DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-59889: CVE-2026-59889: @JsonView Bypass for @JsonUnwrapped Properties during Deserialization in jackson-databind
cverports profile

CVE-2026-59889: CVE-2026-59889: @JsonView Bypass for @JsonUnwrapped Properties during Deserialization in jackson-databind

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-58426: CVE-2026-58426: Cryptographic Boundary-Shifting in Gitea Actions Artifacts
cverports profile

CVE-2026-58426: CVE-2026-58426: Cryptographic Boundary-Shifting in Gitea Actions Artifacts

#security #cve #cybersecurity
Comments
2 min read
GHSA-2F96-G7MH-G2HX: GHSA-2F96-G7MH-G2HX: Command Injection Bypass in GitPython Options Validation
cverports profile

GHSA-2F96-G7MH-G2HX: GHSA-2F96-G7MH-G2HX: Command Injection Bypass in GitPython Options Validation

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-59879: CVE-2026-59879: Infinite Loop and Integer Overflow in Immutable.js List Sizing
cverports profile

CVE-2026-59879: CVE-2026-59879: Infinite Loop and Integer Overflow in Immutable.js List Sizing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54291: CVE-2026-54291: Silent Channel-Binding Authentication Downgrade in PostgreSQL JDBC Driver (pgjdbc)
cverports profile

CVE-2026-54291: CVE-2026-54291: Silent Channel-Binding Authentication Downgrade in PostgreSQL JDBC Driver (pgjdbc)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56170: CVE-2026-56170: Remote Denial of Service via Resource Exhaustion in ASP.NET Core
cverports profile

CVE-2026-56170: CVE-2026-56170: Remote Denial of Service via Resource Exhaustion in ASP.NET Core

#security #cve #cybersecurity
Comments
3 min read
GHSA-8WHX-365G-H9VV: GHSA-8whx-365g-h9vv: HTML5 Named Whitespace Bypass in Loofah allowed_uri? Validation
cverports profile

GHSA-8WHX-365G-H9VV: GHSA-8whx-365g-h9vv: HTML5 Named Whitespace Bypass in Loofah allowed_uri? Validation

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-50525: CVE-2026-50525: Denial of Service Vulnerability in Microsoft .NET XML Cryptography Stack
cverports profile

CVE-2026-50525: CVE-2026-50525: Denial of Service Vulnerability in Microsoft .NET XML Cryptography Stack

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-50659: CVE-2026-50659: SMTP Command and Header Injection in .NET System.Net.Mail
cverports profile

CVE-2026-50659: CVE-2026-50659: SMTP Command and Header Injection in .NET System.Net.Mail

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-50651: CVE-2026-50651: Denial of Service via Uncontrolled Resource Allocation in .NET System.Net.Http
cverports profile

CVE-2026-50651: CVE-2026-50651: Denial of Service via Uncontrolled Resource Allocation in .NET System.Net.Http

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59197: CVE-2026-59197: Heap Out-of-Bounds Write and Division-by-Zero in Pillow libImaging
cverports profile

CVE-2026-59197: CVE-2026-59197: Heap Out-of-Bounds Write and Division-by-Zero in Pillow libImaging

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-59198: CVE-2026-59198: Heap Out-of-Bounds Read in Pillow TGA RLE Encoder
cverports profile

CVE-2026-59198: CVE-2026-59198: Heap Out-of-Bounds Read in Pillow TGA RLE Encoder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59199: CVE-2026-59199: Signed 32-Bit Integer Overflow and Heap Backward Underwrite in Pillow
cverports profile

CVE-2026-59199: CVE-2026-59199: Signed 32-Bit Integer Overflow and Heap Backward Underwrite in Pillow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59200: CVE-2026-59200: Remote Denial of Service via PDF Decompression Bomb in Pillow
cverports profile

CVE-2026-59200: CVE-2026-59200: Remote Denial of Service via PDF Decompression Bomb in Pillow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59203: CVE-2026-59203: Denial of Service via Infinite Loop in Pillow EPS Image Parser
cverports profile

CVE-2026-59203: CVE-2026-59203: Denial of Service via Infinite Loop in Pillow EPS Image Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-59204: CVE-2026-59204: Denial of Service via Memory Exhaustion in Pillow JPEG2000 Decoder
cverports profile

CVE-2026-59204: CVE-2026-59204: Denial of Service via Memory Exhaustion in Pillow JPEG2000 Decoder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59205: CVE-2026-59205: Heap-Based Buffer Overflow in Pillow ImageCms Module
cverports profile

CVE-2026-59205: CVE-2026-59205: Heap-Based Buffer Overflow in Pillow ImageCms Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-12590: CVE-2026-12590: Fail-Open Limit Enforcement Vulnerability in body-parser
cverports profile

