DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
GHSA-G57G-F23G-4646: GHSA-G57G-F23G-4646: Parser Differential and SMTP Injection in Nodemailer Address Parser
cverports profile

GHSA-G57G-F23G-4646: GHSA-G57G-F23G-4646: Parser Differential and SMTP Injection in Nodemailer Address Parser

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-102276: CVE-2026-102276: Denial of Service via Uncontrolled Recursion and Argument-List Exhaustion in brace-expansion
cverports profile

CVE-2026-102276: CVE-2026-102276: Denial of Service via Uncontrolled Recursion and Argument-List Exhaustion in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102278: CVE-2026-102278: Stack-Based Denial of Service via Uncontrolled Recursion in brace-expansion
cverports profile

CVE-2026-102278: CVE-2026-102278: Stack-Based Denial of Service via Uncontrolled Recursion in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102277: CVE-2026-102277: Denial of Service via Quadratic Algorithmic Complexity in brace-expansion
cverports profile

CVE-2026-102277: CVE-2026-102277: Denial of Service via Quadratic Algorithmic Complexity in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-17495: CVE-2026-17495: Path Traversal via Type Confusion in Moment.js Dynamic Locale Loading
cverports profile

CVE-2026-17495: CVE-2026-17495: Path Traversal via Type Confusion in Moment.js Dynamic Locale Loading

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101911: CVE-2026-101911: Denial of Service via Uncontrolled Resource Consumption in ip-address Library
cverports profile

CVE-2026-101911: CVE-2026-101911: Denial of Service via Uncontrolled Resource Consumption in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101912: CVE-2026-101912: Cross-Family IP Address Subnet Containment Logic Bypass in ip-address Library
cverports profile

CVE-2026-101912: CVE-2026-101912: Cross-Family IP Address Subnet Containment Logic Bypass in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101894: CVE-2026-101894: Arbitrary File Read/Write via Symbolic Link Chaining in @xhmikosr/decompress
cverports profile

CVE-2026-101894: CVE-2026-101894: Arbitrary File Read/Write via Symbolic Link Chaining in @xhmikosr/decompress

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86818: CVE-2026-86818: Mailto Header Injection via Percent-Encoded Field-Name Desynchronization in fast-uri
cverports profile

CVE-2026-86818: CVE-2026-86818: Mailto Header Injection via Percent-Encoded Field-Name Desynchronization in fast-uri

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-86472: CVE-2026-86472: Hostname Canonicalization Bypass in fast-uri via Scheme-Relative URLs
cverports profile

CVE-2026-86472: CVE-2026-86472: Hostname Canonicalization Bypass in fast-uri via Scheme-Relative URLs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102281: CVE-2026-102281: Denial of Service via Uncaught Exception in @nestjs/microservices
cverports profile

CVE-2026-102281: CVE-2026-102281: Denial of Service via Uncaught Exception in @nestjs/microservices

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-18149: CVE-2026-18149: Unresolved Response Body Hang in Undici RetryHandler
cverports profile

CVE-2026-18149: CVE-2026-18149: Unresolved Response Body Hang in Undici RetryHandler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102274: CVE-2026-102274: Denial of Service via Unhandled Exception in PyJWT JWK Set Parser
cverports profile

CVE-2026-102274: CVE-2026-102274: Denial of Service via Unhandled Exception in PyJWT JWK Set Parser

#security #cve #cybersecurity
Comments
1 min read
GHSA-8VVX-RFF5-P5RQ: GHSA-8vvx-rff5-p5rq: Stack Exhaustion Denial of Service via Nested Recipient Arrays in Nodemailer
cverports profile

GHSA-8VVX-RFF5-P5RQ: GHSA-8vvx-rff5-p5rq: Stack Exhaustion Denial of Service via Nested Recipient Arrays in Nodemailer

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-102279: CVE-2026-102279: DOM-based Cross-Site Scripting in Laravel Exception Debug Page via Tippy.js
cverports profile

CVE-2026-102279: CVE-2026-102279: DOM-based Cross-Site Scripting in Laravel Exception Debug Page via Tippy.js

#security #cve #cybersecurity
Comments
2 min read
GHSA-RCW4-F5RP-G42V: GHSA-RCW4-F5RP-G42V: Uncontrolled Resource Consumption and Decompression Bomb Protection Bypass in adm-zip
cverports profile

