DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
GHSA-7PPR-R889-MCF2: GHSA-7PPR-R889-MCF2: Unbounded WebSocket Message Aggregation in http4s-blaze-server leads to Denial of Service
cverports profile

GHSA-7PPR-R889-MCF2: GHSA-7PPR-R889-MCF2: Unbounded WebSocket Message Aggregation in http4s-blaze-server leads to Denial of Service

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-95CV-R8X4-VH75: GHSA-95cv-r8x4-vh75: Path Traversal Vulnerability in OpenList Batch Rename Handler
cverports profile

GHSA-95CV-R8X4-VH75: GHSA-95cv-r8x4-vh75: Path Traversal Vulnerability in OpenList Batch Rename Handler

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-P6PH-3JX2-3337: GHSA-P6PH-3JX2-3337: Horizontal Privilege Escalation and Metadata Information Disclosure via Bleve Search in OpenList
cverports profile

GHSA-P6PH-3JX2-3337: GHSA-P6PH-3JX2-3337: Horizontal Privilege Escalation and Metadata Information Disclosure via Bleve Search in OpenList

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-86CX-WWF4-PHQ4: GHSA-86cx-wwf4-phq4: Path Prefix Confusion Authorization Bypass in OpenList
cverports profile

GHSA-86CX-WWF4-PHQ4: GHSA-86cx-wwf4-phq4: Path Prefix Confusion Authorization Bypass in OpenList

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-16584: CVE-2026-16584: Security Policy Bypass in AWS API MCP Server via Startup Initialization Failure
cverports profile

CVE-2026-16584: CVE-2026-16584: Security Policy Bypass in AWS API MCP Server via Startup Initialization Failure

#security #cve #cybersecurity
Comments
2 min read
GHSA-6V4M-FW66-8R4X: GHSA-6V4M-FW66-8R4X: Path Disclosure and Shell Expansion Bypass in Shescape
cverports profile

GHSA-6V4M-FW66-8R4X: GHSA-6V4M-FW66-8R4X: Path Disclosure and Shell Expansion Bypass in Shescape

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-W4HW-QCX7-56PR: GHSA-W4HW-QCX7-56PR: OS Command Injection in Shescape via Unescaped Parentheses on Windows CMD
cverports profile

GHSA-W4HW-QCX7-56PR: GHSA-W4HW-QCX7-56PR: OS Command Injection in Shescape via Unescaped Parentheses on Windows CMD

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-Q53C-4PRM-W95Q: GHSA-q53c-4prm-w95q: Unix Home Directory Path Disclosure and Command Escaping Flaws in Shescape
cverports profile

GHSA-Q53C-4PRM-W95Q: GHSA-q53c-4prm-w95q: Unix Home Directory Path Disclosure and Command Escaping Flaws in Shescape

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-GM3R-Q2WP-HW87: GHSA-gm3r-q2wp-hw87: Quadratic-Time Denial of Service via Flag-Protection in Shescape
cverports profile

GHSA-GM3R-Q2WP-HW87: GHSA-gm3r-q2wp-hw87: Quadratic-Time Denial of Service via Flag-Protection in Shescape

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FP43-VJ7G-PG92: GHSA-FP43-VJ7G-PG92: Multi-Vector Security Vulnerabilities in OmniFaces JSF Utility Library
cverports profile

GHSA-FP43-VJ7G-PG92: GHSA-FP43-VJ7G-PG92: Multi-Vector Security Vulnerabilities in OmniFaces JSF Utility Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FWJX-9P69-H25H: GHSA-FWJX-9P69-H25H: Terminal Escape Sequence Injection in Oh My Posh
cverports profile

GHSA-FWJX-9P69-H25H: GHSA-FWJX-9P69-H25H: Terminal Escape Sequence Injection in Oh My Posh

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-6XJ8-QV9J-XCJQ: GHSA-6XJ8-QV9J-XCJQ: Arbitrary Command Execution via Template Injection in Oh My Posh
cverports profile

GHSA-6XJ8-QV9J-XCJQ: GHSA-6XJ8-QV9J-XCJQ: Arbitrary Command Execution via Template Injection in Oh My Posh

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3R53-75J5-3G7J: GHSA-3r53-75j5-3g7j: Prototype Pollution in Quasar Framework extend Utility
cverports profile

GHSA-3R53-75J5-3G7J: GHSA-3r53-75j5-3g7j: Prototype Pollution in Quasar Framework extend Utility

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-HMJ8-5XMH-5573: GHSA-HMJ8-5XMH-5573: Connection Denial of Service via Oversized DATA Frame in py-libp2p
cverports profile

GHSA-HMJ8-5XMH-5573: GHSA-HMJ8-5XMH-5573: Connection Denial of Service via Oversized DATA Frame in py-libp2p