CVE-2026-12590: CVE-2026-12590: Fail-Open Limit Enforcement Vulnerability in body-parser

#security #cve #cybersecurity
Comments
2 min read
GHSA-HP3V-MFQW-H74C: GHSA-hp3v-mfqw-h74c: Missing Character Escaping in @astrojs/netlify Remote Image Pattern Configuration
cverports profile

GHSA-HP3V-MFQW-H74C: GHSA-hp3v-mfqw-h74c: Missing Character Escaping in @astrojs/netlify Remote Image Pattern Configuration

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8MV7-9C27-98VC: GHSA-8mv7-9c27-98vc: Cross-Site Request Forgery (CSRF) Bypass in Astro/Hono Composable Pipeline
cverports profile

GHSA-8MV7-9C27-98VC: GHSA-8mv7-9c27-98vc: Cross-Site Request Forgery (CSRF) Bypass in Astro/Hono Composable Pipeline

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-2G6R-C272-W58R: CVE-2026-26013: Server-Side Request Forgery in LangChain Image Token Counting
cverports profile

GHSA-2G6R-C272-W58R: CVE-2026-26013: Server-Side Request Forgery in LangChain Image Token Counting

#security #cve #cybersecurity
Comments
2 min read
CVE-2008-4128: CVE-2008-4128: Multiple Cross-Site Request Forgery Vulnerabilities in Cisco IOS HTTP Administration
cverports profile

CVE-2008-4128: CVE-2008-4128: Multiple Cross-Site Request Forgery Vulnerabilities in Cisco IOS HTTP Administration

#security #cve #cybersecurity
Comments
2 min read
GHSA-F283-GHQC-FG79: GHSA-f283-ghqc-fg79: Denial of Service via Unbounded Cookie Jar Resource Exhaustion in Guzzle
cverports profile

GHSA-F283-GHQC-FG79: GHSA-f283-ghqc-fg79: Denial of Service via Unbounded Cookie Jar Resource Exhaustion in Guzzle

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-WM3W-8RRP-J577: GHSA-WM3W-8RRP-J577: Host-Only Cookie Scope Exposure in Guzzle Cookie Jar
cverports profile

GHSA-WM3W-8RRP-J577: GHSA-WM3W-8RRP-J577: Host-Only Cookie Scope Exposure in Guzzle Cookie Jar

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-H95V-H523-3MW8: GHSA-H95V-H523-3MW8: Sensitive URI Fragment Disclosure via Referer Headers in Guzzle HTTP Client
cverports profile

GHSA-H95V-H523-3MW8: GHSA-H95V-H523-3MW8: Sensitive URI Fragment Disclosure via Referer Headers in Guzzle HTTP Client

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-50528: CVE-2026-50528: Security Feature Bypass via State Desynchronization in .NET SslStream
cverports profile

CVE-2026-50528: CVE-2026-50528: Security Feature Bypass via State Desynchronization in .NET SslStream

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-59883: CVE-2026-59883: Cookie Disclosure and Injection via IP-Address Domains in Guzzle HTTP Client
cverports profile

CVE-2026-59883: CVE-2026-59883: Cookie Disclosure and Injection via IP-Address Domains in Guzzle HTTP Client

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-13149: CVE-2026-13149: Algorithmic Complexity Denial of Service in brace-expansion
cverports profile

CVE-2026-13149: CVE-2026-13149: Algorithmic Complexity Denial of Service in brace-expansion

#security #cve #cybersecurity
Comments 1
3 min read
CVE-2026-59948: CVE-2026-59948: Path Traversal and Arbitrary File Write in Composer Dependency Resolution
cverports profile

CVE-2026-59948: CVE-2026-59948: Path Traversal and Arbitrary File Write in Composer Dependency Resolution

#security #cve #cybersecurity
Comments
2 min read
CVE-2025-67726: CVE-2025-67726: Denial of Service via Quadratic Parameter Parsing in Tornado httputil
cverports profile

CVE-2025-67726: CVE-2025-67726: Denial of Service via Quadratic Parameter Parsing in Tornado httputil

#security #cve #cybersecurity
Comments
2 min read
GHSA-42H9-826W-CGV3: GHSA-42H9-826W-CGV3: Denial of Service via Uncontrolled Recursion in Axios formDataToJSON
cverports profile

GHSA-42H9-826W-CGV3: GHSA-42H9-826W-CGV3: Denial of Service via Uncontrolled Recursion in Axios formDataToJSON

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-47296: CVE-2026-47296: Elevation of Privilege via SQL Injection in Microsoft SQL Server Internal Stored Procedures
cverports profile

