DEV Community

# cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-1669: Model Poisoning: Turning Keras Weights into Weaponized File Readers

CVE-2026-1669: Model Poisoning: Turning Keras Weights into Weaponized File Readers

Comments
2 min read
GHSA-RWJ8-P9VQ-25GV: OpenClaw BlueBubbles: When Your iMessage Bridge Becomes a Spy

GHSA-RWJ8-P9VQ-25GV: OpenClaw BlueBubbles: When Your iMessage Bridge Becomes a Spy

Comments
2 min read
GHSA-PG2V-8XWH-QHCC: The Call Is Coming From Inside the House: OpenClaw SSRF Analysis

GHSA-PG2V-8XWH-QHCC: The Call Is Coming From Inside the House: OpenClaw SSRF Analysis

Comments
2 min read
GHSA-4564-PVR2-QQ4H: OpenClaw Keychain Injection: When Secure Storage Becomes a Shell

GHSA-4564-PVR2-QQ4H: OpenClaw Keychain Injection: When Secure Storage Becomes a Shell

Comments
2 min read
GHSA-JFV4-H8MC-JCP8: OpenClaw: The Cleanup Crew That Killed Everyone Else's Processes

GHSA-JFV4-H8MC-JCP8: OpenClaw: The Cleanup Crew That Killed Everyone Else's Processes

Comments
2 min read
CVE-2026-22892: Confused Deputy in the Chatroom: Dissecting CVE-2026-22892

CVE-2026-22892: Confused Deputy in the Chatroom: Dissecting CVE-2026-22892

Comments
2 min read
CVE-2025-33042: Schema to Shell: Unpacking the Apache Avro Code Injection Vulnerability

CVE-2025-33042: Schema to Shell: Unpacking the Apache Avro Code Injection Vulnerability

Comments
2 min read
CVE-2026-26273: The Over-Helpful Doorman: Full Account Takeover in 'Known' CMS

CVE-2026-26273: The Over-Helpful Doorman: Full Account Takeover in 'Known' CMS

Comments
2 min read
GHSA-8WC6-VGRQ-X6CF: Renovate's TMI: When Automation Leaks the Keys to the Kingdom

GHSA-8WC6-VGRQ-X6CF: Renovate's TMI: When Automation Leaks the Keys to the Kingdom

Comments
2 min read
GHSA-7587-4WV6-M68M: Panic at the Keyring: Crashing rPGP with a Single Byte

GHSA-7587-4WV6-M68M: Panic at the Keyring: Crashing rPGP with a Single Byte

Comments
2 min read
CVE-2026-26187: CVE-2026-26187: escaping the Lake with a Path Traversal Two-Step

CVE-2026-26187: CVE-2026-26187: escaping the Lake with a Path Traversal Two-Step

Comments
2 min read
GHSA-XX7M-69FF-9CRP: SurrealDB's Poison Pill: Crashing the Database with a Single String

GHSA-XX7M-69FF-9CRP: SurrealDB's Poison Pill: Crashing the Database with a Single String

Comments
2 min read
CVE-2026-2391: Death by a Thousand Commas: Deep Dive into CVE-2026-2391

CVE-2026-2391: Death by a Thousand Commas: Deep Dive into CVE-2026-2391

Comments
2 min read
CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels

CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels

Comments
2 min read
CVE-2026-25759: Command Pwned: Stored XSS in Statamic's Command Palette

CVE-2026-25759: Command Pwned: Stored XSS in Statamic's Command Palette

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.