DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler

CVE-2026-115895: CVE-2026-115895: Code Injection via Unsanitized Import Alias in Happy DOM ECMAScript Module Compiler

Comments
4 min read
CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores

CVE-2026-115883: CVE-2026-115883: Cross-Namespace Access via Dot-Delimited Labels in LangGraph Postgres and SQLite Stores

Comments
3 min read
CVE-2026-113872: CVE-2026-113872: Unauthenticated Process Crash in Express Multer via Late Busboy Stream Resumption

CVE-2026-113872: CVE-2026-113872: Unauthenticated Process Crash in Express Multer via Late Busboy Stream Resumption

Comments
3 min read
CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript

CVE-2026-115897: CVE-2026-115897: Cross-Site Scripting via Function Body Boundary Bypass in serialize-javascript

Comments
4 min read
CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

CVE-2026-114612: CVE-2026-114612: Privilege Escalation to Proxy Admin via Cryptographic Context Reuse in LiteLLM

Comments
4 min read
CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation

CVE-2026-109869: CVE-2026-109869: Denial of Service via Orphaned Stream in Node.js Undici Fetch Implementation

Comments
4 min read
GHSA-78G4-XQWV-Q3G8: GHSA-78G4-XQWV-Q3G8: Heap-Based Buffer Overflow in Pillow (libopenjp2)

GHSA-78G4-XQWV-Q3G8: GHSA-78G4-XQWV-Q3G8: Heap-Based Buffer Overflow in Pillow (libopenjp2)

Comments
2 min read
CVE-2026-109619: CVE-2026-109619: Remote Code Execution in PHP Core via Stale Global State Memory Corruption (PHP2Shell)

CVE-2026-109619: CVE-2026-109619: Remote Code Execution in PHP Core via Stale Global State Memory Corruption (PHP2Shell)

Comments
3 min read
PHP2Shell: Two Critical PHP RCEs (CVSS 9.2) Leaked a Day Early — Check Your Version and Patch Today

PHP2Shell: Two Critical PHP RCEs (CVSS 9.2) Leaked a Day Early — Check Your Version and Patch Today

Comments
10 min read
Vulnerability Report: GO-2026-6809 [Breakdown]

Vulnerability Report: GO-2026-6809 [Breakdown]

Comments
2 min read
Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

Comments
2 min read
Scoring two OpenVPN flaws against your own exposure, not the internet's

Scoring two OpenVPN flaws against your own exposure, not the internet's

Comments
2 min read
Timeline discipline for the OpenVPN 2.7.8 change

Timeline discipline for the OpenVPN 2.7.8 change

Comments
2 min read
Config review for OpenVPN users: the PUSH_UPDATE path behind CVE-2026-88964

Config review for OpenVPN users: the PUSH_UPDATE path behind CVE-2026-88964

Comments
2 min read
Certificate enrollment hygiene after CVE-2026-84790

Certificate enrollment hygiene after CVE-2026-84790

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.