DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-128087: CVE-2026-128087: Premature Key Exchange Callback Invocation Prior to Host Key Verification in russh
cverports profile

CVE-2026-128087: CVE-2026-128087: Premature Key Exchange Callback Invocation Prior to Host Key Verification in russh

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128082: CVE-2026-128082: Uncontrolled Recursion and Denial of Service in AutoMapper via Constructor Parameter Mapping
cverports profile

CVE-2026-128082: CVE-2026-128082: Uncontrolled Recursion and Denial of Service in AutoMapper via Constructor Parameter Mapping

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128080: CVE-2026-128080: Sensitive Query Parameter Disclosure on Incoming Server Spans in OpenTelemetry JavaScript…
cverports profile

CVE-2026-128080: CVE-2026-128080: Sensitive Query Parameter Disclosure on Incoming Server Spans in OpenTelemetry JavaScript…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-128089: CVE-2026-128089: Uncontrolled Resource Consumption in dnspython WKS Record Parser
cverports profile

CVE-2026-128089: CVE-2026-128089: Uncontrolled Resource Consumption in dnspython WKS Record Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126347: CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler
cverports profile

CVE-2026-126347: CVE-2026-126347: Open Redirect via Triple-Slash Redirect Paths in Tornado RedirectHandler

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-128123: CVE-2026-128123: Uncaught Exception and Denial of Service in SvelteKit @sveltejs/adapter-node
cverports profile

CVE-2026-128123: CVE-2026-128123: Uncaught Exception and Denial of Service in SvelteKit @sveltejs/adapter-node

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128122: CVE-2026-128122: Prerendered Redirect Rule Injection in @sveltejs/adapter-cloudflare
cverports profile

CVE-2026-128122: CVE-2026-128122: Prerendered Redirect Rule Injection in @sveltejs/adapter-cloudflare

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128121: CVE-2026-128121: Regular Expression Injection in SvelteKit Vercel Route Configuration via…
cverports profile

CVE-2026-128121: CVE-2026-128121: Regular Expression Injection in SvelteKit Vercel Route Configuration via…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-128117: CVE-2026-128117: Unhandled URIError Denial of Service in SvelteKit Request Routing
cverports profile

CVE-2026-128117: CVE-2026-128117: Unhandled URIError Denial of Service in SvelteKit Request Routing

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126303: CVE-2026-126303: Uncontrolled Resource Consumption in NLTK SteppingRecursiveDescentParser
cverports profile

CVE-2026-126303: CVE-2026-126303: Uncontrolled Resource Consumption in NLTK SteppingRecursiveDescentParser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62683: CVE-2026-62683: Incorrect Authorization via Stale Public Shares in File Browser
cverports profile

CVE-2026-62683: CVE-2026-62683: Incorrect Authorization via Stale Public Shares in File Browser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62297: CVE-2026-62297: Uncontrolled Memory Allocation and Denial of Service in ag-psd
cverports profile

CVE-2026-62297: CVE-2026-62297: Uncontrolled Memory Allocation and Denial of Service in ag-psd

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126297: CVE-2026-126297: Algorithmic Complexity Denial of Service in NLTK ConllCorpusReader
cverports profile

CVE-2026-126297: CVE-2026-126297: Algorithmic Complexity Denial of Service in NLTK ConllCorpusReader

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126298: CVE-2026-126298: Quadratic Algorithmic Complexity Denial of Service in NLTK Tree.chomsky_normal_form
cverports profile

CVE-2026-126298: CVE-2026-126298: Quadratic Algorithmic Complexity Denial of Service in NLTK Tree.chomsky_normal_form

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-126299: CVE-2026-126299: Quadratic Algorithmic Complexity Denial of Service in NLTK CCG Lexicon Parser
cverports profile

CVE-2026-126299: CVE-2026-126299: Quadratic Algorithmic Complexity Denial of Service in NLTK CCG Lexicon Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126295: CVE-2026-126295: Path Traversal and Unconfined File Access in NLTK BllipParser
cverports profile

