EUVD-2026-29233

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to modify protected parts of the file system...

EUVD-2022-55992

Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries. Alien::FreeImage contains version 3.17.0 of the FreeImage library from 2017, which has known vulnerabilities such as CVE-2015-0852 and CVE-2025-65803. The library embeds other images libraries that also have...

CVE-2026-28963

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring...

CVE-2026-28908

A denial of service issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to modify protected parts of the file system...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +33393 more potentially affected by CVE-2026-45736 via ws (>=8.0.0, <=8.20.0)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vibekit 0.1.0 - 0g-zksettlement-client 1.0.0 and more Source cves: CVE-2026-45736 Source advisory: SNYK:JS-WS-16722635...

CVE-2026-43944

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execution via deep links, CLI --opts, or crafted shortcuts. Exploit requires clicking a crafted electerm://... link or...

CVE-2026-42883

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/libraries/:id/download endpoint validates that the requesting user has access to the library specified in the URL path, but fetches downloadable items solely by attacker-provided IDs without constraining...

CVE-2022-4988

Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries. Alien::FreeImage contains version 3.17.0 of the FreeImage library from 2017, which has known vulnerabilities such as CVE-2015-0852 and CVE-2025-65803. The library embeds other images libraries that also have...

CVE-2026-42888 Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without sufficient boundary validation to ensure it remains within the intended library directory. This...

CVE-2026-28908

A denial of service issue exists in the Kernel of macOS, where an app may be able to modify protected parts of the file system . This vulnerability was addressed by removing the vulnerable code. The issue is fixed in macOS Sequoia 15.7.7 , macOS Sonoma 14.8.7 , and macOS Tahoe 26.5 . No specific ...

CVE-2026-28963

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring...

CVE-2026-28963

This vulnerability affects iOS and iPadOS versions prior to 26.5 . The root cause is a privacy issue that was addressed by removing vulnerable code. An attacker with physical access could exploit this by using Visual Intelligence to access sensitive user data while the device is undergoing iPhone...

CVE-2026-28963

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to use Visual Intelligence to access sensitive user data during iPhone Mirroring...

@abiswas97/postgres-mcp (2.0.0), @adlanarifzr/mikro-orm-migrations (>=7.0.5-next.0, <=7.0.9) +696 more potentially affected by CVE-2026-44635 via kysely (>=0.26.3, <=0.28.16)

kysely NPM version =0.26.3, =7.0.5-next.0, =7.0.5-next.0, =1.0.25-beta.0, =0.0.19, =1.2.6-beta.2, =2.7.6, =0.2.0, =0.0.1, =0.0.17, =0.0.78 and more Source cves: CVE-2026-44635 Source advisory: OSV:GHSA-PV5W-4P9Q-P3V2...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @airp/validate-cli (>=1.1.0, <=1.1.3) +168 more potentially affected by CVE-2026-41159 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =1.1.0, =0.0.3, =0.7.9, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.1.0, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.4.0 - @fgbg/mdocs 1.2.0 and more Source cves: CVE-2026-41159 Source advisory: OSV:GHSA-87F9-HVMW-GH4P...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @airp/validate-cli (>=1.1.0, <=1.1.3) +168 more potentially affected by CVE-2026-41150 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =1.1.0, =0.0.3, =0.7.9, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.1.0, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.4.0 - @fgbg/mdocs 1.2.0 and more Source cves: CVE-2026-41150 Source advisory: OSV:GHSA-6M6C-36F7-FHXH...

@0xgg/echomd (>=1.0.0, <=1.0.4), @7nohe/vite-plugin-vue-marked (0.2.1) +950 more potentially affected by CVE-2026-41149 via mermaid (>=0.2.16, <=10.9.5)

mermaid NPM version =0.2.16, =1.0.0, =0.18.0-beta.0, =0.3.0, =0.1.0, =0.1.0-a0, =0.17.0-alkemio-1, =0.4.0, =0.0.18, =1.0.0, =3.130.1, =1.19.0, =1.50.0 and more Source cves: CVE-2026-41149 Source advisory: SNYK:JS-MERMAID-16642050...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @airp/validate-cli (>=1.1.0, <=1.1.3) +168 more potentially affected by CVE-2026-41149 via mermaid (>=11.0.0, <=11.14.0)

mermaid NPM version =11.0.0, =0.0.1-alpha.23, =1.1.0, =0.0.3, =0.7.9, =0.15.0, =0.35.0, =0.0.1-beta.1, =0.0.0-beta.1, =0.1.0, =0.0.1, =0.0.1-alpha.0, =0.11.1, =0.11.2, =1.4.0 - @fgbg/mdocs 1.2.0 and more Source cves: CVE-2026-41149 Source advisory: OSV:GHSA-GHCM-XQFW-Q4VR...

@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +245 more potentially affected by CVE-2026-41148 via mermaid (>=10.0.0, <=10.9.5)

mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.0.1, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =0.0.6 and more Source cves: CVE-2026-41148 Source advisory: OSV:GHSA-XCJ9-5M2H-648R...

NPM: Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection

NPM: Mermaid: Improper sanitization of classDefs in diagrams leads to CSS injection vulnerability discovered by ? in WordPress Npm mermaid versions = 10.9.5...