DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-116692: CVE-2026-116692: Remote Code Execution in MLflow via Third-Party Scorer Deserialization
cverports profile

CVE-2026-116692: CVE-2026-116692: Remote Code Execution in MLflow via Third-Party Scorer Deserialization

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-116691: CVE-2026-116691: Cleartext LLM Provider API Key Disclosure in MLflow CrewAI Autologging
cverports profile

CVE-2026-116691: CVE-2026-116691: Cleartext LLM Provider API Key Disclosure in MLflow CrewAI Autologging

#security #cve #cybersecurity
Comments
7 min read
CVE-2026-116690: CVE-2026-116690: Arbitrary File Read via Prompt Model Version Source in MLflow
cverports profile

CVE-2026-116690: CVE-2026-116690: Arbitrary File Read via Prompt Model Version Source in MLflow

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109383: CVE-2026-109383: Improper Certificate Validation in Node.js Undici Agent Dispatcher
cverports profile

CVE-2026-109383: CVE-2026-109383: Improper Certificate Validation in Node.js Undici Agent Dispatcher

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109829: CVE-2026-109829: Persistent Cache Poisoning and Cross-User Information Disclosure in Node.js Undici
cverports profile

CVE-2026-109829: CVE-2026-109829: Persistent Cache Poisoning and Cross-User Information Disclosure in Node.js Undici

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-109855: CVE-2026-109855: Denial of Service via Unhandled Stream Error in Node.js Undici HTTP/2 WebSockets
cverports profile

CVE-2026-109855: CVE-2026-109855: Denial of Service via Unhandled Stream Error in Node.js Undici HTTP/2 WebSockets

#security #cve #cybersecurity
Comments
4 min read
GHSA-WF6J-7HVR-GR93: GHSA-wf6j-7hvr-gr93: Arbitrary Code Execution via PyYAML Target Blocklist Bypass in hydra-core
cverports profile

GHSA-WF6J-7HVR-GR93: GHSA-wf6j-7hvr-gr93: Arbitrary Code Execution via PyYAML Target Blocklist Bypass in hydra-core

#security #cve #cybersecurity #ghsa
Comments
4 min read
CVE-2026-110816: CVE-2026-110816: Denial of Service via Uncaught Exception in Node.js qs Library
cverports profile

CVE-2026-110816: CVE-2026-110816: Denial of Service via Uncaught Exception in Node.js qs Library

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114620: CVE-2026-114620: Server-Side Request Forgery in Authlib RFC 9101 JWT-Secured Authorization Request
cverports profile

CVE-2026-114620: CVE-2026-114620: Server-Side Request Forgery in Authlib RFC 9101 JWT-Secured Authorization Request

#security #cve #cybersecurity
Comments
3 min read
GHSA-J456-XH4H-CPF2: CVE-2026-109956: Path Traversal and Sandbox Bypass in NLTK WekaClassifier
cverports profile

GHSA-J456-XH4H-CPF2: CVE-2026-109956: Path Traversal and Sandbox Bypass in NLTK WekaClassifier

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-35002: CVE-2026-35002: Eval Injection and Arbitrary Code Execution in Agno Agent Platform
cverports profile

CVE-2026-35002: CVE-2026-35002: Eval Injection and Arbitrary Code Execution in Agno Agent Platform

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler
cverports profile

CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores
cverports profile

CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-115886: CVE-2026-115886: Unauthenticated Server-Side Request Forgery and Unsafe Reflection in MLflow Scorer…
cverports profile

CVE-2026-115886: CVE-2026-115886: Unauthenticated Server-Side Request Forgery and Unsafe Reflection in MLflow Scorer…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-113872: CVE-2026-113872: Unauthenticated Process Crash in Express Multer via Late Busboy Stream Resumption
cverports profile

CVE-2026-113872: CVE-2026-113872: Unauthenticated Process Crash in Express Multer via Late Busboy Stream Resumption

#security #cve #cybersecurity
1
Comments
3 min read
CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript
cverports profile

CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109841: CVE-2026-109841: Subresource Integrity Verification Bypass in Node.js Undici
cverports profile

CVE-2026-109841: CVE-2026-109841: Subresource Integrity Verification Bypass in Node.js Undici

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109924: CVE-2026-109924: Unbounded Memory Allocation in Node.js Undici EventSource Stream Parser
cverports profile

CVE-2026-109924: CVE-2026-109924: Unbounded Memory Allocation in Node.js Undici EventSource Stream Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation
cverports profile

CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM
cverports profile

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109461: CVE-2026-109461: Origin Validation Error in @azure/msal-node Leads to Information Disclosure
cverports profile

CVE-2026-109461: CVE-2026-109461: Origin Validation Error in @azure/msal-node Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113719: CVE-2026-113719: Arbitrary File Deletion via Path Traversal in virtualenv Seed Package Metadata
cverports profile