CVE-2026-126295: CVE-2026-126295: Path Traversal and Unconfined File Access in NLTK BllipParser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126300: CVE-2026-126300: Algorithmic Complexity Denial of Service in NLTK TreebankWordTokenizer.span_tokenize
cverports profile

CVE-2026-126300: CVE-2026-126300: Algorithmic Complexity Denial of Service in NLTK TreebankWordTokenizer.span_tokenize

#security #cve #cybersecurity
Comments
3 min read
GHSA-GPWC-27CW-RH9R: CVE-2026-126301: Quadratic CPU Exhaustion in NLTK LegalitySyllableTokenizer
cverports profile

GHSA-GPWC-27CW-RH9R: CVE-2026-126301: Quadratic CPU Exhaustion in NLTK LegalitySyllableTokenizer

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126304: CVE-2026-126304: Symlink Path Traversal in NLTK YCOECorpusReader
cverports profile

CVE-2026-126304: CVE-2026-126304: Symlink Path Traversal in NLTK YCOECorpusReader

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128077: CVE-2026-128077: Authorization Bypass via Request Path Desynchronization in Nuxt and @nuxt/nitro-server
cverports profile

CVE-2026-128077: CVE-2026-128077: Authorization Bypass via Request Path Desynchronization in Nuxt and @nuxt/nitro-server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128084: CVE-2026-128084: Integer Truncation and SQL Query Truncation in sqlite3-ruby
cverports profile

CVE-2026-128084: CVE-2026-128084: Integer Truncation and SQL Query Truncation in sqlite3-ruby

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128068: CVE-2026-128068: Regular Expression Denial of Service in rails-html-sanitizer
cverports profile

CVE-2026-128068: CVE-2026-128068: Regular Expression Denial of Service in rails-html-sanitizer

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126360: CVE-2026-126360: Regular Expression Denial of Service in OpenTelemetry Python opentelemetry-api
cverports profile

CVE-2026-126360: CVE-2026-126360: Regular Expression Denial of Service in OpenTelemetry Python opentelemetry-api

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126359: CVE-2026-126359: Cross-Site Scripting via Split Closing Style Tag in Hono CSS Helper
cverports profile

CVE-2026-126359: CVE-2026-126359: Cross-Site Scripting via Split Closing Style Tag in Hono CSS Helper

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126358: CVE-2026-126358: Authorization Bypass via Wildcard Middleware Omission in Hono RegExpRouter
cverports profile

CVE-2026-126358: CVE-2026-126358: Authorization Bypass via Wildcard Middleware Omission in Hono RegExpRouter

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126357: CVE-2026-126357: Authentication Bypass via Mount Path Transformation in Hono
cverports profile

CVE-2026-126357: CVE-2026-126357: Authentication Bypass via Mount Path Transformation in Hono

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126356: CVE-2026-126356: Multipart Form Validation Bypass in Hono Web Framework
cverports profile

CVE-2026-126356: CVE-2026-126356: Multipart Form Validation Bypass in Hono Web Framework

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126355: CVE-2026-126355: Cross-Site Request Forgery Protection Bypass via Hyperlink Auditing in Hono
cverports profile

CVE-2026-126355: CVE-2026-126355: Cross-Site Request Forgery Protection Bypass via Hyperlink Auditing in Hono

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-128067: CVE-2026-128067: Out-of-Bounds Heap Read and Write in Pillow libtiff Encoder via Geometry Tag Overrides
cverports profile

CVE-2026-128067: CVE-2026-128067: Out-of-Bounds Heap Read and Write in Pillow libtiff Encoder via Geometry Tag Overrides

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-128066: CVE-2026-128066: Quadratic Memory Amplification Denial of Service in Pillow TIFF and EXIF IFD Parser
cverports profile

CVE-2026-128066: CVE-2026-128066: Quadratic Memory Amplification Denial of Service in Pillow TIFF and EXIF IFD Parser

