DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc
cverports profile

GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-62848: CVE-2026-62848: Local Arbitrary Code Execution via Unsafe Deserialization in Metalama Named Pipe IPC
cverports profile

CVE-2026-62848: CVE-2026-62848: Local Arbitrary Code Execution via Unsafe Deserialization in Metalama Named Pipe IPC

#security #cve #cybersecurity
Comments
3 min read
GHSA-9PPR-WFW9-XVR2: GHSA-9ppr-wfw9-xvr2: DNS Cache TTL Manipulation Failure in Netfoil via Go Value-Copy Range Iteration
cverports profile

GHSA-9PPR-WFW9-XVR2: GHSA-9ppr-wfw9-xvr2: DNS Cache TTL Manipulation Failure in Netfoil via Go Value-Copy Range Iteration

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak
cverports profile

CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads
cverports profile

CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads

#security #cve #cybersecurity
Comments 1
4 min read
GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder
cverports profile

GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer
cverports profile

CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-44265: CVE-2026-44265: Code and SQL Injection via Programmatic AST Emission in @enspirit/elo
cverports profile

CVE-2026-44265: CVE-2026-44265: Code and SQL Injection via Programmatic AST Emission in @enspirit/elo

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-44266: CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation
cverports profile

CVE-2026-44266: CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation

#security #cve #cybersecurity
1
Comments
4 min read
CVE-2026-44267: CVE-2026-44267: Sandbox Escape and Arbitrary Code Execution in Elo Expression Language
cverports profile

CVE-2026-44267: CVE-2026-44267: Sandbox Escape and Arbitrary Code Execution in Elo Expression Language

#security #cve #cybersecurity
1
Comments
3 min read
CVE-2026-62374: CVE-2026-62374: Silent Claim-Set Reduction and Verification Bypass in SD JWT JS
cverports profile

CVE-2026-62374: CVE-2026-62374: Silent Claim-Set Reduction and Verification Bypass in SD JWT JS

#security #cve #cybersecurity
Comments
3 min read
GHSA-J656-3HF2-FVJC: GHSA-j656-3hf2-fvjc: Read-Only SQL Validation Bypass via Comment Interpretation Conflict in Bytebase DBHub
cverports profile

GHSA-J656-3HF2-FVJC: GHSA-j656-3hf2-fvjc: Read-Only SQL Validation Bypass via Comment Interpretation Conflict in Bytebase DBHub

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-118777: CVE-2026-118777: Prototype Pollution in Forge HTTP Client Cookie Management
cverports profile

CVE-2026-118777: CVE-2026-118777: Prototype Pollution in Forge HTTP Client Cookie Management

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118775: CVE-2026-118775: ASN.1 OID First Arc Truncation and Ambiguity in node-forge
cverports profile

CVE-2026-118775: CVE-2026-118775: ASN.1 OID First Arc Truncation and Ambiguity in node-forge

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119194: CVE-2026-119194: Algorithmic Complexity Denial of Service in pyasn1 Schemaless ASN.1 Decoder
cverports profile

CVE-2026-119194: CVE-2026-119194: Algorithmic Complexity Denial of Service in pyasn1 Schemaless ASN.1 Decoder

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders
cverports profile

CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119197: CVE-2026-119197: Quadratic Algorithmic Complexity Denial of Service in pyasn1 REAL Mantissa Decoder
cverports profile

CVE-2026-119197: CVE-2026-119197: Quadratic Algorithmic Complexity Denial of Service in pyasn1 REAL Mantissa Decoder

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding
cverports profile

CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119209: CVE-2026-119209: Uncontrolled Resource Consumption in pypdf XRef Stream Parser
cverports profile

CVE-2026-119209: CVE-2026-119209: Uncontrolled Resource Consumption in pypdf XRef Stream Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119208: CVE-2026-119208: Uncontrolled Resource Consumption in pypdf Encrypted Page Count Evaluation
cverports profile

CVE-2026-119208: CVE-2026-119208: Uncontrolled Resource Consumption in pypdf Encrypted Page Count Evaluation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119207: CVE-2026-119207: Asymmetric Resource Consumption in pypdf Dictionary Parser
cverports profile

CVE-2026-119207: CVE-2026-119207: Asymmetric Resource Consumption in pypdf Dictionary Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119206: CVE-2026-119206: Algorithmic Complexity Denial of Service in pypdf Page Label Resolution
cverports profile

CVE-2026-119206: CVE-2026-119206: Algorithmic Complexity Denial of Service in pypdf Page Label Resolution

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116672: CVE-2026-116672: Authorization Bypass in Authlib RFC 7592 Client Configuration Endpoint
cverports profile

CVE-2026-116672: CVE-2026-116672: Authorization Bypass in Authlib RFC 7592 Client Configuration Endpoint

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118773: CVE-2026-118773: Asynchronous Control Flow Bypass and Uncontrolled Resource Consumption in node-glob
cverports profile

CVE-2026-118773: CVE-2026-118773: Asynchronous Control Flow Bypass and Uncontrolled Resource Consumption in node-glob

