DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-118777: CVE-2026-118777: Prototype Pollution in Forge HTTP Client Cookie Management
cverports profile

CVE-2026-118777: CVE-2026-118777: Prototype Pollution in Forge HTTP Client Cookie Management

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118775: CVE-2026-118775: ASN.1 OID First Arc Truncation and Ambiguity in node-forge
cverports profile

CVE-2026-118775: CVE-2026-118775: ASN.1 OID First Arc Truncation and Ambiguity in node-forge

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119194: CVE-2026-119194: Algorithmic Complexity Denial of Service in pyasn1 Schemaless ASN.1 Decoder
cverports profile

CVE-2026-119194: CVE-2026-119194: Algorithmic Complexity Denial of Service in pyasn1 Schemaless ASN.1 Decoder

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders
cverports profile

CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119197: CVE-2026-119197: Quadratic Algorithmic Complexity Denial of Service in pyasn1 REAL Mantissa Decoder
cverports profile

CVE-2026-119197: CVE-2026-119197: Quadratic Algorithmic Complexity Denial of Service in pyasn1 REAL Mantissa Decoder

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding
cverports profile

CVE-2026-119196: CVE-2026-119196: Quadratic CPU Consumption in pyasn1 Constructed BIT STRING Decoding

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119209: CVE-2026-119209: Uncontrolled Resource Consumption in pypdf XRef Stream Parser
cverports profile

CVE-2026-119209: CVE-2026-119209: Uncontrolled Resource Consumption in pypdf XRef Stream Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119208: CVE-2026-119208: Uncontrolled Resource Consumption in pypdf Encrypted Page Count Evaluation
cverports profile

CVE-2026-119208: CVE-2026-119208: Uncontrolled Resource Consumption in pypdf Encrypted Page Count Evaluation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119207: CVE-2026-119207: Asymmetric Resource Consumption in pypdf Dictionary Parser
cverports profile

CVE-2026-119207: CVE-2026-119207: Asymmetric Resource Consumption in pypdf Dictionary Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119206: CVE-2026-119206: Algorithmic Complexity Denial of Service in pypdf Page Label Resolution
cverports profile

CVE-2026-119206: CVE-2026-119206: Algorithmic Complexity Denial of Service in pypdf Page Label Resolution

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116672: CVE-2026-116672: Authorization Bypass in Authlib RFC 7592 Client Configuration Endpoint
cverports profile

CVE-2026-116672: CVE-2026-116672: Authorization Bypass in Authlib RFC 7592 Client Configuration Endpoint

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118773: CVE-2026-118773: Asynchronous Control Flow Bypass and Uncontrolled Resource Consumption in node-glob
cverports profile

CVE-2026-118773: CVE-2026-118773: Asynchronous Control Flow Bypass and Uncontrolled Resource Consumption in node-glob

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118764: CVE-2026-118764: Asymmetric Resource Consumption and Denial of Service in minimatch Pattern Preprocessing
cverports profile

CVE-2026-118764: CVE-2026-118764: Asymmetric Resource Consumption and Denial of Service in minimatch Pattern Preprocessing

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118772: CVE-2026-118772: Regular Expression Denial of Service in Joi Email Validation
cverports profile

CVE-2026-118772: CVE-2026-118772: Regular Expression Denial of Service in Joi Email Validation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119205: CVE-2026-119205: Denial of Service via Infinite Loop in pypdf DictionaryObject Cloning
cverports profile

CVE-2026-119205: CVE-2026-119205: Denial of Service via Infinite Loop in pypdf DictionaryObject Cloning

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119204: CVE-2026-119204: Uncontrolled Resource Consumption in pypdf Page Tree Flattening
cverports profile

CVE-2026-119204: CVE-2026-119204: Uncontrolled Resource Consumption in pypdf Page Tree Flattening

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-119203: CVE-2026-119203: Infinite Loop in pypdf Standard Cross-Reference Table Parser
cverports profile

CVE-2026-119203: CVE-2026-119203: Infinite Loop in pypdf Standard Cross-Reference Table Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118759: CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines
cverports profile

