Browse CVEs by Ecosystem and Severity
797 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2026-62946
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds
MEDIUM
CVE-2026-62363
ImageMagick: Heap Buffer Over-Write in fx operation
MEDIUM
CVE-2026-62343
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
MEDIUM
CVE-2026-73428
Trix: Stored XSS via HTMLParser attribute injection on paste
MEDIUM
CVE-2026-73851
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
MEDIUM
GHSA-hc76-7mpc-qjqh
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
MEDIUM
CVE-2026-55628
ImageMagick: Policy Bypass in concatenate operation due to missing checks
MEDIUM
CVE-2026-55597
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
MEDIUM
CVE-2026-55595
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
MEDIUM
CVE-2026-55594
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
MEDIUM
CVE-2026-55510
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
MEDIUM
CVE-2026-53467
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
MEDIUM
CVE-2026-72750
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
MEDIUM
CVE-2026-72775
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances
MEDIUM
CVE-2026-72764
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
MEDIUM
CVE-2026-65590
n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows
MEDIUM
CVE-2026-59257
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
MEDIUM
CVE-2026-72768
n8n: SSRF Protection Bypass via MCP Client Node
MEDIUM
CVE-2026-65593
n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
MEDIUM
CVE-2026-73648
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
MEDIUM
CVE-2026-73490
Loofah: SVG `href` attribute bypasses local-reference restriction
MEDIUM
CVE-2026-50659
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
MEDIUM
CVE-2026-54570
AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
MEDIUM
CVE-2026-18679
kuma-dp connects to control plane without verifying TLS certificate when no CA is configured
MEDIUM
CVE-2026-18678
kumactl connects to control plane without verifying TLS certificate when no CA is configured
MEDIUM
CVE-2026-54497
ViewComponent: Reused Component Instances Retain Stale Render Context
MEDIUM
CVE-2026-54465
websocket-driver: Memory exhaustion in HTTP header parser
MEDIUM
CVE-2026-54464
websocket-driver: Resource limit bypass via message compression
MEDIUM
CVE-2026-54463
websocket-driver: Memory exhaustion via abuse of protocol length headers
MEDIUM
CVE-2026-45573
Decidim: Push subscriptions can be abused for server-side requests
MEDIUM
CVE-2026-45572
Decidim: HTML content blocks allow stored script execution
MEDIUM
CVE-2026-45415
Decidim: CSV census record endpoints improper authorization
MEDIUM
CVE-2026-45377
Decidim: Private exports can be downloaded through reusable links
MEDIUM
CVE-2026-45376
Decidim: Admin user search allows SQL injection through similarity-based sorting
MEDIUM
CVE-2026-45330
Decidim: Verification admins can access supplied IDs from other organizations
MEDIUM
CVE-2026-45086
Decidim: Forms admin question editor lacks authorization
MEDIUM
CVE-2026-54171
Excon does not redact additional sensitive/risky headers when following redirects
MEDIUM
CVE-2026-54163
Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input
MEDIUM
CVE-2026-53769
Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy
MEDIUM
CVE-2025-46571
Open WebUI allows limited stored XSS vila uploaded html file
MEDIUM
CVE-2026-35365
mv: symlinks expanded during cross-device move (resource exhaustion / data duplication)
MEDIUM
CVE-2026-35363
rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection
MEDIUM
CVE-2026-35349
rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
MEDIUM
CVE-2026-35356
install -D: symlink race in directory creation allows arbitrary file overwrite
MEDIUM
CVE-2026-35355
install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite
MEDIUM
CVE-2026-50267
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
MEDIUM
CVE-2026-50202
Steeltoe's static JWKS cache shared across schemes and never invalidated
MEDIUM
CVE-2026-50201
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
MEDIUM
CVE-2026-52733
zebrad has persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip
MEDIUM
CVE-2026-52739
Zebra: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection