DEV Community

# cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GHSA-XX7M-69FF-9CRP: SurrealDB's Poison Pill: Crashing the Database with a Single String

GHSA-XX7M-69FF-9CRP: SurrealDB's Poison Pill: Crashing the Database with a Single String

Comments
2 min read
CVE-2026-2391: Death by a Thousand Commas: Deep Dive into CVE-2026-2391

CVE-2026-2391: Death by a Thousand Commas: Deep Dive into CVE-2026-2391

Comments
2 min read
CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels

CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels

Comments
2 min read
CVE-2026-25759: Command Pwned: Stored XSS in Statamic's Command Palette

CVE-2026-25759: Command Pwned: Stored XSS in Statamic's Command Palette

Comments
2 min read
GHSA-435G-FCV3-8J26: High Assurance, Low Availability: The Libcrux Triple Threat

GHSA-435G-FCV3-8J26: High Assurance, Low Availability: The Libcrux Triple Threat

Comments
2 min read
GHSA-7PPG-37FH-VCR6: Vector Injection? No, Just Regular Injection: Milvus Critical Auth Bypass

GHSA-7PPG-37FH-VCR6: Vector Injection? No, Just Regular Injection: Milvus Critical Auth Bypass

Comments
2 min read
CVE-2026-25990: Pillow Fight: Weaponizing Photoshop Files via OOB Writes

CVE-2026-25990: Pillow Fight: Weaponizing Photoshop Files via OOB Writes

Comments
2 min read
CVE-2026-25949: Traefik's Eternal Wait: Bypassing TCP Timeouts with Postgres Magic Bytes

CVE-2026-25949: Traefik's Eternal Wait: Bypassing TCP Timeouts with Postgres Magic Bytes

Comments
2 min read
CVE-2025-66630: The Null Identity: Unmasking Fiber's Critical 'Zero-UUID' Vulnerability

CVE-2025-66630: The Null Identity: Unmasking Fiber's Critical 'Zero-UUID' Vulnerability

Comments
2 min read
CVE-2025-64111: CVE-2025-64111: The Gogs Symlink Shimmy to RCE

CVE-2025-64111: CVE-2025-64111: The Gogs Symlink Shimmy to RCE

Comments
2 min read
CVE-2026-25957: Cube.js Crash Course: Async Nightmares and WebSocket Woes

CVE-2026-25957: Cube.js Crash Course: Async Nightmares and WebSocket Woes

Comments
2 min read
CVE-2026-25498: Crafting Chaos: RCE in Craft CMS via Yii2 Behavior Injection

CVE-2026-25498: Crafting Chaos: RCE in Craft CMS via Yii2 Behavior Injection

Comments
2 min read
GHSA-382Q-FPQH-29F7: Betting on a Bad Horse: The Malicious `polymarket-clients-sdk` Crate

GHSA-382Q-FPQH-29F7: Betting on a Bad Horse: The Malicious `polymarket-clients-sdk` Crate

Comments
2 min read
GHSA-F8H5-X737-X4XR: Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io

GHSA-F8H5-X737-X4XR: Finch-Rust: The Shai-Hulud Worm Burrows into Crates.io

Comments
2 min read
GHSA-6662-54XR-8423: The Trojan Horse in Your Cargo.toml: Deconstructing the 'evm-units' Supply Chain Attack

GHSA-6662-54XR-8423: The Trojan Horse in Your Cargo.toml: Deconstructing the 'evm-units' Supply Chain Attack

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.