DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-76504: CVE-2026-76504: Unauthenticated Authentication Bypass in Cisco Catalyst SD-WAN Manager
cverports profile

CVE-2026-76504: CVE-2026-76504: Unauthenticated Authentication Bypass in Cisco Catalyst SD-WAN Manager

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-73606: CVE-2026-73606: Authorization Bypass and Information Disclosure in SiYuan /api/block/getRefIDs Endpoint
cverports profile

CVE-2026-73606: CVE-2026-73606: Authorization Bypass and Information Disclosure in SiYuan /api/block/getRefIDs Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73605: CVE-2026-73605: Path Traversal and File Existence Oracle via getUniqueFilename Endpoint in SiYuan
cverports profile

CVE-2026-73605: CVE-2026-73605: Path Traversal and File Existence Oracle via getUniqueFilename Endpoint in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102990: CVE-2026-102990: Regular Expression Denial of Service in basic-ftp Directory Parsing
cverports profile

CVE-2026-102990: CVE-2026-102990: Regular Expression Denial of Service in basic-ftp Directory Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102821: CVE-2026-102821: Unbounded Memory Exhaustion via CHANNEL_OPEN Flood in russh
cverports profile

CVE-2026-102821: CVE-2026-102821: Unbounded Memory Exhaustion via CHANNEL_OPEN Flood in russh

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102820: CVE-2026-102820: Out-of-Bounds Read and Excessive Memory Allocation in russh pageant
cverports profile

CVE-2026-102820: CVE-2026-102820: Out-of-Bounds Read and Excessive Memory Allocation in russh pageant

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84428: CVE-2026-84428: Schema Validation Bypass in Fastify Header Normalization
cverports profile

CVE-2026-84428: CVE-2026-84428: Schema Validation Bypass in Fastify Header Normalization

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84469: CVE-2026-84469: Request Validation Bypass in Fastify via Loose Boolean Schema Evaluation
cverports profile

CVE-2026-84469: CVE-2026-84469: Request Validation Bypass in Fastify via Loose Boolean Schema Evaluation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76169: CVE-2026-76169: Authentication Bypass and Encapsulation Violation via Malformed URL Routing Fallback in Fastify
cverports profile

CVE-2026-76169: CVE-2026-76169: Authentication Bypass and Encapsulation Violation via Malformed URL Routing Fallback in Fastify

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84504: CVE-2026-84504: Schema Validation Bypass via Async Validation Result Collision in Fastify
cverports profile

CVE-2026-84504: CVE-2026-84504: Schema Validation Bypass via Async Validation Result Collision in Fastify

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-93981: CVE-2026-93981: Cross-Site Scripting via Unescaped SSR Pathways in Hono JSX Engine
cverports profile

CVE-2026-93981: CVE-2026-93981: Cross-Site Scripting via Unescaped SSR Pathways in Hono JSX Engine

#security #cve #cybersecurity
Comments
2 min read
GHSA-59CR-6R3X-644W: GHSA-59CR-6R3X-644W: GitPython Submodule Update Path Traversal Can Write Outside the Repository
cverports profile

GHSA-59CR-6R3X-644W: GHSA-59CR-6R3X-644W: GitPython Submodule Update Path Traversal Can Write Outside the Repository

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-C2M8-H5V5-343R: GHSA-C2M8-H5V5-343R: Path Traversal via Improper Link Resolution in Tornado StaticFileHandler
cverports profile

GHSA-C2M8-H5V5-343R: GHSA-C2M8-H5V5-343R: Path Traversal via Improper Link Resolution in Tornado StaticFileHandler

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-CHX6-46F5-W4VP: GHSA-CHX6-46F5-W4VP: Uncontrolled Resource Consumption in Tornado CurlAsyncHTTPClient
cverports profile

GHSA-CHX6-46F5-W4VP: GHSA-CHX6-46F5-W4VP: Uncontrolled Resource Consumption in Tornado CurlAsyncHTTPClient

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3HV7-MJH2-FV65: GHSA-3HV7-MJH2-FV65: Unbounded Query-String Parsing Denial of Service in Tornado Web Server
cverports profile

GHSA-3HV7-MJH2-FV65: GHSA-3HV7-MJH2-FV65: Unbounded Query-String Parsing Denial of Service in Tornado Web Server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-103001: CVE-2026-103001: State Pollution in PyJWT Option Merging Leads to Claim Verification Bypass
cverports profile