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-16756: CVE-2026-16756: Slowloris Denial of Service via Resource Exhaustion in aws-smithy-http-server
cverports profile

CVE-2026-16756: CVE-2026-16756: Slowloris Denial of Service via Resource Exhaustion in aws-smithy-http-server

#security #cve #cybersecurity
Comments
2 min read
GHSA-XG4H-6GFC-H4M8: GHSA-XG4H-6GFC-H4M8: Watch API Authorization Bypass via Open-Ended Range Requests in etcd
cverports profile

GHSA-XG4H-6GFC-H4M8: GHSA-XG4H-6GFC-H4M8: Watch API Authorization Bypass via Open-Ended Range Requests in etcd

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-16796: CVE-2026-16796: Command Argument Injection in AWS Bedrock AgentCore SDK
cverports profile

CVE-2026-16796: CVE-2026-16796: Command Argument Injection in AWS Bedrock AgentCore SDK

#security #cve #cybersecurity
Comments
2 min read
GHSA-JPCW-4WR7-C3VQ: GHSA-JPCW-4WR7-C3VQ: Remote Denial of Service via NULL Pointer Dereference in kin-openapi Parameter Validation
cverports profile

GHSA-JPCW-4WR7-C3VQ: GHSA-JPCW-4WR7-C3VQ: Remote Denial of Service via NULL Pointer Dereference in kin-openapi Parameter Validation

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8Q49-2H5H-434X: GHSA-8Q49-2H5H-434X: Server-Side Request Forgery in FrontMCP OpenAPI Spec Poller
cverports profile

GHSA-8Q49-2H5H-434X: GHSA-8Q49-2H5H-434X: Server-Side Request Forgery in FrontMCP OpenAPI Spec Poller

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-6VCH-Q96H-7GC3: GHSA-6VCH-Q96H-7GC3: Unbounded Goroutine Creation and Denial of Service in etcd TLS Listener
cverports profile

GHSA-6VCH-Q96H-7GC3: GHSA-6VCH-Q96H-7GC3: Unbounded Goroutine Creation and Denial of Service in etcd TLS Listener

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-59225: CVE-2026-59225: Access Control Bypass in Open WebUI Arena Task Endpoints
cverports profile

CVE-2026-59225: CVE-2026-59225: Access Control Bypass in Open WebUI Arena Task Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59213: CVE-2026-59213: Authorization Bypass and Cross-Session Cache Leakage in Open WebUI
cverports profile

CVE-2026-59213: CVE-2026-59213: Authorization Bypass and Cross-Session Cache Leakage in Open WebUI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59215: CVE-2026-59215: Insecure Direct Object Reference in Open WebUI Thread Message Lookup
cverports profile

CVE-2026-59215: CVE-2026-59215: Insecure Direct Object Reference in Open WebUI Thread Message Lookup

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59222: CVE-2026-59222: Sensitive Data Exposure in Open WebUI Channels API
cverports profile

CVE-2026-59222: CVE-2026-59222: Sensitive Data Exposure in Open WebUI Channels API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59219: CVE-2026-59219: Session Revocation Bypass in Open WebUI Real-Time Endpoints
cverports profile

CVE-2026-59219: CVE-2026-59219: Session Revocation Bypass in Open WebUI Real-Time Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59864: CVE-2026-59864: Critical Out-of-Package Local File Inclusion in Microsoft Kiota
cverports profile

CVE-2026-59864: CVE-2026-59864: Critical Out-of-Package Local File Inclusion in Microsoft Kiota

#security #cve #cybersecurity
Comments
2 min read
GHSA-X445-F3H2-J279: GHSA-X445-F3H2-J279: OAuth Provider Confusion in Auth.js and NextAuth.js
cverports profile

GHSA-X445-F3H2-J279: GHSA-X445-F3H2-J279: OAuth Provider Confusion in Auth.js and NextAuth.js

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-7RQJ-J65F-68WH: GHSA-7RQJ-J65F-68WH: Account Takeover via Homoglyph Bypass in NextAuth.js Email Normalization
cverports profile

GHSA-7RQJ-J65F-68WH: GHSA-7RQJ-J65F-68WH: Account Takeover via Homoglyph Bypass in NextAuth.js Email Normalization

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-XMF8-CVQR-RFGJ: GHSA-XMF8-CVQR-RFGJ: Denial of Service via Uncaught Exception and Session Confusion in Auth.js
cverports profile

GHSA-XMF8-CVQR-RFGJ: GHSA-XMF8-CVQR-RFGJ: Denial of Service via Uncaught Exception and Session Confusion in Auth.js

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-53467: CVE-2026-53467: Heap Information Disclosure via Uninitialized Pixel Cache in ImageMagick MNG Decoder
cverports profile