GHSA-RCW4-F5RP-G42V: GHSA-RCW4-F5RP-G42V: Uncontrolled Resource Consumption and Decompression Bomb Protection Bypass in adm-zip

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-81872: CVE-2026-81872: CPU Exhaustion via Tight Loop in OpenTelemetry-Go BatchingProcessor
cverports profile

CVE-2026-81872: CVE-2026-81872: CPU Exhaustion via Tight Loop in OpenTelemetry-Go BatchingProcessor

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84292: CVE-2026-84292: Authority Injection in fast-uri via Unvalidated Port Component
cverports profile

CVE-2026-84292: CVE-2026-84292: Authority Injection in fast-uri via Unvalidated Port Component

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68497: CVE-2026-68497: CPU Denial of Service via XML Datatype Deserialization in FasterXML jackson-databind
cverports profile

CVE-2026-68497: CVE-2026-68497: CPU Denial of Service via XML Datatype Deserialization in FasterXML jackson-databind

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101913: CVE-2026-101913: Link-Local Address Validation Bypass in ip-address Library Enables SSRF
cverports profile

CVE-2026-101913: CVE-2026-101913: Link-Local Address Validation Bypass in ip-address Library Enables SSRF

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-87859: CVE-2026-87859: Log Injection Vulnerability in Morgan HTTP Request Logger
cverports profile

CVE-2026-87859: CVE-2026-87859: Log Injection Vulnerability in Morgan HTTP Request Logger

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88932: CVE-2026-88932: Uncontrolled Resource Consumption (Denial of Service) via orphaned disk writes on aborted uploads in multer
cverports profile

CVE-2026-88932: CVE-2026-88932: Uncontrolled Resource Consumption (Denial of Service) via orphaned disk writes on aborted uploads in multer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76844: CVE-2026-76844: Path Traversal in webpack-dev-middleware via Incomplete Prefix Validation
cverports profile

CVE-2026-76844: CVE-2026-76844: Path Traversal in webpack-dev-middleware via Incomplete Prefix Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85024: CVE-2026-85024: Denial of Service via Uncaught Exception in undici WebSocket Client
cverports profile

CVE-2026-85024: CVE-2026-85024: Denial of Service via Uncaught Exception in undici WebSocket Client

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19032: CVE-2026-19032: Insecure Deserialization and Class Loading via java.nio.file.Path Resolution in FasterXML jackson-databind
cverports profile

CVE-2026-19032: CVE-2026-19032: Insecure Deserialization and Class Loading via java.nio.file.Path Resolution in FasterXML jackson-databind

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92905: CVE-2026-92905: Denial of Service in Zoho ManageEngine EventLog Analyzer and Log360 Log Collector
cverports profile

CVE-2026-92905: CVE-2026-92905: Denial of Service in Zoho ManageEngine EventLog Analyzer and Log360 Log Collector

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77310: CVE-2026-77310: Server-Side Request Forgery via DNS Resolution in jackson-databind
cverports profile

CVE-2026-77310: CVE-2026-77310: Server-Side Request Forgery via DNS Resolution in jackson-databind

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88058: CVE-2026-88058: Cross-Site Scripting via Server-Side Serialization Discrepancy in @angular/platform-server
cverports profile

CVE-2026-88058: CVE-2026-88058: Cross-Site Scripting via Server-Side Serialization Discrepancy in @angular/platform-server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-84394: CVE-2026-84394: Host Confusion and SSRF Bypass via Parser Discrepancy in fast-uri
cverports profile

CVE-2026-84394: CVE-2026-84394: Host Confusion and SSRF Bypass via Parser Discrepancy in fast-uri

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101910: CVE-2026-101910: Server-Side Request Forgery Bypass via NAT64 Local-Use Address Range in ip-address Library
cverports profile

CVE-2026-101910: CVE-2026-101910: Server-Side Request Forgery Bypass via NAT64 Local-Use Address Range in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88773: CVE-2026-88773: Critical HTTP Request Smuggling in Citrix NetScaler ADC and Gateway
cverports profile

CVE-2026-88773: CVE-2026-88773: Critical HTTP Request Smuggling in Citrix NetScaler ADC and Gateway