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126081: CVE-2026-126081: Strong Parameters Bypass via Parameters#each_key in Ruby on Rails Action Pack
cverports profile

CVE-2026-126081: CVE-2026-126081: Strong Parameters Bypass via Parameters#each_key in Ruby on Rails Action Pack

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126084: CVE-2026-126084: Unsigned Content-Type in Rails Active Storage GCS Direct Uploads
cverports profile

CVE-2026-126084: CVE-2026-126084: Unsigned Content-Type in Rails Active Storage GCS Direct Uploads

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126079: CVE-2026-126079: Cross-Site Scripting in Ruby on Rails Action View Text Helpers via HTML5 Serialization…
cverports profile

CVE-2026-126079: CVE-2026-126079: Cross-Site Scripting in Ruby on Rails Action View Text Helpers via HTML5 Serialization…

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126070: CVE-2026-126070: Cross-Site Scripting in Ruby on Rails Action View strip_tags Helper
cverports profile

CVE-2026-126070: CVE-2026-126070: Cross-Site Scripting in Ruby on Rails Action View strip_tags Helper

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126078: CVE-2026-126078: Cross-Site Scripting in Ruby on Rails Action View highlight Helper
cverports profile

CVE-2026-126078: CVE-2026-126078: Cross-Site Scripting in Ruby on Rails Action View highlight Helper

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126077: CVE-2026-126077: Session Information Leak in Ruby on Rails Action Pack and Active Storage Proxy Mode
cverports profile

CVE-2026-126077: CVE-2026-126077: Session Information Leak in Ruby on Rails Action Pack and Active Storage Proxy Mode

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126072: CVE-2026-126072: Thread Deadlock and Denial of Service in Ruby on Rails ActionController::Live
cverports profile

CVE-2026-126072: CVE-2026-126072: Thread Deadlock and Denial of Service in Ruby on Rails ActionController::Live

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126192: CVE-2026-126192: Quadratic Algorithmic Complexity Denial of Service in Soup Sieve CSS Selector Engine
cverports profile

CVE-2026-126192: CVE-2026-126192: Quadratic Algorithmic Complexity Denial of Service in Soup Sieve CSS Selector Engine

#security #cve #cybersecurity
Comments
6 min read
CVE-2026-126190: CVE-2026-126190: Polynomial-Time Denial of Service in Soup Sieve CSS Descendant Combinator
cverports profile

CVE-2026-126190: CVE-2026-126190: Polynomial-Time Denial of Service in Soup Sieve CSS Descendant Combinator

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-122006: CVE-2026-122006: Unauthenticated Arbitrary File Read and Write in Ruby on Rails Active Storage via ImageMagick
cverports profile

CVE-2026-122006: CVE-2026-122006: Unauthenticated Arbitrary File Read and Write in Ruby on Rails Active Storage via ImageMagick

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-128065: CVE-2026-128065: Authorization Bypass via Unapplied RBAC Overrides in @grpc/grpc-js-xds
cverports profile

CVE-2026-128065: CVE-2026-128065: Authorization Bypass via Unapplied RBAC Overrides in @grpc/grpc-js-xds

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-126188: CVE-2026-126188: Local Media Information Disclosure in Ruby on Rails Active Storage via FFmpeg Demuxer…
cverports profile

CVE-2026-126188: CVE-2026-126188: Local Media Information Disclosure in Ruby on Rails Active Storage via FFmpeg Demuxer…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-126206: CVE-2026-126206: Cross-Site Scripting via HTML5 Named Solidus Entity in Loofah URI Validator
cverports profile

CVE-2026-126206: CVE-2026-126206: Cross-Site Scripting via HTML5 Named Solidus Entity in Loofah URI Validator

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-125325: CVE-2026-125325: Cross-Request Information Disclosure via Shared BM25 Index Race Condition in pgEdge RAG Server
cverports profile