CVE-2026-118759: CVE-2026-118759: Cross-Tenant Pod Log Exposure via Authorization Bypass in Kubeflow Pipelines

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server
cverports profile

CVE-2026-118761: CVE-2026-118761: Pre-Authorization Decompression Bomb Denial of Service in Kubeflow Pipelines API Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118763: CVE-2026-118763: Cross-Origin Credential Exposure in @sigstore/oci
cverports profile

CVE-2026-118763: CVE-2026-118763: Cross-Origin Credential Exposure in @sigstore/oci

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119282: CVE-2026-119282: OS Command Injection via Plugin Options in Nx (@nx/maven and @nx/gradle)
cverports profile

CVE-2026-119282: CVE-2026-119282: OS Command Injection via Plugin Options in Nx (@nx/maven and @nx/gradle)

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-59978: CVE-2026-59978: Persistent Denial of Service via Array Injection in AdminNeo
cverports profile

CVE-2026-59978: CVE-2026-59978: Persistent Denial of Service via Array Injection in AdminNeo

#security #cve #cybersecurity
Comments
3 min read
GHSA-FGXM-5HVV-X4VH: GHSA-fgxm-5hvv-x4vh: Private Repository Enumeration via Go Module Discovery and HTTP Response…
cverports profile

GHSA-FGXM-5HVV-X4VH: GHSA-fgxm-5hvv-x4vh: Private Repository Enumeration via Go Module Discovery and HTTP Response…

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-F3FJ-9625-RV3M: GHSA-f3fj-9625-rv3m: Race Condition in Soft Serve Repository Cache Invalidation
cverports profile

GHSA-F3FJ-9625-RV3M: GHSA-f3fj-9625-rv3m: Race Condition in Soft Serve Repository Cache Invalidation

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-119283: CVE-2026-119283: Unbounded JWE Recipients Array Causes CPU Exhaustion in Authlib joserfc
cverports profile

CVE-2026-119283: CVE-2026-119283: Unbounded JWE Recipients Array Causes CPU Exhaustion in Authlib joserfc

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-119284: CVE-2026-119284: Uncontrolled Resource Consumption in joserfc Compact Deserialization
cverports profile

CVE-2026-119284: CVE-2026-119284: Uncontrolled Resource Consumption in joserfc Compact Deserialization

#security #cve #cybersecurity
Comments
4 min read
GHSA-C33X-VCV4-VG3G: GHSA-c33x-vcv4-vg3g: Missing Slot Identifier Validation in Cedar Policy Language JSON Template Parser…
cverports profile

GHSA-C33X-VCV4-VG3G: GHSA-c33x-vcv4-vg3g: Missing Slot Identifier Validation in Cedar Policy Language JSON Template Parser…

#security #cve #cybersecurity #ghsa
Comments
4 min read
GHSA-W9X9-J56R-H98R: GHSA-w9x9-j56r-h98r: Unauthenticated Confused Deputy Proxy in @eeacms/volto-chatbot
cverports profile

GHSA-W9X9-J56R-H98R: GHSA-w9x9-j56r-h98r: Unauthenticated Confused Deputy Proxy in @eeacms/volto-chatbot

#security #cve #cybersecurity #ghsa
Comments
4 min read
CVE-2026-9705: CVE-2026-9705: Registration Access Token Authorization Bypass in Keycloak Dynamic Client Registration
cverports profile

CVE-2026-9705: CVE-2026-9705: Registration Access Token Authorization Bypass in Keycloak Dynamic Client Registration

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9800: CVE-2026-9800: Authorization Bypass in Keycloak Policy Enforcer via Unnormalized URI Substring Matching
cverports profile

CVE-2026-9800: CVE-2026-9800: Authorization Bypass in Keycloak Policy Enforcer via Unnormalized URI Substring Matching

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9799: CVE-2026-9799: Authorization Bypass via UMA Permission Ticket Wildcard in Keycloak
cverports profile

CVE-2026-9799: CVE-2026-9799: Authorization Bypass via UMA Permission Ticket Wildcard in Keycloak

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9083: CVE-2026-9083: Arbitrary Filesystem Path Probing in Keycloak Java Keystore Key Provider
cverports profile

