DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-116690: CVE-2026-116690: Arbitrary File Read via Prompt Model Version Source in MLflow

CVE-2026-116690: CVE-2026-116690: Arbitrary File Read via Prompt Model Version Source in MLflow

Comments
4 min read
CVE-2026-109383: CVE-2026-109383: Improper Certificate Validation in Node.js Undici Agent Dispatcher

CVE-2026-109383: CVE-2026-109383: Improper Certificate Validation in Node.js Undici Agent Dispatcher

Comments
4 min read
CVE-2026-109829: CVE-2026-109829: Persistent Cache Poisoning and Cross-User Information Disclosure in Node.js Undici

CVE-2026-109829: CVE-2026-109829: Persistent Cache Poisoning and Cross-User Information Disclosure in Node.js Undici

Comments
3 min read
GHSA-WF6J-7HVR-GR93: GHSA-wf6j-7hvr-gr93: Arbitrary Code Execution via PyYAML Target Blocklist Bypass in hydra-core

GHSA-WF6J-7HVR-GR93: GHSA-wf6j-7hvr-gr93: Arbitrary Code Execution via PyYAML Target Blocklist Bypass in hydra-core

Comments
4 min read
CVE-2026-110816: CVE-2026-110816: Denial of Service via Uncaught Exception in Node.js qs Library

CVE-2026-110816: CVE-2026-110816: Denial of Service via Uncaught Exception in Node.js qs Library

Comments
4 min read
CVE-2026-114620: CVE-2026-114620: Server-Side Request Forgery in Authlib RFC 9101 JWT-Secured Authorization Request

CVE-2026-114620: CVE-2026-114620: Server-Side Request Forgery in Authlib RFC 9101 JWT-Secured Authorization Request

Comments
3 min read
GHSA-J456-XH4H-CPF2: CVE-2026-109956: Path Traversal and Sandbox Bypass in NLTK WekaClassifier

GHSA-J456-XH4H-CPF2: CVE-2026-109956: Path Traversal and Sandbox Bypass in NLTK WekaClassifier

Comments
4 min read
CVE-2026-35002: CVE-2026-35002: Eval Injection and Arbitrary Code Execution in Agno Agent Platform

CVE-2026-35002: CVE-2026-35002: Eval Injection and Arbitrary Code Execution in Agno Agent Platform

Comments
4 min read
Upgrading to PHP 8.2.35: Addressing Post-Upgrade Anxiety and Maintenance Challenges in Production Environment

Upgrading to PHP 8.2.35: Addressing Post-Upgrade Anxiety and Maintenance Challenges in Production Environment

Comments
8 min read
Security roundup: October 17–23, 2026

Security roundup: October 17–23, 2026

Comments
2 min read
CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler

CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler

Comments
4 min read
CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores

CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores

Comments
3 min read
CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript

CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript

Comments
4 min read
CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation

CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation

Comments
4 min read
CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.