CVE-2026-113719: CVE-2026-113719: Arbitrary File Deletion via Path Traversal in virtualenv Seed Package Metadata

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113715: CVE-2026-113715: Configuration Key Injection via Unicode Line Boundary in virtualenv
cverports profile

CVE-2026-113715: CVE-2026-113715: Configuration Key Injection via Unicode Line Boundary in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113723: CVE-2026-113723: OS Command Injection via Unsafe Prompt Expansion in PyPA virtualenv
cverports profile

CVE-2026-113723: CVE-2026-113723: OS Command Injection via Unsafe Prompt Expansion in PyPA virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113720: CVE-2026-113720: Local Permission Inheritance Vulnerability in virtualenv
cverports profile

CVE-2026-113720: CVE-2026-113720: Local Permission Inheritance Vulnerability in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113718: CVE-2026-113718: Code Injection in pypa/virtualenv XonshActivator via Multibyte Encoding Misalignment
cverports profile

CVE-2026-113718: CVE-2026-113718: Code Injection in pypa/virtualenv XonshActivator via Multibyte Encoding Misalignment

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113714: CVE-2026-113714: Cache Poisoning and Unvalidated Wheel Download in virtualenv
cverports profile

CVE-2026-113714: CVE-2026-113714: Cache Poisoning and Unvalidated Wheel Download in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113717: CVE-2026-113717: Package Digest Verification Bypass in virtualenv Pip Seeder
cverports profile

CVE-2026-113717: CVE-2026-113717: Package Digest Verification Bypass in virtualenv Pip Seeder

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113713: CVE-2026-113713: Insecure Temporary File Symlink Handling in PyPA virtualenv
cverports profile

CVE-2026-113713: CVE-2026-113713: Insecure Temporary File Symlink Handling in PyPA virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-112937: CVE-2026-112937: Arbitrary Directory Deletion via TOCTOU Race Condition in filelock ReadWriteLock
cverports profile

CVE-2026-112937: CVE-2026-112937: Arbitrary Directory Deletion via TOCTOU Race Condition in filelock ReadWriteLock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-112906: CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock
cverports profile

CVE-2026-112906: CVE-2026-112906: Mutual Exclusion Bypass via Inode Recycling and Time Tracking Race in filelock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114055: CVE-2026-114055: Uncontrolled Resource Consumption in vLLM via Unvalidated Multimodal Kwargs
cverports profile

CVE-2026-114055: CVE-2026-114055: Uncontrolled Resource Consumption in vLLM via Unvalidated Multimodal Kwargs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62204: CVE-2026-62204: Arbitrary Bazaar Package Overwrite in SiYuan via Parameter Mismatch
cverports profile

CVE-2026-62204: CVE-2026-62204: Arbitrary Bazaar Package Overwrite in SiYuan via Parameter Mismatch

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-115478: CVE-2026-115478: Incorrect Authorization and Incomplete Cleanup in obsidian-tc
cverports profile

CVE-2026-115478: CVE-2026-115478: Incorrect Authorization and Incomplete Cleanup in obsidian-tc

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-115477: CVE-2026-115477: Human-in-the-Loop Authorization Bypass in obsidian-tc
cverports profile

CVE-2026-115477: CVE-2026-115477: Human-in-the-Loop Authorization Bypass in obsidian-tc

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113790: CVE-2026-113790: Uncontrolled Resource Consumption in pypdf Container Parsing
cverports profile

CVE-2026-113790: CVE-2026-113790: Uncontrolled Resource Consumption in pypdf Container Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113789: CVE-2026-113789: Algorithmic Complexity and Resource Exhaustion in pypdf Interactive Form Parsing
cverports profile

CVE-2026-113789: CVE-2026-113789: Algorithmic Complexity and Resource Exhaustion in pypdf Interactive Form Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114131: CVE-2026-114131: Nuxt Route Rules appMiddleware Bypass via Percent-Encoded Route Segments
cverports profile

CVE-2026-114131: CVE-2026-114131: Nuxt Route Rules appMiddleware Bypass via Percent-Encoded Route Segments

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114130: CVE-2026-114130: Cross-Site Scripting via ASCII Control Characters in Nuxt Fallback Router
cverports profile

CVE-2026-114130: CVE-2026-114130: Cross-Site Scripting via ASCII Control Characters in Nuxt Fallback Router

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114133: CVE-2026-114133: Stored Cross-Site Scripting via useHeadSafe in Nuxt Server Islands
cverports profile

CVE-2026-114133: CVE-2026-114133: Stored Cross-Site Scripting via useHeadSafe in Nuxt Server Islands

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-114132: CVE-2026-114132: Case-Sensitivity Route Rule Bypass in Nuxt Framework
cverports profile

