DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-12243: CVE-2026-12243: Incomplete Path Traversal Validation and Percent-Encoding Bypass in NLTK
cverports profile

CVE-2026-12243: CVE-2026-12243: Incomplete Path Traversal Validation and Percent-Encoding Bypass in NLTK

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73654: CVE-2026-73654: Prototype Pollution in Trigger.dev leading to Cascading Denial of Service
cverports profile

CVE-2026-73654: CVE-2026-73654: Prototype Pollution in Trigger.dev leading to Cascading Denial of Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73559: CVE-2026-73559: Uncontrolled Resource Consumption in vLLM API completions
cverports profile

CVE-2026-73559: CVE-2026-73559: Uncontrolled Resource Consumption in vLLM API completions

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-54526: CVE-2026-54526: Strict Template Referencing Bypass and Privilege Escalation in Argo Workflows
cverports profile

CVE-2026-54526: CVE-2026-54526: Strict Template Referencing Bypass and Privilege Escalation in Argo Workflows

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54249: CVE-2026-54249: Server-Side Request Forgery via Confused Deputy in Pydantic AI UI Adapters
cverports profile

CVE-2026-54249: CVE-2026-54249: Server-Side Request Forgery via Confused Deputy in Pydantic AI UI Adapters

#security #cve #cybersecurity
Comments
2 min read
GHSA-RM43-82J9-R4MJ: GHSA-RM43-82J9-R4MJ: Path Traversal (Arbitrary File Read) in atomic-agents-stack Dashboard
cverports profile

GHSA-RM43-82J9-R4MJ: GHSA-RM43-82J9-R4MJ: Path Traversal (Arbitrary File Read) in atomic-agents-stack Dashboard

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-9318: CVE-2026-9318: Stored Cross-Site Scripting via HTML Export in Jazzband tablib
cverports profile

CVE-2026-9318: CVE-2026-9318: Stored Cross-Site Scripting via HTML Export in Jazzband tablib

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways
cverports profile

CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways

#security #cve #cybersecurity
Comments
2 min read
GHSA-JWJP-4649-V8JP: GHSA-jwjp-4649-v8jp: Out-of-Bounds Read in SIPSorcery SCTP SACK Chunk Parsing
cverports profile

GHSA-JWJP-4649-V8JP: GHSA-jwjp-4649-v8jp: Out-of-Bounds Read in SIPSorcery SCTP SACK Chunk Parsing

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-PFVM-W89X-94JW: GHSA-pfvm-w89x-94jw: Uncaught Exception in STUN Parser Causes Complete TurnServer Receive Loop Termination
cverports profile

GHSA-PFVM-W89X-94JW: GHSA-pfvm-w89x-94jw: Uncaught Exception in STUN Parser Causes Complete TurnServer Receive Loop Termination

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-62898: CVE-2026-62898: Use After Free Information Disclosure in Microsoft QUIC
cverports profile

CVE-2026-62898: CVE-2026-62898: Use After Free Information Disclosure in Microsoft QUIC

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62899: CVE-2026-62899: .NET Security Feature Bypass Vulnerability (HTTP Request Smuggling)
cverports profile

CVE-2026-62899: CVE-2026-62899: .NET Security Feature Bypass Vulnerability (HTTP Request Smuggling)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62901: CVE-2026-62901: Remote Denial of Service via Infinite Loop in .NET WebSockets Engine
cverports profile

CVE-2026-62901: CVE-2026-62901: Remote Denial of Service via Infinite Loop in .NET WebSockets Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62909: CVE-2026-62909: .NET Local Elevation of Privilege via Unchecked Diagnostic Socket Permissions
cverports profile

CVE-2026-62909: CVE-2026-62909: .NET Local Elevation of Privilege via Unchecked Diagnostic Socket Permissions

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70354: CVE-2026-70354: Out-of-Bounds Write in .NET Windows Presentation Foundation Subsystem
cverports profile

CVE-2026-70354: CVE-2026-70354: Out-of-Bounds Write in .NET Windows Presentation Foundation Subsystem

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62897: CVE-2026-62897: Integer Overflow and Code Execution in .NET WPF and WinForms
cverports profile

CVE-2026-62897: CVE-2026-62897: Integer Overflow and Code Execution in .NET WPF and WinForms