CVE-2026-125325: CVE-2026-125325: Cross-Request Information Disclosure via Shared BM25 Index Race Condition in pgEdge RAG Server

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118740: CVE-2026-118740: Missing Authorization in Microsoft Aspire Dashboard Blazor Router
cverports profile

CVE-2026-118740: CVE-2026-118740: Missing Authorization in Microsoft Aspire Dashboard Blazor Router

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-120006: CVE-2026-120006: Elevation of Privilege in .NET Aspire via Unintended Dashboard Endpoint Tunneling
cverports profile

CVE-2026-120006: CVE-2026-120006: Elevation of Privilege in .NET Aspire via Unintended Dashboard Endpoint Tunneling

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-118750: CVE-2026-118750: Uncontrolled Resource Allocation in ASP.NET Core FileBufferingReadStream
cverports profile

CVE-2026-118750: CVE-2026-118750: Uncontrolled Resource Allocation in ASP.NET Core FileBufferingReadStream

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114155: CVE-2026-114155: Local Elevation of Privilege via TOCTOU Race Condition in Microsoft .NET dotnet-watch
cverports profile

CVE-2026-114155: CVE-2026-114155: Local Elevation of Privilege via TOCTOU Race Condition in Microsoft .NET dotnet-watch

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-118748: CVE-2026-118748: Unbounded Memory Allocation Denial of Service in ASP.NET Core Blazor Static-SSR
cverports profile

CVE-2026-118748: CVE-2026-118748: Unbounded Memory Allocation Denial of Service in ASP.NET Core Blazor Static-SSR

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114150: CVE-2026-114150: Remote Information Disclosure via Uninitialized Pooled Memory in ASP.NET Core Response…
cverports profile

CVE-2026-114150: CVE-2026-114150: Remote Information Disclosure via Uninitialized Pooled Memory in ASP.NET Core Response…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114146: CVE-2026-114146: Elevation of Privilege in ASP.NET Core SignalR Connection Dispatcher
cverports profile

CVE-2026-114146: CVE-2026-114146: Elevation of Privilege in ASP.NET Core SignalR Connection Dispatcher

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing
cverports profile

CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane
cverports profile

CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114156: CVE-2026-114156: Path Equivalence Security Feature Bypass in Microsoft ASP.NET Core
cverports profile

CVE-2026-114156: CVE-2026-114156: Path Equivalence Security Feature Bypass in Microsoft ASP.NET Core

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport
cverports profile

CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-114154: CVE-2026-114154: Denial of Service in ASP.NET Core HttpSys Request Header Processing
cverports profile

CVE-2026-114154: CVE-2026-114154: Denial of Service in ASP.NET Core HttpSys Request Header Processing

#security #cve #cybersecurity
Comments
5 min read
CVE-2026-124194: CVE-2026-124194: Forced Authentication and NetNTLMv2 Credential Leakage in Microsoft Office Outlook
cverports profile

CVE-2026-124194: CVE-2026-124194: Forced Authentication and NetNTLMv2 Credential Leakage in Microsoft Office Outlook

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-120778: CVE-2026-120778: Local Elevation of Privilege via Insecure Temporary Directory Handling and MSBuild Response…
cverports profile

CVE-2026-120778: CVE-2026-120778: Local Elevation of Privilege via Insecure Temporary Directory Handling and MSBuild Response…

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-120792: CVE-2026-120792: Local Information Disclosure via Temporary File Logging in Microsoft .NET Aspire CLI
cverports profile

CVE-2026-120792: CVE-2026-120792: Local Information Disclosure via Temporary File Logging in Microsoft .NET Aspire CLI

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-114159: CVE-2026-114159: Heap-Based Buffer Overflow in Microsoft Visual Studio and .NET Native Symbol Reader
cverports profile

CVE-2026-114159: CVE-2026-114159: Heap-Based Buffer Overflow in Microsoft Visual Studio and .NET Native Symbol Reader

#security #cve #cybersecurity
Comments
3 min read
loading...