CVE-2026-114132: CVE-2026-114132: Case-Sensitivity Route Rule Bypass in Nuxt Framework

#security #cve #cybersecurity
Comments
2 min read
GHSA-78G4-XQWV-Q3G8: GHSA-78G4-XQWV-Q3G8: Heap-Based Buffer Overflow in Pillow (libopenjp2)
cverports profile

GHSA-78G4-XQWV-Q3G8: GHSA-78G4-XQWV-Q3G8: Heap-Based Buffer Overflow in Pillow (libopenjp2)

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-88779: CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix NetScaler…
cverports profile

CVE-2026-88779: CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix NetScaler…

#security #cve #cybersecurity
Comments
2 min read
GHSA-9CQF-HHRQ-7V45: Missing publish-access check on getAttributeViewSearchTarget endpoint exposes database row content to…
cverports profile

GHSA-9CQF-HHRQ-7V45: Missing publish-access check on getAttributeViewSearchTarget endpoint exposes database row content to…

#security #cve #cybersecurity #ghsa
Comments
1 min read
CVE-2026-109619: CVE-2026-109619: Remote Code Execution in PHP Core via Stale Global State Memory Corruption (PHP2Shell)
cverports profile

CVE-2026-109619: CVE-2026-109619: Remote Code Execution in PHP Core via Stale Global State Memory Corruption (PHP2Shell)

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-61782: CVE-2026-61782: Sensitive Information Disclosure and Source Code Exfiltration via Insecure HTTP Server…
cverports profile

CVE-2026-61782: CVE-2026-61782: Sensitive Information Disclosure and Source Code Exfiltration via Insecure HTTP Server…

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-109618: CVE-2026-109618: Remote Code Execution in PHP Core via Out-of-Memory longjmp() Uninitialized Memory Access
cverports profile

CVE-2026-109618: CVE-2026-109618: Remote Code Execution in PHP Core via Out-of-Memory longjmp() Uninitialized Memory Access

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-113721: CVE-2026-113721: Unsafe Link Resolution in virtualenv File Generation
cverports profile

CVE-2026-113721: CVE-2026-113721: Unsafe Link Resolution in virtualenv File Generation

#security #cve #cybersecurity
Comments
2 min read
GHSA-JR78-W6W5-M8F8: GHSA-JR78-W6W5-M8F8: Missing Authorization in Semantic MediaWiki smwtask API Module Allows…
cverports profile

GHSA-JR78-W6W5-M8F8: GHSA-JR78-W6W5-M8F8: Missing Authorization in Semantic MediaWiki smwtask API Module Allows…

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-87697: CVE-2026-87697: Untrusted Deserialization in .NET PresentationCore Clipboard Handling
cverports profile

CVE-2026-87697: CVE-2026-87697: Untrusted Deserialization in .NET PresentationCore Clipboard Handling

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem
cverports profile

CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-70186: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability via Framework Deadlock
cverports profile

CVE-2026-70186: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability via Framework Deadlock

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70035: CVE-2026-70035: Insecure Deserialization Remote Code Execution in Microsoft .NET Framework and .NET Runtime
cverports profile

CVE-2026-70035: CVE-2026-70035: Insecure Deserialization Remote Code Execution in Microsoft .NET Framework and .NET Runtime

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition
cverports profile

CVE-2026-70183: CVE-2026-70183: Elevation of Privilege in ASP.NET Core and Visual Studio via Concurrent Race Condition

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107844: CVE-2026-107844: Path Traversal Vulnerability in Contao ImagesController
cverports profile

CVE-2026-107844: CVE-2026-107844: Path Traversal Vulnerability in Contao ImagesController

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107848: CVE-2026-107848: Cross-Site Request Forgery (CSRF) in Contao Backend Actions via GET Requests
cverports profile

CVE-2026-107848: CVE-2026-107848: Cross-Site Request Forgery (CSRF) in Contao Backend Actions via GET Requests

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107843: CVE-2026-107843: Unthrottled Activation Email Resend and Account Enumeration in Contao CMS
cverports profile

CVE-2026-107843: CVE-2026-107843: Unthrottled Activation Email Resend and Account Enumeration in Contao CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107842: CVE-2026-107842: Information Disclosure via Stale Indexing in Contao Search Module
cverports profile

CVE-2026-107842: CVE-2026-107842: Information Disclosure via Stale Indexing in Contao Search Module

#security #cve #cybersecurity
Comments
2 min read
GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation
cverports profile

GHSA-G38J-7V97-X298: GHSA-G38J-7V97-X298: Missing Authorization Check in Vikunja CalDAV Task Relation Creation

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja
cverports profile

GHSA-3HC7-R24J-RPWC: GHSA-3hc7-r24j-rpwc: Cross-Project Task Disclosure via Subtask Expansion in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
loading...