CVE-2026-53467: CVE-2026-53467: Heap Information Disclosure via Uninitialized Pixel Cache in ImageMagick MNG Decoder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55223: CVE-2026-55223: Remote Code Execution via Deserialization Gadget Chain in c3p0 Connection Pooling Library
cverports profile

CVE-2026-55223: CVE-2026-55223: Remote Code Execution via Deserialization Gadget Chain in c3p0 Connection Pooling Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54696: CVE-2026-54696: Heap-based Buffer Overflow in Ruby json Gem Native C Extension
cverports profile

CVE-2026-54696: CVE-2026-54696: Heap-based Buffer Overflow in Ruby json Gem Native C Extension

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59938: CVE-2026-59938: Uncontrolled Memory Allocation (DoS) in pypdf Image Parsing
cverports profile

CVE-2026-59938: CVE-2026-59938: Uncontrolled Memory Allocation (DoS) in pypdf Image Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59936: CVE-2026-59936: Infinite Loop in pypdf Inline Image Parser Leads to Denial of Service
cverports profile

CVE-2026-59936: CVE-2026-59936: Infinite Loop in pypdf Inline Image Parser Leads to Denial of Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59935: CVE-2026-59935: Infinite Loop Denial of Service in pypdf via Malformed Inline Images
cverports profile

CVE-2026-59935: CVE-2026-59935: Infinite Loop Denial of Service in pypdf via Malformed Inline Images

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59937: CVE-2026-59937: CPU Exhaustion via Quadratic-Time Cross-Reference Recovery Loop in pypdf
cverports profile

CVE-2026-59937: CVE-2026-59937: CPU Exhaustion via Quadratic-Time Cross-Reference Recovery Loop in pypdf

#security #cve #cybersecurity
Comments
2 min read
GHSA-8FPG-XM3F-6CX3: GHSA-8FPG-XM3F-6CX3: Authentication Fail-Open via Unvalidated Server Responses in Auth.js
cverports profile

GHSA-8FPG-XM3F-6CX3: GHSA-8FPG-XM3F-6CX3: Authentication Fail-Open via Unvalidated Server Responses in Auth.js

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-6790: CVE-2026-6790: Host/Authority Header Desynchronization in Eclipse Jetty
cverports profile

CVE-2026-6790: CVE-2026-6790: Host/Authority Header Desynchronization in Eclipse Jetty

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-8384: CVE-2026-8384: URI Path Parameter Parser State-Desynchronization Path Traversal in Eclipse Jetty
cverports profile

CVE-2026-8384: CVE-2026-8384: URI Path Parameter Parser State-Desynchronization Path Traversal in Eclipse Jetty

#security #cve #cybersecurity
Comments
2 min read
GHSA-WHVH-WF3X-G77J: GHSA-WHVH-WF3X-G77J: Improper Access Control and Listing Bypass in JupyterLab Extension Manager
cverports profile

GHSA-WHVH-WF3X-G77J: GHSA-WHVH-WF3X-G77J: Improper Access Control and Listing Bypass in JupyterLab Extension Manager

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-42980: CVE-2026-42980: Windows Kernel Local Privilege Escalation via WMI Integer Underflow
cverports profile

CVE-2026-42980: CVE-2026-42980: Windows Kernel Local Privilege Escalation via WMI Integer Underflow

#security #cve #cybersecurity
Comments
1 min read
GHSA-H5V5-8746-G7MM: GHSA-H5V5-8746-G7MM: JupyterLab PluginManager Lock-Rule Enforcement Bypass
cverports profile

GHSA-H5V5-8746-G7MM: GHSA-H5V5-8746-G7MM: JupyterLab PluginManager Lock-Rule Enforcement Bypass

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-89VP-JRXV-24W8: GHSA-89VP-JRXV-24W8: Extension Manager Blocklist Canonicalization Bypass in JupyterLab
cverports profile

GHSA-89VP-JRXV-24W8: GHSA-89VP-JRXV-24W8: Extension Manager Blocklist Canonicalization Bypass in JupyterLab

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-GX64-GJ6P-PC4C: GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer
cverports profile

GHSA-GX64-GJ6P-PC4C: GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-PPPJ-HQ3G-57PJ: GHSA-pppj-hq3g-57pj: DOM-based Cross-Site Scripting (XSS) via Malicious Settings Override in JupyterLab
cverports profile

GHSA-PPPJ-HQ3G-57PJ: GHSA-pppj-hq3g-57pj: DOM-based Cross-Site Scripting (XSS) via Malicious Settings Override in JupyterLab

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-9CMH-XCQM-5HQR: GHSA-9cmh-xcqm-5hqr: Cross-Tenant Module-Cache Poisoning in n8n JS Task Runner
cverports profile

