DEV Community

# cve

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2025-21582 - Oracle MySQL Query Optimizer Integer Overflow Vulnerability

CVE-2025-21582 - Oracle MySQL Query Optimizer Integer Overflow Vulnerability

Comments
6 min read
CVE-2026-0863: Snake in the Sandbox: Breaking n8n with Python 3.10 Internals

CVE-2026-0863: Snake in the Sandbox: Breaking n8n with Python 3.10 Internals

Comments
2 min read
GHSA-38CW-85XC-XR9X: Identity Crisis: Dumping Veramo's Digital Wallets via SQL Injection

GHSA-38CW-85XC-XR9X: Identity Crisis: Dumping Veramo's Digital Wallets via SQL Injection

Comments
2 min read
CVE-2026-23735: Singleton Roulette: Racing for Context in GraphQL Modules

CVE-2026-23735: Singleton Roulette: Racing for Context in GraphQL Modules

Comments
2 min read
CVE-2026-22782: RustFS Leak: When Error Logs Become Credentials

CVE-2026-22782: RustFS Leak: When Error Logs Become Credentials

Comments
2 min read
GHSA-GW32-9RMW-QWWW: Svelte SSR XSS: The Textarea Trap

GHSA-GW32-9RMW-QWWW: Svelte SSR XSS: The Textarea Trap

Comments
2 min read
GHSA-5882-5RX9-XGXP: Crawl4AI RCE: Hook, Line, and Sinker into Your Docker Container

GHSA-5882-5RX9-XGXP: Crawl4AI RCE: Hook, Line, and Sinker into Your Docker Container

Comments
2 min read
CVE-2025-8217: Amazon Q's Self-Sabotage: The Backdoor That Couldn't Code

CVE-2025-8217: Amazon Q's Self-Sabotage: The Backdoor That Couldn't Code

Comments
2 min read
CVE-2026-23535: Trust Issues: Arbitrary File Write in Weblate CLI (CVE-2026-23535)

CVE-2026-23535: Trust Issues: Arbitrary File Write in Weblate CLI (CVE-2026-23535)

Comments
2 min read
CVE-2026-23527: Case Sensitivity Kills: HTTP Request Smuggling in H3

CVE-2026-23527: Case Sensitivity Kills: HTTP Request Smuggling in H3

Comments
2 min read
GHSA-58Q2-9X27-H2JM: The Infinite Buffer: Crashing Craft CMS via Axios Data URIs

GHSA-58Q2-9X27-H2JM: The Infinite Buffer: Crashing Craft CMS via Axios Data URIs

Comments
2 min read
CVE-2026-1002: Ghost in the Machine: Vert.x Cache Poisoning DoS

CVE-2026-1002: Ghost in the Machine: Vert.x Cache Poisoning DoS

Comments
2 min read
CVE-2026-22775: Devalue, Indeed: How a Simple Serializer Can Crash Your Svelte App

CVE-2026-22775: Devalue, Indeed: How a Simple Serializer Can Crash Your Svelte App

Comments
2 min read
CVE-2026-23519: Betrayal by Optimization: How LLVM Broke Rust's Constant-Time Promises

CVE-2026-23519: Betrayal by Optimization: How LLVM Broke Rust's Constant-Time Promises

Comments
2 min read
CVE-2025-66292: DPanel's Delete Function Works Too Well: A Tale of Path Traversal

CVE-2025-66292: DPanel's Delete Function Works Too Well: A Tale of Path Traversal

Comments
2 min read
7 Urgent Fixes: WatchGuard Firebox Zero-Day CVE-2025-14733

7 Urgent Fixes: WatchGuard Firebox Zero-Day CVE-2025-14733

3
Comments
9 min read
CVE-2026-23745: Tar-pit of Doom: Escaping the Root in node-tar

CVE-2026-23745: Tar-pit of Doom: Escaping the Root in node-tar

Comments 1
2 min read
CVE-2025-64671 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

CVE-2025-64671 | GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

Comments
3 min read
CVE-2025-8961 | LibTIFF tiffcrop tiffcrop.c main memory corruption

CVE-2025-8961 | LibTIFF tiffcrop tiffcrop.c main memory corruption

Comments
3 min read
CVE-2025-9086 | Out of bounds read for cookie path

CVE-2025-9086 | Out of bounds read for cookie path

Comments
5 min read
CVE-2025-9230 | Missing type checks leading to hash rewind and passing on crafted data

CVE-2025-9230 | Missing type checks leading to hash rewind and passing on crafted data

Comments
4 min read
KEV: V8 CVE-2025-10585 Hits Electron Apps

KEV: V8 CVE-2025-10585 Hits Electron Apps

6
Comments
7 min read
Exploring the dangerous power of unquoted Python strings, and how they caused CVE-2024-9287

Exploring the dangerous power of unquoted Python strings, and how they caused CVE-2024-9287

Comments
6 min read
Best 5 Tools to Help Eliminate CVEs from Container Images

Best 5 Tools to Help Eliminate CVEs from Container Images

Comments
4 min read
CVE-2022-46166 - Template Injection - Remote Code Execution

CVE-2022-46166 - Template Injection - Remote Code Execution

Comments
3 min read
loading...