CVE-2026-47296: CVE-2026-47296: Elevation of Privilege via SQL Injection in Microsoft SQL Server Internal Stored Procedures

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-47295: CVE-2026-47295: SQL Injection and Privilege Escalation in Microsoft SQL Server
cverports profile

CVE-2026-47295: CVE-2026-47295: SQL Injection and Privilege Escalation in Microsoft SQL Server

#security #cve #cybersecurity
Comments
2 min read
GHSA-8RQH-VXPR-X77P: GHSA-8RQH-VXPR-X77P: Stored Cross-Site Scripting via MIME Type Spoofing in Plone REST API
cverports profile

GHSA-8RQH-VXPR-X77P: GHSA-8RQH-VXPR-X77P: Stored Cross-Site Scripting via MIME Type Spoofing in Plone REST API

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-11400: CVE-2026-11400: Privilege Escalation via Untrusted Search Path in AWS Advanced JDBC Wrapper
cverports profile

CVE-2026-11400: CVE-2026-11400: Privilege Escalation via Untrusted Search Path in AWS Advanced JDBC Wrapper

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-27771: CVE-2026-27771: Authentication Bypass and Information Disclosure in Gitea Container and Composer Registries
cverports profile

CVE-2026-27771: CVE-2026-27771: Authentication Bypass and Information Disclosure in Gitea Container and Composer Registries

#security #cve #cybersecurity
Comments
2 min read
GHSA-CVPC-HCCG-WMW4: GHSA-CVPC-HCCG-WMW4: Missing Authorization in Formie Administrative Settings Allows Privilege Escalation
cverports profile

GHSA-CVPC-HCCG-WMW4: GHSA-CVPC-HCCG-WMW4: Missing Authorization in Formie Administrative Settings Allows Privilege Escalation

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-53598: CVE-2026-53598: Arbitrary File Read via File Reference Expansion in Microsoft Prompty
cverports profile

CVE-2026-53598: CVE-2026-53598: Arbitrary File Read via File Reference Expansion in Microsoft Prompty

#security #cve #cybersecurity
Comments
2 min read
GHSA-MFR4-MQ8W-VMG6: GHSA-MFR4-MQ8W-VMG6: Path Traversal in proot-distro copy Command Allows Container Escape
cverports profile

GHSA-MFR4-MQ8W-VMG6: GHSA-MFR4-MQ8W-VMG6: Path Traversal in proot-distro copy Command Allows Container Escape

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8QQM-FP2Q-V734: GHSA-8QQM-FP2Q-V734: Authorization Bypass in Skipper's Open Policy Agent Integration
cverports profile

GHSA-8QQM-FP2Q-V734: GHSA-8QQM-FP2Q-V734: Authorization Bypass in Skipper's Open Policy Agent Integration

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-53597: CVE-2026-53597: Remote Code Execution in Microsoft prompty via Insecure gray-matter Parsing
cverports profile

CVE-2026-53597: CVE-2026-53597: Remote Code Execution in Microsoft prompty via Insecure gray-matter Parsing

#security #cve #cybersecurity
Comments
2 min read
GHSA-RJWR-M7QX-3FJR: GHSA-RJWR-M7QX-3FJR: Code Generation Injection in oapi-codegen
cverports profile

GHSA-RJWR-M7QX-3FJR: GHSA-RJWR-M7QX-3FJR: Code Generation Injection in oapi-codegen

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55646: CVE-2026-55646: Remote Denial of Service via Memory Exhaustion in vLLM Speech-to-Text Endpoints
cverports profile

CVE-2026-55646: CVE-2026-55646: Remote Denial of Service via Memory Exhaustion in vLLM Speech-to-Text Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-34760: CVE-2026-34760: Adversarial Prompt Injection via Unweighted Audio Downmixing in vLLM
cverports profile

CVE-2026-34760: CVE-2026-34760: Adversarial Prompt Injection via Unweighted Audio Downmixing in vLLM

#security #cve #cybersecurity
Comments
2 min read
GHSA-GGXF-9F6J-W742: GHSA-GGXF-9F6J-W742: Use-After-Free in Diesel SQLite Deserialization
cverports profile

GHSA-GGXF-9F6J-W742: GHSA-GGXF-9F6J-W742: Use-After-Free in Diesel SQLite Deserialization

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-52870: CVE-2026-52870: Broken Object-Level Authorization (BOLA) in Model Context Protocol (MCP) Python SDK
cverports profile

CVE-2026-52870: CVE-2026-52870: Broken Object-Level Authorization (BOLA) in Model Context Protocol (MCP) Python SDK