CVE-2026-9083: CVE-2026-9083: Arbitrary Filesystem Path Probing in Keycloak Java Keystore Key Provider

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-9086: CVE-2026-9086: Stored Cross-Site Scripting via Case-Sensitive URI Scheme Validation Bypass in Keycloak
cverports profile

CVE-2026-9086: CVE-2026-9086: Stored Cross-Site Scripting via Case-Sensitive URI Scheme Validation Bypass in Keycloak

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-62290: CVE-2026-62290: ClusterIssuer DNS01 Solver Policy Bypass and Credential Exfiltration in cert-manager
cverports profile

CVE-2026-62290: CVE-2026-62290: ClusterIssuer DNS01 Solver Policy Bypass and Credential Exfiltration in cert-manager

#security #cve #cybersecurity
Comments 1
4 min read
CVE-2026-118662: CVE-2026-118662: Access Control Bypass via Uncanonicalized Query Parameters in Vite Development Server
cverports profile

CVE-2026-118662: CVE-2026-118662: Access Control Bypass via Uncanonicalized Query Parameters in Vite Development Server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115909: CVE-2026-115909: Unbounded Symlink-Target Allocation Causes Process Abort in Rust zip Crate
cverports profile

CVE-2026-115909: CVE-2026-115909: Unbounded Symlink-Target Allocation Causes Process Abort in Rust zip Crate

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115906: CVE-2026-115906: AES Entry HMAC Authentication Bypass in Rust zip Crate
cverports profile

CVE-2026-115906: CVE-2026-115906: AES Entry HMAC Authentication Bypass in Rust zip Crate

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115908: CVE-2026-115908: Arbitrary File Write via Lexical Symlink Validation Bypass in Rust zip Crate
cverports profile

CVE-2026-115908: CVE-2026-115908: Arbitrary File Write via Lexical Symlink Validation Bypass in Rust zip Crate

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115907: CVE-2026-115907: Denial of Service via Excessive Memory Pre-allocation in Rust zip Crate Legacy Decoders
cverports profile

CVE-2026-115907: CVE-2026-115907: Denial of Service via Excessive Memory Pre-allocation in Rust zip Crate Legacy Decoders

#security #cve #cybersecurity
Comments
4 min read
GHSA-VPP8-G58W-M8MP: GHSA-vpp8-g58w-m8mp: HTTP/2 Rapid Reset Denial of Service in Twisted Web
cverports profile

GHSA-VPP8-G58W-M8MP: GHSA-vpp8-g58w-m8mp: HTTP/2 Rapid Reset Denial of Service in Twisted Web

#security #cve #cybersecurity #ghsa
Comments
4 min read
CVE-2026-118664: CVE-2026-118664: Quadratic Complexity Denial of Service in decode-uri-component
cverports profile

CVE-2026-118664: CVE-2026-118664: Quadratic Complexity Denial of Service in decode-uri-component

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115921: CVE-2026-115921: Null Pointer Dereference and Integer Conversion in ONNX ScanInferenceFunction
cverports profile

CVE-2026-115921: CVE-2026-115921: Null Pointer Dereference and Integer Conversion in ONNX ScanInferenceFunction

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-91403: CVE-2026-91403: Cryptographic Trust Validation Bypass in Oracle Java SE JSSE via Compromised eMudhra…
cverports profile

CVE-2026-91403: CVE-2026-91403: Cryptographic Trust Validation Bypass in Oracle Java SE JSSE via Compromised eMudhra…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115922: CVE-2026-115922: Denial of Service via Unchecked Expansion of Packed Sub-Byte Tensors in ONNX
cverports profile

CVE-2026-115922: CVE-2026-115922: Denial of Service via Unchecked Expansion of Packed Sub-Byte Tensors in ONNX

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-115920: CVE-2026-115920: Out-of-Bounds Read in ONNX ConvTranspose Shape Inference
cverports profile

CVE-2026-115920: CVE-2026-115920: Out-of-Bounds Read in ONNX ConvTranspose Shape Inference

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115910: CVE-2026-115910: OpenID Connect Session-Binding Bypass and Account Takeover in Python Social Auth
cverports profile