CVE-2026-103001: CVE-2026-103001: State Pollution in PyJWT Option Merging Leads to Claim Verification Bypass

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92081: CVE-2026-92081: Denial of Service via Uncaught Exception on HTTP/2 Response Trailers in Fastify
cverports profile

CVE-2026-92081: CVE-2026-92081: Denial of Service via Uncaught Exception on HTTP/2 Response Trailers in Fastify

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102938: CVE-2026-102938: Configuration Injection and Local Execution Hijack in virtualenv
cverports profile

CVE-2026-102938: CVE-2026-102938: Configuration Injection and Local Execution Hijack in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102930: CVE-2026-102930: Remote Code Execution via Unverified Dynamic Wheel Downloads in virtualenv
cverports profile

CVE-2026-102930: CVE-2026-102930: Remote Code Execution via Unverified Dynamic Wheel Downloads in virtualenv

#security #cve #cybersecurity
Comments
2 min read
GHSA-3Q6V-R5MR-HXV8: GHSA-3Q6V-R5MR-HXV8: Algorithmic Complexity Denial of Service in league/commonmark GFM Table Extension
cverports profile

GHSA-3Q6V-R5MR-HXV8: GHSA-3Q6V-R5MR-HXV8: Algorithmic Complexity Denial of Service in league/commonmark GFM Table Extension

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-84377: CVE-2026-84377: Server-Side Request Forgery and Provider Credential Exfiltration in LiteLLM Proxy
cverports profile

CVE-2026-84377: CVE-2026-84377: Server-Side Request Forgery and Provider Credential Exfiltration in LiteLLM Proxy

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-91776: CVE-2026-91776: Denial of Service via Unbounded Polymorphic Cache in jackson-databind
cverports profile

CVE-2026-91776: CVE-2026-91776: Denial of Service via Unbounded Polymorphic Cache in jackson-databind

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-91777: CVE-2026-91777: Algorithmic Complexity Denial of Service in FasterXML jackson-databind
cverports profile

CVE-2026-91777: CVE-2026-91777: Algorithmic Complexity Denial of Service in FasterXML jackson-databind

#security #cve #cybersecurity
Comments
2 min read
GHSA-97JJ-33GV-5XF9: GHSA-97jj-33gv-5xf9: Stored Cross-Site Scripting Bypass in league/commonmark DisallowedRawHtml Extension
cverports profile

GHSA-97JJ-33GV-5XF9: GHSA-97jj-33gv-5xf9: Stored Cross-Site Scripting Bypass in league/commonmark DisallowedRawHtml Extension

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-P98J-92PF-MC4P: GHSA-P98J-92PF-MC4P: DOM-Based Cross-Site Scripting (DOM XSS) via Hook Detach Bypass in DOMPurify In-Place Sanitization
cverports profile

GHSA-P98J-92PF-MC4P: GHSA-P98J-92PF-MC4P: DOM-Based Cross-Site Scripting (DOM XSS) via Hook Detach Bypass in DOMPurify In-Place Sanitization

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-97711: CVE-2026-97711: Cross-Site Scripting (XSS) via Unescaped Script-Closing Tags in serialize-javascript
cverports profile

CVE-2026-97711: CVE-2026-97711: Cross-Site Scripting (XSS) via Unescaped Script-Closing Tags in serialize-javascript

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101918: CVE-2026-101918: Unauthenticated Denial of Service via Recursion Exhaustion in PyJWT
cverports profile

CVE-2026-101918: CVE-2026-101918: Unauthenticated Denial of Service via Recursion Exhaustion in PyJWT

#security #cve #cybersecurity
Comments
2 min read
GHSA-VCVR-R3JV-PC5J: CVE-2026-94545: SVG-Serialization Markup Injection in Vercel Satori and Next.js ImageResponse
cverports profile

GHSA-VCVR-R3JV-PC5J: CVE-2026-94545: SVG-Serialization Markup Injection in Vercel Satori and Next.js ImageResponse

#security #cve #cybersecurity
Comments 2
3 min read
CVE-2026-102265: CVE-2026-102265: Unhandled RecursionError in PyJWT JSON Parser Leading to Denial of Service
cverports profile