GHSA-9CMH-XCQM-5HQR: GHSA-9cmh-xcqm-5hqr: Cross-Tenant Module-Cache Poisoning in n8n JS Task Runner

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-JQWR-VX3P-R266: GHSA-JQWR-VX3P-R266: SQL Injection in n8n PostgresTrigger Node
cverports profile

GHSA-JQWR-VX3P-R266: GHSA-JQWR-VX3P-R266: SQL Injection in n8n PostgresTrigger Node

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-652Q-GVQ3-74QV: GHSA-652q-gvq3-74qv: SQL Injection in n8n Snowflake Node via Unparameterized Expression Interpolation
cverports profile

GHSA-652Q-GVQ3-74QV: GHSA-652q-gvq3-74qv: SQL Injection in n8n Snowflake Node via Unparameterized Expression Interpolation

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2024-7708: CVE-2024-7708: Resource Exhaustion via HTTP Connection Buffer Leak in Eclipse Jetty
cverports profile

CVE-2024-7708: CVE-2024-7708: Resource Exhaustion via HTTP Connection Buffer Leak in Eclipse Jetty

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-65595: CVE-2026-65595: Privilege Escalation and Remote Code Execution in n8n Token Exchange Module
cverports profile

CVE-2026-65595: CVE-2026-65595: Privilege Escalation and Remote Code Execution in n8n Token Exchange Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-65597: CVE-2026-65597: DOM-based Cross-Site Scripting (XSS) in n8n HTML Preview
cverports profile

CVE-2026-65597: CVE-2026-65597: DOM-based Cross-Site Scripting (XSS) in n8n HTML Preview

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-65592: CVE-2026-65592: Stored DOM-based Cross-Site Scripting via cachedResultUrl in n8n
cverports profile

CVE-2026-65592: CVE-2026-65592: Stored DOM-based Cross-Site Scripting via cachedResultUrl in n8n

#security #cve #cybersecurity
Comments 1
2 min read
CVE-2026-65599: CVE-2026-65599: Google Service Account Private Key Leakage via JWT Header Parameter in n8n
cverports profile

CVE-2026-65599: CVE-2026-65599: Google Service Account Private Key Leakage via JWT Header Parameter in n8n

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-47300: CVE-2026-47300: Elevation of Privilege in ASP.NET Core Negotiate Authentication Handler
cverports profile

CVE-2026-47300: CVE-2026-47300: Elevation of Privilege in ASP.NET Core Negotiate Authentication Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-20779: CVE-2026-20779: TOTP Single-Use Enforcement Defect in Gitea
cverports profile

CVE-2026-20779: CVE-2026-20779: TOTP Single-Use Enforcement Defect in Gitea

#security #cve #cybersecurity
Comments
2 min read
GHSA-R7WM-3CXJ-WFF9: GHSA-R7WM-3CXJ-WFF9: StreamReadConstraints Bypass in jackson-core Async Parser
cverports profile

GHSA-R7WM-3CXJ-WFF9: GHSA-R7WM-3CXJ-WFF9: StreamReadConstraints Bypass in jackson-core Async Parser

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-2RP8-MM9Q-FP49: GHSA-2RP8-MM9Q-FP49: Remote Code Execution via Template-Literal Code Injection in TypeORM migration:generate
cverports profile

GHSA-2RP8-MM9Q-FP49: GHSA-2RP8-MM9Q-FP49: Remote Code Execution via Template-Literal Code Injection in TypeORM migration:generate

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-9WJQ-CP2P-HRGF: GHSA-9WJQ-CP2P-HRGF: SVG href Attribute Bypass in Loofah HTML/XML Sanitizer
cverports profile

GHSA-9WJQ-CP2P-HRGF: GHSA-9WJQ-CP2P-HRGF: SVG href Attribute Bypass in Loofah HTML/XML Sanitizer

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-5QHF-9PHG-95M2: GHSA-5QHF-9PHG-95M2: Stored Cross-Site Scripting via Parser Differential in Loofah allowed_uri?
cverports profile

GHSA-5QHF-9PHG-95M2: GHSA-5QHF-9PHG-95M2: Stored Cross-Site Scripting via Parser Differential in Loofah allowed_uri?

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-HRXH-6V49-42GF: GHSA-HRXH-6V49-42GF: HTTP/2 Control Buffer Flooding and xDS RBAC Parsing Weaknesses in gRPC-Go
cverports profile

GHSA-HRXH-6V49-42GF: GHSA-HRXH-6V49-42GF: HTTP/2 Control Buffer Flooding and xDS RBAC Parsing Weaknesses in gRPC-Go

#security #cve #cybersecurity #ghsa
Comments
2 min read
loading...