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118764: CVE-2026-118764: Asymmetric Resource Consumption and Denial of Service in minimatch Pattern Preprocessing
cverports profile

CVE-2026-118764: CVE-2026-118764: Asymmetric Resource Consumption and Denial of Service in minimatch Pattern Preprocessing

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118772: CVE-2026-118772: Regular Expression Denial of Service in Joi Email Validation
cverports profile

CVE-2026-118772: CVE-2026-118772: Regular Expression Denial of Service in Joi Email Validation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119205: CVE-2026-119205: Denial of Service via Infinite Loop in pypdf DictionaryObject Cloning
cverports profile

CVE-2026-119205: CVE-2026-119205: Denial of Service via Infinite Loop in pypdf DictionaryObject Cloning

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119204: CVE-2026-119204: Uncontrolled Resource Consumption in pypdf Page Tree Flattening
cverports profile

CVE-2026-119204: CVE-2026-119204: Uncontrolled Resource Consumption in pypdf Page Tree Flattening

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119203: CVE-2026-119203: Infinite Loop in pypdf Standard Cross-Reference Table Parser
cverports profile

CVE-2026-119203: CVE-2026-119203: Infinite Loop in pypdf Standard Cross-Reference Table Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118759: CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines
cverports profile

CVE-2026-118759: CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server
cverports profile

CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118763: CVE-2026-118763: Cross-Origin Credential Exposure in @sigstore/oci
cverports profile

CVE-2026-118763: CVE-2026-118763: Cross-Origin Credential Exposure in @sigstore/oci

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119282: CVE-2026-119282: OS Command Injection via Plugin Options in Nx (@nx/maven and @nx/gradle)
cverports profile

CVE-2026-119282: CVE-2026-119282: OS Command Injection via Plugin Options in Nx (@nx/maven and @nx/gradle)

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-59978: CVE-2026-59978: Persistent Denial of Service via Array Injection in AdminNeo
cverports profile

CVE-2026-59978: CVE-2026-59978: Persistent Denial of Service via Array Injection in AdminNeo

#security #cve #cybersecurity
Comments
3 min read
GHSA-FGXM-5HVV-X4VH: GHSA-fgxm-5hvv-x4vh: Private Repository Enumeration via Go Module Discovery and HTTP Response…
cverports profile

GHSA-FGXM-5HVV-X4VH: GHSA-fgxm-5hvv-x4vh: Private Repository Enumeration via Go Module Discovery and HTTP Response…

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-F3FJ-9625-RV3M: GHSA-f3fj-9625-rv3m: Race Condition in Soft Serve Repository Cache Invalidation
cverports profile

GHSA-F3FJ-9625-RV3M: GHSA-f3fj-9625-rv3m: Race Condition in Soft Serve Repository Cache Invalidation

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-119283: CVE-2026-119283: Unbounded JWE Recipients Array Causes CPU Exhaustion in Authlib joserfc
cverports profile

CVE-2026-119283: CVE-2026-119283: Unbounded JWE Recipients Array Causes CPU Exhaustion in Authlib joserfc

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119284: CVE-2026-119284: Uncontrolled Resource Consumption in joserfc Compact Deserialization
cverports profile

CVE-2026-119284: CVE-2026-119284: Uncontrolled Resource Consumption in joserfc Compact Deserialization

#security #cve #cybersecurity
Comments
4 min read
GHSA-C33X-VCV4-VG3G: GHSA-c33x-vcv4-vg3g: Missing Slot Identifier Validation in Cedar Policy Language JSON Template Parser…
cverports profile

GHSA-C33X-VCV4-VG3G: GHSA-c33x-vcv4-vg3g: Missing Slot Identifier Validation in Cedar Policy Language JSON Template Parser…

#security #cve #cybersecurity #ghsa
Comments
4 min read
GHSA-W9X9-J56R-H98R: GHSA-w9x9-j56r-h98r: Unauthenticated Confused Deputy Proxy in @eeacms/volto-chatbot
cverports profile

GHSA-W9X9-J56R-H98R: GHSA-w9x9-j56r-h98r: Unauthenticated Confused Deputy Proxy in @eeacms/volto-chatbot

#security #cve #cybersecurity #ghsa
Comments
4 min read
CVE-2026-9705: CVE-2026-9705: Registration Access Token Authorization Bypass in Keycloak Dynamic Client Registration
cverports profile

CVE-2026-9705: CVE-2026-9705: Registration Access Token Authorization Bypass in Keycloak Dynamic Client Registration

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9800: CVE-2026-9800: Authorization Bypass in Keycloak Policy Enforcer via Unnormalized URI Substring Matching
cverports profile

CVE-2026-9800: CVE-2026-9800: Authorization Bypass in Keycloak Policy Enforcer via Unnormalized URI Substring Matching

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9799: CVE-2026-9799: Authorization Bypass via UMA Permission Ticket Wildcard in Keycloak
cverports profile

CVE-2026-9799: CVE-2026-9799: Authorization Bypass via UMA Permission Ticket Wildcard in Keycloak