CVE-2026-102265: CVE-2026-102265: Unhandled RecursionError in PyJWT JSON Parser Leading to Denial of Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102266: CVE-2026-102266: Signature Verification Bypass in PyJWT via Empty JWK
cverports profile

CVE-2026-102266: CVE-2026-102266: Signature Verification Bypass in PyJWT via Empty JWK

#security #cve #cybersecurity
Comments
1 min read
GHSA-V53P-9FQP-M79J: GHSA-V53P-9FQP-M79J: Regular Expression Denial of Service (ReDoS) in Nodemailer addressparser
cverports profile

GHSA-V53P-9FQP-M79J: GHSA-V53P-9FQP-M79J: Regular Expression Denial of Service (ReDoS) in Nodemailer addressparser

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-G57G-F23G-4646: GHSA-G57G-F23G-4646: Parser Differential and SMTP Injection in Nodemailer Address Parser
cverports profile

GHSA-G57G-F23G-4646: GHSA-G57G-F23G-4646: Parser Differential and SMTP Injection in Nodemailer Address Parser

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-102276: CVE-2026-102276: Denial of Service via Uncontrolled Recursion and Argument-List Exhaustion in brace-expansion
cverports profile

CVE-2026-102276: CVE-2026-102276: Denial of Service via Uncontrolled Recursion and Argument-List Exhaustion in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102278: CVE-2026-102278: Stack-Based Denial of Service via Uncontrolled Recursion in brace-expansion
cverports profile

CVE-2026-102278: CVE-2026-102278: Stack-Based Denial of Service via Uncontrolled Recursion in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102277: CVE-2026-102277: Denial of Service via Quadratic Algorithmic Complexity in brace-expansion
cverports profile

CVE-2026-102277: CVE-2026-102277: Denial of Service via Quadratic Algorithmic Complexity in brace-expansion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-17495: CVE-2026-17495: Path Traversal via Type Confusion in Moment.js Dynamic Locale Loading
cverports profile

CVE-2026-17495: CVE-2026-17495: Path Traversal via Type Confusion in Moment.js Dynamic Locale Loading

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101911: CVE-2026-101911: Denial of Service via Uncontrolled Resource Consumption in ip-address Library
cverports profile

CVE-2026-101911: CVE-2026-101911: Denial of Service via Uncontrolled Resource Consumption in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101912: CVE-2026-101912: Cross-Family IP Address Subnet Containment Logic Bypass in ip-address Library
cverports profile

CVE-2026-101912: CVE-2026-101912: Cross-Family IP Address Subnet Containment Logic Bypass in ip-address Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101894: CVE-2026-101894: Arbitrary File Read/Write via Symbolic Link Chaining in @xhmikosr/decompress
cverports profile

CVE-2026-101894: CVE-2026-101894: Arbitrary File Read/Write via Symbolic Link Chaining in @xhmikosr/decompress

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-86818: CVE-2026-86818: Mailto Header Injection via Percent-Encoded Field-Name Desynchronization in fast-uri
cverports profile

CVE-2026-86818: CVE-2026-86818: Mailto Header Injection via Percent-Encoded Field-Name Desynchronization in fast-uri

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-86472: CVE-2026-86472: Hostname Canonicalization Bypass in fast-uri via Scheme-Relative URLs
cverports profile

CVE-2026-86472: CVE-2026-86472: Hostname Canonicalization Bypass in fast-uri via Scheme-Relative URLs

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102281: CVE-2026-102281: Denial of Service via Uncaught Exception in @nestjs/microservices
cverports profile

CVE-2026-102281: CVE-2026-102281: Denial of Service via Uncaught Exception in @nestjs/microservices

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-18149: CVE-2026-18149: Unresolved Response Body Hang in Undici RetryHandler
cverports profile

CVE-2026-18149: CVE-2026-18149: Unresolved Response Body Hang in Undici RetryHandler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102274: CVE-2026-102274: Denial of Service via Unhandled Exception in PyJWT JWK Set Parser
cverports profile

CVE-2026-102274: CVE-2026-102274: Denial of Service via Unhandled Exception in PyJWT JWK Set Parser

#security #cve #cybersecurity
Comments
1 min read
GHSA-8VVX-RFF5-P5RQ: GHSA-8vvx-rff5-p5rq: Stack Exhaustion Denial of Service via Nested Recipient Arrays in Nodemailer
cverports profile