#security #cve #cybersecurity
Comments
2 min read
GHSA-48QW-824M-86PR: GHSA-48QW-824M-86PR: Privilege Escalation and Sandbox Escape in ArcadeDB Server
cverports profile

GHSA-48QW-824M-86PR: GHSA-48QW-824M-86PR: Privilege Escalation and Sandbox Escape in ArcadeDB Server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-59950: CVE-2026-59950: Cross-Site WebSocket Hijacking in Model Context Protocol Python SDK
cverports profile

CVE-2026-59950: CVE-2026-59950: Cross-Site WebSocket Hijacking in Model Context Protocol Python SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56271: CVE-2026-56271: Authentication Bypass via Hardcoded JWT Secrets in Flowise Enterprise Passport Middleware
cverports profile

CVE-2026-56271: CVE-2026-56271: Authentication Bypass via Hardcoded JWT Secrets in Flowise Enterprise Passport Middleware

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55040: CVE-2026-55040: Microsoft SharePoint Server Security Feature Bypass Vulnerability
cverports profile

CVE-2026-55040: CVE-2026-55040: Microsoft SharePoint Server Security Feature Bypass Vulnerability

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-20744: CVE-2026-20744: Improper Access Control in Le Circuit Électrique Charging Station Backend
cverports profile

CVE-2026-20744: CVE-2026-20744: Improper Access Control in Le Circuit Électrique Charging Station Backend

#security #cve #cybersecurity
Comments
2 min read
GHSA-X9F9-R4M8-9XC2: GHSA-x9f9-r4m8-9xc2: Remote Code Execution via GraalVM Polyglot Sandbox Bypass in ArcadeDB Trigger Scripts
cverports profile

GHSA-X9F9-R4M8-9XC2: GHSA-x9f9-r4m8-9xc2: Remote Code Execution via GraalVM Polyglot Sandbox Bypass in ArcadeDB Trigger Scripts

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-VWJC-V7X7-CM6G: GHSA-VWJC-V7X7-CM6G: Authorization Bypass via SQL-Defined User Functions in ArcadeDB
cverports profile

GHSA-VWJC-V7X7-CM6G: GHSA-VWJC-V7X7-CM6G: Authorization Bypass via SQL-Defined User Functions in ArcadeDB

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-X8MG-6R4P-87PF: GHSA-X8MG-6R4P-87PF: Cross-Database Insecure Direct Object Reference (IDOR) in ArcadeDB Server
cverports profile

GHSA-X8MG-6R4P-87PF: GHSA-X8MG-6R4P-87PF: Cross-Database Insecure Direct Object Reference (IDOR) in ArcadeDB Server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-52869: CVE-2026-52869: Session Hijacking and Authorization Bypass in Model Context Protocol (MCP) Python SDK
cverports profile

CVE-2026-52869: CVE-2026-52869: Session Hijacking and Authorization Bypass in Model Context Protocol (MCP) Python SDK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-48939: CVE-2026-48939: Unauthenticated Remote Code Execution in Joomla iCagenda Extension
cverports profile

CVE-2026-48939: CVE-2026-48939: Unauthenticated Remote Code Execution in Joomla iCagenda Extension

#security #cve #cybersecurity
Comments
2 min read
GHSA-7GCF-G7XR-8HXJ: GHSA-7GCF-G7XR-8HXJ: Denial of Service via Integer Underflow and Uncontrolled Allocation in serde_with
cverports profile

GHSA-7GCF-G7XR-8HXJ: GHSA-7GCF-G7XR-8HXJ: Denial of Service via Integer Underflow and Uncontrolled Allocation in serde_with

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-XG43-5579-QW6V: GHSA-XG43-5579-QW6V: Uncontrolled Resource Consumption (Decompression Bomb) in adawolfa/isdoc
cverports profile

GHSA-XG43-5579-QW6V: GHSA-XG43-5579-QW6V: Uncontrolled Resource Consumption (Decompression Bomb) in adawolfa/isdoc

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-R3HX-X5RH-P9VV: GHSA-R3HX-X5RH-P9VV: Remote Code Execution via Unsafe Deserialization in django-haystack
cverports profile

GHSA-R3HX-X5RH-P9VV: GHSA-R3HX-X5RH-P9VV: Remote Code Execution via Unsafe Deserialization in django-haystack

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-62GX-5Q78-WRVX: GHSA-62GX-5Q78-WRVX: Authenticated Path Traversal in obsidian-local-rest-api
cverports profile

GHSA-62GX-5Q78-WRVX: GHSA-62GX-5Q78-WRVX: Authenticated Path Traversal in obsidian-local-rest-api

#security #cve #cybersecurity #ghsa
Comments
2 min read
loading...