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9083: CVE-2026-9083: Arbitrary Filesystem Path Probing in Keycloak Java Keystore Key Provider
cverports profile

CVE-2026-9083: CVE-2026-9083: Arbitrary Filesystem Path Probing in Keycloak Java Keystore Key Provider

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9086: CVE-2026-9086: Stored Cross-Site Scripting via Case-Sensitive URI Scheme Validation Bypass in Keycloak
cverports profile

CVE-2026-9086: CVE-2026-9086: Stored Cross-Site Scripting via Case-Sensitive URI Scheme Validation Bypass in Keycloak

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-62290: CVE-2026-62290: ClusterIssuer DNS01 Solver Policy Bypass and Credential Exfiltration in cert-manager
cverports profile

CVE-2026-62290: CVE-2026-62290: ClusterIssuer DNS01 Solver Policy Bypass and Credential Exfiltration in cert-manager

#security #cve #cybersecurity
Comments 1
4 min read
CVE-2026-118662: CVE-2026-118662: Access Control Bypass via Uncanonicalized Query Parameters in Vite Development Server
cverports profile

CVE-2026-118662: CVE-2026-118662: Access Control Bypass via Uncanonicalized Query Parameters in Vite Development Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115909: CVE-2026-115909: Unbounded Symlink-Target Allocation Causes Process Abort in Rust zip Crate
cverports profile

CVE-2026-115909: CVE-2026-115909: Unbounded Symlink-Target Allocation Causes Process Abort in Rust zip Crate

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115906: CVE-2026-115906: AES Entry HMAC Authentication Bypass in Rust zip Crate
cverports profile

CVE-2026-115906: CVE-2026-115906: AES Entry HMAC Authentication Bypass in Rust zip Crate

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115908: CVE-2026-115908: Arbitrary File Write via Lexical Symlink Validation Bypass in Rust zip Crate
cverports profile

CVE-2026-115908: CVE-2026-115908: Arbitrary File Write via Lexical Symlink Validation Bypass in Rust zip Crate

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115907: CVE-2026-115907: Denial of Service via Excessive Memory Pre-allocation in Rust zip Crate Legacy Decoders
cverports profile

CVE-2026-115907: CVE-2026-115907: Denial of Service via Excessive Memory Pre-allocation in Rust zip Crate Legacy Decoders

#security #cve #cybersecurity
Comments
4 min read
GHSA-VPP8-G58W-M8MP: GHSA-vpp8-g58w-m8mp: HTTP/2 Rapid Reset Denial of Service in Twisted Web
cverports profile

GHSA-VPP8-G58W-M8MP: GHSA-vpp8-g58w-m8mp: HTTP/2 Rapid Reset Denial of Service in Twisted Web

#security #cve #cybersecurity #ghsa
Comments
4 min read
CVE-2026-118664: CVE-2026-118664: Quadratic Complexity Denial of Service in decode-uri-component
cverports profile

CVE-2026-118664: CVE-2026-118664: Quadratic Complexity Denial of Service in decode-uri-component

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115921: CVE-2026-115921: Null Pointer Dereference and Integer Conversion in ONNX ScanInferenceFunction
cverports profile

CVE-2026-115921: CVE-2026-115921: Null Pointer Dereference and Integer Conversion in ONNX ScanInferenceFunction

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-91403: CVE-2026-91403: Cryptographic Trust Validation Bypass in Oracle Java SE JSSE via Compromised eMudhra…
cverports profile

CVE-2026-91403: CVE-2026-91403: Cryptographic Trust Validation Bypass in Oracle Java SE JSSE via Compromised eMudhra…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115922: CVE-2026-115922: Denial of Service via Unchecked Expansion of Packed Sub-Byte Tensors in ONNX
cverports profile

CVE-2026-115922: CVE-2026-115922: Denial of Service via Unchecked Expansion of Packed Sub-Byte Tensors in ONNX

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-115920: CVE-2026-115920: Out-of-Bounds Read in ONNX ConvTranspose Shape Inference
cverports profile

CVE-2026-115920: CVE-2026-115920: Out-of-Bounds Read in ONNX ConvTranspose Shape Inference

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115910: CVE-2026-115910: OpenID Connect Session-Binding Bypass and Account Takeover in Python Social Auth
cverports profile

CVE-2026-115910: CVE-2026-115910: OpenID Connect Session-Binding Bypass and Account Takeover in Python Social Auth

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-111497: CVE-2026-111497: Out-of-Bounds Heap Write and Remote Code Execution in Google Brotli Decoder (Node2Shell)
cverports profile

CVE-2026-111497: CVE-2026-111497: Out-of-Bounds Heap Write and Remote Code Execution in Google Brotli Decoder (Node2Shell)

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-116575: CVE-2026-116575: Cross-Tenant Conversation Disclosure via Delimiter Injection in Mem0
cverports profile

CVE-2026-116575: CVE-2026-116575: Cross-Tenant Conversation Disclosure via Delimiter Injection in Mem0

#security #cve #cybersecurity
Comments
3 min read
loading...