GHSA-8VVX-RFF5-P5RQ: GHSA-8vvx-rff5-p5rq: Stack Exhaustion Denial of Service via Nested Recipient Arrays in Nodemailer

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-102279: CVE-2026-102279: DOM-based Cross-Site Scripting in Laravel Exception Debug Page via Tippy.js
cverports profile

CVE-2026-102279: CVE-2026-102279: DOM-based Cross-Site Scripting in Laravel Exception Debug Page via Tippy.js

#security #cve #cybersecurity
Comments
2 min read
GHSA-RCW4-F5RP-G42V: GHSA-RCW4-F5RP-G42V: Uncontrolled Resource Consumption and Decompression Bomb Protection Bypass in adm-zip
cverports profile

GHSA-RCW4-F5RP-G42V: GHSA-RCW4-F5RP-G42V: Uncontrolled Resource Consumption and Decompression Bomb Protection Bypass in adm-zip

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-81872: CVE-2026-81872: CPU Exhaustion via Tight Loop in OpenTelemetry-Go BatchingProcessor
cverports profile

CVE-2026-81872: CVE-2026-81872: CPU Exhaustion via Tight Loop in OpenTelemetry-Go BatchingProcessor

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84292: CVE-2026-84292: Authority Injection in fast-uri via Unvalidated Port Component
cverports profile

CVE-2026-84292: CVE-2026-84292: Authority Injection in fast-uri via Unvalidated Port Component

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68497: CVE-2026-68497: CPU Denial of Service via XML Datatype Deserialization in FasterXML jackson-databind
cverports profile

CVE-2026-68497: CVE-2026-68497: CPU Denial of Service via XML Datatype Deserialization in FasterXML jackson-databind

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-101913: CVE-2026-101913: Link-Local Address Validation Bypass in ip-address Library Enables SSRF
cverports profile

CVE-2026-101913: CVE-2026-101913: Link-Local Address Validation Bypass in ip-address Library Enables SSRF

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-87859: CVE-2026-87859: Log Injection Vulnerability in Morgan HTTP Request Logger
cverports profile

CVE-2026-87859: CVE-2026-87859: Log Injection Vulnerability in Morgan HTTP Request Logger

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88932: CVE-2026-88932: Uncontrolled Resource Consumption (Denial of Service) via orphaned disk writes on aborted uploads in multer
cverports profile

CVE-2026-88932: CVE-2026-88932: Uncontrolled Resource Consumption (Denial of Service) via orphaned disk writes on aborted uploads in multer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76844: CVE-2026-76844: Path Traversal in webpack-dev-middleware via Incomplete Prefix Validation
cverports profile

CVE-2026-76844: CVE-2026-76844: Path Traversal in webpack-dev-middleware via Incomplete Prefix Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-85024: CVE-2026-85024: Denial of Service via Uncaught Exception in undici WebSocket Client
cverports profile

CVE-2026-85024: CVE-2026-85024: Denial of Service via Uncaught Exception in undici WebSocket Client

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19032: CVE-2026-19032: Insecure Deserialization and Class Loading via java.nio.file.Path Resolution in FasterXML jackson-databind
cverports profile

CVE-2026-19032: CVE-2026-19032: Insecure Deserialization and Class Loading via java.nio.file.Path Resolution in FasterXML jackson-databind

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92905: CVE-2026-92905: Denial of Service in Zoho ManageEngine EventLog Analyzer and Log360 Log Collector
cverports profile

CVE-2026-92905: CVE-2026-92905: Denial of Service in Zoho ManageEngine EventLog Analyzer and Log360 Log Collector

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77310: CVE-2026-77310: Server-Side Request Forgery via DNS Resolution in jackson-databind
cverports profile

CVE-2026-77310: CVE-2026-77310: Server-Side Request Forgery via DNS Resolution in jackson-databind

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-88058: CVE-2026-88058: Cross-Site Scripting via Server-Side Serialization Discrepancy in @angular/platform-server
cverports profile

CVE-2026-88058: CVE-2026-88058: Cross-Site Scripting via Server-Side Serialization Discrepancy in @angular/platform-server

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-84394: CVE-2026-84394: Host Confusion and SSRF Bypass via Parser Discrepancy in fast-uri
cverports profile

CVE-2026-84394: CVE-2026-84394: Host Confusion and SSRF Bypass via Parser Discrepancy in fast-uri

#security #cve #cybersecurity
Comments
2 min read
loading...