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62871: CVE-2026-62871: Local Code Execution and Elevation of Privilege in .NET and Visual Studio
cverports profile

CVE-2026-62871: CVE-2026-62871: Local Code Execution and Elevation of Privilege in .NET and Visual Studio

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62902: CVE-2026-62902: .NET and Visual Studio Information Disclosure Vulnerability
cverports profile

CVE-2026-62902: CVE-2026-62902: .NET and Visual Studio Information Disclosure Vulnerability

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62886: CVE-2026-62886: .NET Elevation of Privilege Vulnerability via Native Heap Buffer Overflow
cverports profile

CVE-2026-62886: CVE-2026-62886: .NET Elevation of Privilege Vulnerability via Native Heap Buffer Overflow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73080: CVE-2026-73080: Unauthenticated Server-Side Request Forgery (SSRF) in SeaweedFS Volume Server
cverports profile

CVE-2026-73080: CVE-2026-73080: Unauthenticated Server-Side Request Forgery (SSRF) in SeaweedFS Volume Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71556: CVE-2026-71556: Symbolic Link Directory Traversal in go-git
cverports profile

CVE-2026-71556: CVE-2026-71556: Symbolic Link Directory Traversal in go-git

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71557: CVE-2026-71557: Path Traversal and Configuration Overwrite in go-git Filesystem Storage Engine
cverports profile

CVE-2026-71557: CVE-2026-71557: Path Traversal and Configuration Overwrite in go-git Filesystem Storage Engine

#security #cve #cybersecurity
Comments
2 min read
GHSA-7C4V-FWGW-9RF7: GHSA-7c4v-fwgw-9rf7: Nuxt Dev Server Discloses Project Root and Workspace UUID via Chrome DevTools Endpoint
cverports profile

GHSA-7C4V-FWGW-9RF7: GHSA-7c4v-fwgw-9rf7: Nuxt Dev Server Discloses Project Root and Workspace UUID via Chrome DevTools Endpoint

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-66062: CVE-2026-66062: Regular Expression Denial of Service (ReDoS) in SvelteKit Content Negotiation
cverports profile

CVE-2026-66062: CVE-2026-66062: Regular Expression Denial of Service (ReDoS) in SvelteKit Content Negotiation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-15895: CVE-2026-15895: OS Command Injection in AWS jsii-diff CLI
cverports profile

CVE-2026-15895: CVE-2026-15895: OS Command Injection in AWS jsii-diff CLI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63220: CVE-2026-63220: Trust of Untrusted Reverse Proxy Headers in CodeIgniter4
cverports profile

CVE-2026-63220: CVE-2026-63220: Trust of Untrusted Reverse Proxy Headers in CodeIgniter4

#security #cve #cybersecurity
Comments
1 min read
CVE-2026-63221: CVE-2026-63221: SQL Injection in CodeIgniter4 Query Builder deleteBatch()
cverports profile

CVE-2026-63221: CVE-2026-63221: SQL Injection in CodeIgniter4 Query Builder deleteBatch()

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-63222: CVE-2026-63222: Remote Code Execution via Path Traversal in CodeIgniter4 File Upload Handler
cverports profile

CVE-2026-63222: CVE-2026-63222: Remote Code Execution via Path Traversal in CodeIgniter4 File Upload Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63223: CVE-2026-63223: Unrestricted File Upload leading to Remote Code Execution in CodeIgniter4
cverports profile

CVE-2026-63223: CVE-2026-63223: Unrestricted File Upload leading to Remote Code Execution in CodeIgniter4

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67422: CVE-2026-67422: Regular Expression Denial of Service in pymdown-extensions
cverports profile

CVE-2026-67422: CVE-2026-67422: Regular Expression Denial of Service in pymdown-extensions

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71847: CVE-2026-71847: Use-After-Free in Ruby JSON Gem ResumableParser
cverports profile

CVE-2026-71847: CVE-2026-71847: Use-After-Free in Ruby JSON Gem ResumableParser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71848: CVE-2026-71848: Algorithmic Complexity Denial of Service in Hono languageDetector Middleware
cverports profile

CVE-2026-71848: CVE-2026-71848: Algorithmic Complexity Denial of Service in Hono languageDetector Middleware

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71849: CVE-2026-71849: Information Exposure via Hop-by-Hop Header Leakage in Hono Proxy Helper
cverports profile