CVE-2026-115910: CVE-2026-115910: OpenID Connect Session-Binding Bypass and Account Takeover in Python Social Auth

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-111497: CVE-2026-111497: Out-of-Bounds Heap Write and Remote Code Execution in Google Brotli Decoder (Node2Shell)
cverports profile

CVE-2026-111497: CVE-2026-111497: Out-of-Bounds Heap Write and Remote Code Execution in Google Brotli Decoder (Node2Shell)

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-116575: CVE-2026-116575: Cross-Tenant Conversation Disclosure via Delimiter Injection in Mem0
cverports profile

CVE-2026-116575: CVE-2026-116575: Cross-Tenant Conversation Disclosure via Delimiter Injection in Mem0

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116580: CVE-2026-116580: Unvalidated Method Invocation via Identifier Reuse in Seroval Deserializer
cverports profile

CVE-2026-116580: CVE-2026-116580: Unvalidated Method Invocation via Identifier Reuse in Seroval Deserializer

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-116584: CVE-2026-116584: Denial of Service via Unvalidated Node Element Lists in Seroval
cverports profile

CVE-2026-116584: CVE-2026-116584: Denial of Service via Unvalidated Node Element Lists in Seroval

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116581: CVE-2026-116581: Unauthenticated Event-Loop Denial of Service via Unvalidated Sequence Indices in Seroval
cverports profile

CVE-2026-116581: CVE-2026-116581: Unauthenticated Event-Loop Denial of Service via Unvalidated Sequence Indices in Seroval

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-116582: CVE-2026-116582: Cross-Site Scripting via Unescaped RegExp Serialization in Seroval
cverports profile

CVE-2026-116582: CVE-2026-116582: Cross-Site Scripting via Unescaped RegExp Serialization in Seroval

#security #cve #cybersecurity
1
Comments
3 min read
CVE-2026-116583: CVE-2026-116583: Code Injection via TypedArray Constructor Property Spoofing in Seroval
cverports profile

CVE-2026-116583: CVE-2026-116583: Code Injection via TypedArray Constructor Property Spoofing in Seroval

#security #cve #cybersecurity
Comments
3 min read
GHSA-JF75-Q64Q-G65R: GHSA-jf75-q64q-g65r: NoSQL Query Manipulation and Partial Authentication Bypass in Waline Server
cverports profile

GHSA-JF75-Q64Q-G65R: GHSA-jf75-q64q-g65r: NoSQL Query Manipulation and Partial Authentication Bypass in Waline Server

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-2HW4-C9M4-F2FJ: CVE-2026-54462: Unbounded Request-Body Memory Exhaustion in Knative Admission Webhooks
cverports profile

GHSA-2HW4-C9M4-F2FJ: CVE-2026-54462: Unbounded Request-Body Memory Exhaustion in Knative Admission Webhooks

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115923: CVE-2026-115923: Path Traversal and Catalog Rule Bypass in Backstage Catalog Backend
cverports profile

CVE-2026-115923: CVE-2026-115923: Path Traversal and Catalog Rule Bypass in Backstage Catalog Backend

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116576: CVE-2026-116576: OS Command Injection via Unicode Quotation Marks in Node.js systeminformation
cverports profile

CVE-2026-116576: CVE-2026-116576: OS Command Injection via Unicode Quotation Marks in Node.js systeminformation

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116695: CVE-2026-116695: CSS Sanitizer Bypass via Bad URL Tokenization Differential in Crass
cverports profile

CVE-2026-116695: CVE-2026-116695: CSS Sanitizer Bypass via Bad URL Tokenization Differential in Crass

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-116577: CVE-2026-116577: Algorithmic Complexity Denial of Service in Tornado HTTP Header Parser
cverports profile

CVE-2026-116577: CVE-2026-116577: Algorithmic Complexity Denial of Service in Tornado HTTP Header Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-116578: CVE-2026-116578: Open Redirect in Tornado RedirectHandler via URL Normalization and Template Substitution
cverports profile

CVE-2026-116578: CVE-2026-116578: Open Redirect in Tornado RedirectHandler via URL Normalization and Template Substitution

#security #cve #cybersecurity
Comments
5 min read
loading...