerability is triggered ...
CVE-2026-23869
A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4. The vulnerability is triggered ...
CVE-2026-34721
Zammad (web-based helpdesk) has a CSRF vulnerability in the OAuth callback endpoints for external credentials (Microsoft, Google, Facebook). Prior to versions 7.0.1 and 6.5.4, these endpoints do not validate the CSRF state parameter, enabling potential CSRF-like behavior in the OAuth flow. The is...
CVE-2026-34392 LORIS has a path traversal in static router
LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, a bug in the static file router can allow an attacker to traverse outside of the intended directory...
CVE-2026-30817 Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53
An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...
CVE-2026-35407 Saleor has Cross-Account Email Change via Unbound Confirmation Token
Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a business-logic and authorization flaw was found in the account email change workflow, the confirmation flow did not verify that the email change confirmation token was issued for the given...
CVE-2026-35401 Saleor has a resource exhaustion vulnerability in GraphQL queries
Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, a malicious actor can include many GraphQL mutations or queries in a single API call using aliases or chaining multiple mutations, resulting in resource exhaustion. This vulnerability is fixed in...
@achyutlabsau/vue-payment-gateway (>=0.8.1, <=0.8.2), @activepieces/common-ai (>=0.4.0, <=0.6.0) +678 more potentially affected by CVE-2026-39865 via axios (>=1.13.0, <=1.13.1)
axios NPM version =1.13.0, =0.8.1, =0.4.0, =0.0.1, =0.0.1, =0.1.0 - @activepieces/piece-aircall 0.1.0 - @activepieces/piece-airparser 0.1.0 and more Source cves: CVE-2026-39865 Source advisory: OSV:GHSA-QJ83-CQ47-W5F8...
@bitblit/ratchet-aws-node-only (>=6.1.196-alpha, <=6.1.200-alpha), @bitblit/ratchet-epsilon-common (>=6.1.196-alpha, <=6.1.200-alpha) +71 more potentially affected by CVE-2026-82853 via nodemailer (>=8.0.0, <=8.0.4)
nodemailer NPM version =8.0.0, =6.1.196-alpha, =6.1.196-alpha, =6.1.196-alpha, =0.0.1, =3.35.0, =4.0.0-canary.13686, =4.0.0-canary.13686, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =0.19.1, =6.0.0-beta.9, =11.14.0, =11.22.1 and more Source cves: CVE-2026-82853 Source advisory:...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +151 more potentially affected by CVE-2026-39412 via liquidjs (>=10.2.0, <=10.25.2)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0-beta.1 and more Source cves: CVE-2026-39412 Source advisory: OSV:GHSA-RV5G-F82M-QRVV...
@0xtender/events-schema-generator (>=0.0.4, <=0.2.11), @11ty/eleventy (3.0.0-alpha.16) +151 more potentially affected by CVE-2026-39412 via liquidjs (>=10.2.0, <=10.25.2)
liquidjs NPM version =10.2.0, =0.0.4, =0.6.0, =0.1.0, =0.0.0, =12.0.0, =1.0.1-beta.0, =1.6.3, =3.11.0-rc.0, =3.11.0-rc.0, =3.11.0-rc.0, =0.9.33, =1.0.0-beta.1 and more Source cves: CVE-2026-39412 Source advisory: SNYK:JS-LIQUIDJS-15930991...