CVE-2026-71849: CVE-2026-71849: Information Exposure via Hop-by-Hop Header Leakage in Hono Proxy Helper

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71850: CVE-2026-71850: Server-Side Rendering Data Exposure in Hono JSX Memoization
cverports profile

CVE-2026-71850: CVE-2026-71850: Server-Side Rendering Data Exposure in Hono JSX Memoization

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71851: CVE-2026-71851: Use of Cryptographically Weak PRNG in crypto-js (Ill Bloom)
cverports profile

CVE-2026-71851: CVE-2026-71851: Use of Cryptographically Weak PRNG in crypto-js (Ill Bloom)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71870: CVE-2026-71870: Uncontrolled Resource Consumption (DoS) in pypdf ToUnicode CMap Parsing
cverports profile

CVE-2026-71870: CVE-2026-71870: Uncontrolled Resource Consumption (DoS) in pypdf ToUnicode CMap Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71852: CVE-2026-71852: Denial of Service via Excessive Iteration and Memory Exhaustion in pypdf CID Font Parsing
cverports profile

CVE-2026-71852: CVE-2026-71852: Denial of Service via Excessive Iteration and Memory Exhaustion in pypdf CID Font Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56818: CVE-2026-56818: Denial of Service via Memory Pinning in Netty Redis Array Aggregator
cverports profile

CVE-2026-56818: CVE-2026-56818: Denial of Service via Memory Pinning in Netty Redis Array Aggregator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54164: CVE-2026-54164: Missing IRI Type Validation in API Platform Core Enables Resource Type Confusion
cverports profile

CVE-2026-54164: CVE-2026-54164: Missing IRI Type Validation in API Platform Core Enables Resource Type Confusion

#security #cve #cybersecurity
Comments
2 min read
GHSA-WVPP-8HX9-P66J: GHSA-WVPP-8HX9-P66J: Arbitrary Command Execution via Option Guard Bypass in GitPython
cverports profile

GHSA-WVPP-8HX9-P66J: GHSA-WVPP-8HX9-P66J: Arbitrary Command Execution via Option Guard Bypass in GitPython

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-WG23-69C2-GJC8: GHSA-WG23-69C2-GJC8: Passkey Login Replay Vulnerability in Craft CMS
cverports profile

GHSA-WG23-69C2-GJC8: GHSA-WG23-69C2-GJC8: Passkey Login Replay Vulnerability in Craft CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-MH25-X5HQ-WRQP: GHSA-MH25-X5HQ-WRQP: Algorithmic Complexity Denial of Service in league/commonmark UniqueSlugNormalizer
cverports profile

GHSA-MH25-X5HQ-WRQP: GHSA-MH25-X5HQ-WRQP: Algorithmic Complexity Denial of Service in league/commonmark UniqueSlugNormalizer

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-MJ63-M3RC-8PPR: GHSA-MJ63-M3RC-8PPR: Quadratic-Time Complexity in league/commonmark XML Pretty-Printing
cverports profile

GHSA-MJ63-M3RC-8PPR: GHSA-MJ63-M3RC-8PPR: Quadratic-Time Complexity in league/commonmark XML Pretty-Printing

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-265M-7826-WJQM: GHSA-265m-7826-wjqm: Authenticated Remote Code Execution in Craft CMS via condition.config JSON Cleanse Bypass
cverports profile

GHSA-265M-7826-WJQM: GHSA-265m-7826-wjqm: Authenticated Remote Code Execution in Craft CMS via condition.config JSON Cleanse Bypass

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-F5WM-88JV-G5HX: GHSA-F5WM-88JV-G5HX: Authenticated Remote Code Execution via Twig Sandbox Escape in Craft CMS
cverports profile

GHSA-F5WM-88JV-G5HX: GHSA-F5WM-88JV-G5HX: Authenticated Remote Code Execution via Twig Sandbox Escape in Craft CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-P8X7-9VFW-P7VC: GHSA-P8X7-9VFW-P7VC: Arbitrary User Password Reset via Mass Assignment in Craft CMS
cverports profile

GHSA-P8X7-9VFW-P7VC: GHSA-P8X7-9VFW-P7VC: Arbitrary User Password Reset via Mass Assignment in Craft CMS

#security #cve #cybersecurity #ghsa
Comments
1 min read
CVE-2026-71497: CVE-2026-71497: Parser-Browser Desynchronization leading to XSS in jsoup Sanitizer
cverports profile