#security #cve #cybersecurity
Comments
2 min read
GHSA-6VJ9-MWQ6-2F5V: GHSA-6VJ9-MWQ6-2F5V: Cross-Tenant SMTP Credential Disclosure via Shared-State DNS Cache Pollution in Nodemailer
cverports profile

GHSA-6VJ9-MWQ6-2F5V: GHSA-6VJ9-MWQ6-2F5V: Cross-Tenant SMTP Credential Disclosure via Shared-State DNS Cache Pollution in Nodemailer

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-83557: CVE-2026-83557: Polymorphic Deserialization Bypass in FasterXML jackson-databind via java.lang.Comparable
cverports profile

CVE-2026-83557: CVE-2026-83557: Polymorphic Deserialization Bypass in FasterXML jackson-databind via java.lang.Comparable

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101914: CVE-2026-101914: Authorization Bypass via Case-Insensitive Path Matching in @grpc/grpc-js-xds
cverports profile

CVE-2026-101914: CVE-2026-101914: Authorization Bypass via Case-Insensitive Path Matching in @grpc/grpc-js-xds

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-61834: CVE-2026-61834: Prototype Pollution and Mutation of Inherited Built-in Method Objects in scim-patch
cverports profile

CVE-2026-61834: CVE-2026-61834: Prototype Pollution and Mutation of Inherited Built-in Method Objects in scim-patch

#security #cve #cybersecurity
Comments
3 min read
GHSA-456V-XQ2P-R4CJ: GHSA-456V-XQ2P-R4CJ: OS Command Injection in code-ollama grep_search Tool
cverports profile

GHSA-456V-XQ2P-R4CJ: GHSA-456V-XQ2P-R4CJ: OS Command Injection in code-ollama grep_search Tool

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-76460: CVE-2026-76460: Cisco Identity Services Engine Authentication Bypass Vulnerability
cverports profile

CVE-2026-76460: CVE-2026-76460: Cisco Identity Services Engine Authentication Bypass Vulnerability

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53493: CVE-2026-53493: Uncontrolled Resource Consumption in containerd Image-Pull Descriptor Graph Resolution
cverports profile

CVE-2026-53493: CVE-2026-53493: Uncontrolled Resource Consumption in containerd Image-Pull Descriptor Graph Resolution

#security #cve #cybersecurity
Comments
2 min read
GHSA-62MM-XWMV-CRHG: GHSA-62MM-XWMV-CRHG: Unauthenticated Path Traversal in Khoj Static File Serving Endpoint
cverports profile

GHSA-62MM-XWMV-CRHG: GHSA-62MM-XWMV-CRHG: Unauthenticated Path Traversal in Khoj Static File Serving Endpoint

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-100369: CVE-2026-100369: Argument Injection Vulnerability in CliInvoke Process Runner Factories
cverports profile

CVE-2026-100369: CVE-2026-100369: Argument Injection Vulnerability in CliInvoke Process Runner Factories

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-100368: CVE-2026-100368: OS Command Injection in CliInvoke Shell Wrappers
cverports profile

CVE-2026-100368: CVE-2026-100368: OS Command Injection in CliInvoke Shell Wrappers

#security #cve #cybersecurity
Comments
2 min read
GHSA-VV77-66RF-PM86: GHSA-vv77-66rf-pm86: Gas Draining Vulnerability in mpp Multi-Party Payments Library
cverports profile

GHSA-VV77-66RF-PM86: GHSA-vv77-66rf-pm86: Gas Draining Vulnerability in mpp Multi-Party Payments Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-QPXH-FF8M-C62V: GHSA-QPXH-FF8M-C62V: Gas Draining and Resource Exhaustion in ZenHive mpp Library
cverports profile

GHSA-QPXH-FF8M-C62V: GHSA-QPXH-FF8M-C62V: Gas Draining and Resource Exhaustion in ZenHive mpp Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-VJ8P-HP9X-GH47: GHSA-vj8p-hp9x-gh47: Zero-Cost Fee-Payer Wallet Gas Draining in mpp Elixir Library
cverports profile

GHSA-VJ8P-HP9X-GH47: GHSA-vj8p-hp9x-gh47: Zero-Cost Fee-Payer Wallet Gas Draining in mpp Elixir Library

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-57443: CVE-2026-57443: Unauthenticated Operations API Information Disclosure in SCBE-AETHERMOORE
cverports profile