CVE-2026-71497: CVE-2026-71497: Parser-Browser Desynchronization leading to XSS in jsoup Sanitizer

#security #cve #cybersecurity
Comments
2 min read
GHSA-W9HM-4M3M-FXMM: GHSA-W9HM-4M3M-FXMM: Arbitrary JavaScript Execution via Malicious PDF Parsing in ngx-extended-pdf-viewer
cverports profile

GHSA-W9HM-4M3M-FXMM: GHSA-W9HM-4M3M-FXMM: Arbitrary JavaScript Execution via Malicious PDF Parsing in ngx-extended-pdf-viewer

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-71430: CVE-2026-71430: Denial of Service via Native Assertion Failure in node-re2 Replace Operation
cverports profile

CVE-2026-71430: CVE-2026-71430: Denial of Service via Native Assertion Failure in node-re2 Replace Operation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71498: CVE-2026-71498: Out-of-bounds Heap Read in node-re2 via Truncated Multi-byte UTF-8 Characters
cverports profile

CVE-2026-71498: CVE-2026-71498: Out-of-bounds Heap Read in node-re2 via Truncated Multi-byte UTF-8 Characters

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67434: CVE-2026-67434: OS Command Injection via Malicious Filenames in PHP_CodeSniffer Blame Reports
cverports profile

CVE-2026-67434: CVE-2026-67434: OS Command Injection via Malicious Filenames in PHP_CodeSniffer Blame Reports

#security #cve #cybersecurity
Comments
2 min read
GHSA-2RP4-X2J7-QMCC: GHSA-2RP4-X2J7-QMCC: Stored Cross-Site Scripting via Draft Names in Craft CMS Control Panel
cverports profile

GHSA-2RP4-X2J7-QMCC: GHSA-2RP4-X2J7-QMCC: Stored Cross-Site Scripting via Draft Names in Craft CMS Control Panel

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-7HXC-F267-H5Q7: GHSA-7HXC-F267-H5Q7: Path Traversal via Validation-then-Normalization in Craft CMS
cverports profile

GHSA-7HXC-F267-H5Q7: GHSA-7HXC-F267-H5Q7: Path Traversal via Validation-then-Normalization in Craft CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-RVMM-V933-JGXQ: GHSA-rvmm-v933-jgxq: Missing Authorization Check in Craft CMS ChartsController
cverports profile

GHSA-RVMM-V933-JGXQ: GHSA-rvmm-v933-jgxq: Missing Authorization Check in Craft CMS ChartsController

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-596P-6JV8-775V: GHSA-596p-6jv8-775v: Authenticated Leak of Secret Environment Variables in Craft CMS
cverports profile

GHSA-596P-6JV8-775V: GHSA-596p-6jv8-775v: Authenticated Leak of Secret Environment Variables in Craft CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-71554: CVE-2026-71554: HTTP Request Smuggling via Duplicate Host Headers in h2 Protocol Stack
cverports profile

CVE-2026-71554: CVE-2026-71554: HTTP Request Smuggling via Duplicate Host Headers in h2 Protocol Stack

#security #cve #cybersecurity
Comments
2 min read
GHSA-957R-QF9P-67XW: GHSA-957R-QF9P-67XW: Arbitrary File Read via SplFileObject in Craft CMS Twig Extension
cverports profile

GHSA-957R-QF9P-67XW: GHSA-957R-QF9P-67XW: Arbitrary File Read via SplFileObject in Craft CMS Twig Extension

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-14793: CVE-2026-14793: Authorization Bypass in Craft CMS GlobalsController actionReorderSets
cverports profile

CVE-2026-14793: CVE-2026-14793: Authorization Bypass in Craft CMS GlobalsController actionReorderSets

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71438: CVE-2026-71438: Prototype Pollution in Mermaid Configuration APIs
cverports profile

CVE-2026-71438: CVE-2026-71438: Prototype Pollution in Mermaid Configuration APIs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67309: CVE-2026-67309: Path Traversal and Authentication Bypass in Traefik RewriteTarget Middleware
cverports profile

CVE-2026-67309: CVE-2026-67309: Path Traversal and Authentication Bypass in Traefik RewriteTarget Middleware

#security #cve #cybersecurity
Comments
2 min read
loading...