CVE-2026-57443: CVE-2026-57443: Unauthenticated Operations API Information Disclosure in SCBE-AETHERMOORE

#security #cve #cybersecurity
Comments
2 min read
GHSA-29H2-JR22-FRMH: GHSA-29H2-JR22-FRMH: Improper Access Control and Handle Substitution in OpenZeppelin Confidential Contracts
cverports profile

GHSA-29H2-JR22-FRMH: GHSA-29H2-JR22-FRMH: Improper Access Control and Handle Substitution in OpenZeppelin Confidential Contracts

#security #cve #cybersecurity #ghsa
Comments
3 min read
CVE-2026-86439: CVE-2026-86439: Path Traversal Vulnerability in knowns MCP Document and Memory Storage
cverports profile

CVE-2026-86439: CVE-2026-86439: Path Traversal Vulnerability in knowns MCP Document and Memory Storage

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61825: CVE-2026-61825: Stored Cross-Site Scripting (XSS) via data-html-content Sanitizer Bypass in code16/sharp
cverports profile

CVE-2026-61825: CVE-2026-61825: Stored Cross-Site Scripting (XSS) via data-html-content Sanitizer Bypass in code16/sharp

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61823: CVE-2026-61823: Stored Cross-Site Scripting (XSS) via iframe srcdoc Attribute in code16 Sharp
cverports profile

CVE-2026-61823: CVE-2026-61823: Stored Cross-Site Scripting (XSS) via iframe srcdoc Attribute in code16 Sharp

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-57440: CVE-2026-57440: Stored Cross-Site Scripting (XSS) in MediaWiki EmbedVideo Extension
cverports profile

CVE-2026-57440: CVE-2026-57440: Stored Cross-Site Scripting (XSS) in MediaWiki EmbedVideo Extension

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92161: CVE-2026-92161: Unauthenticated Account Takeover in FriendsOfFlarum OAuth Extension
cverports profile

CVE-2026-92161: CVE-2026-92161: Unauthenticated Account Takeover in FriendsOfFlarum OAuth Extension

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61784: CVE-2026-61784: HTML Attribute Injection and Sanitizer Bypass in node-xhtml-purifier
cverports profile

CVE-2026-61784: CVE-2026-61784: HTML Attribute Injection and Sanitizer Bypass in node-xhtml-purifier

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61741: CVE-2026-61741: XML External Entity (XXE) Injection in http4s-scala-xml
cverports profile

CVE-2026-61741: CVE-2026-61741: XML External Entity (XXE) Injection in http4s-scala-xml

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61742: CVE-2026-61742: DNS Rebinding to Unauthenticated SQL Execution in DBHub
cverports profile

CVE-2026-61742: CVE-2026-61742: DNS Rebinding to Unauthenticated SQL Execution in DBHub

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61788: CVE-2026-61788: Read-Only Bypass in DBHub Database Model Context Protocol Server
cverports profile

CVE-2026-61788: CVE-2026-61788: Read-Only Bypass in DBHub Database Model Context Protocol Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-56742: CVE-2026-56742: Missing ReferenceGrant Authorization Check in Cilium Gateway API Request Mirroring
cverports profile

CVE-2026-56742: CVE-2026-56742: Missing ReferenceGrant Authorization Check in Cilium Gateway API Request Mirroring

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-57231: CVE-2026-57231: Podman Malformed Image Host Environment Variable Leak
cverports profile

CVE-2026-57231: CVE-2026-57231: Podman Malformed Image Host Environment Variable Leak

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-74480: CVE-2026-74480: Use-After-Free in Linux Kernel Network Bridge Multicast Routing
cverports profile

CVE-2026-74480: CVE-2026-74480: Use-After-Free in Linux Kernel Network Bridge Multicast Routing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-21992: Oracle Fusion Middleware Security Alert Advisory - CVE-2026-21992
cverports profile

CVE-2026-21992: Oracle Fusion Middleware Security Alert Advisory - CVE-2026-21992

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59980: CVE-2026-59980: Uncontrolled Resource Consumption in python-hyper/hpack
cverports profile

CVE-2026-59980: CVE-2026-59980: Uncontrolled Resource Consumption in python-hyper/hpack

#security #cve #cybersecurity
Comments
2 min read
loading...