DEV Community

# cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI Agents Are Finding CVEs. Who's Watching the Agents?

AI Agents Are Finding CVEs. Who's Watching the Agents?

1
Comments 1
3 min read
CVE-2026-32242: CVE-2026-32242: Authentication Bypass via Race Condition in Parse Server OAuth2 Adapter

CVE-2026-32242: CVE-2026-32242: Authentication Bypass via Race Condition in Parse Server OAuth2 Adapter

1
Comments
2 min read
AI Agent Vulnerability Report — Q1 2026

AI Agent Vulnerability Report — Q1 2026

Comments
2 min read
GHSA-V8W9-8MX6-G223: GHSA-v8w9-8mx6-g223: Prototype Pollution in Hono parseBody Utility

GHSA-V8W9-8MX6-G223: GHSA-v8w9-8mx6-g223: Prototype Pollution in Hono parseBody Utility

1
Comments
2 min read
CVE-2026-32630: CVE-2026-32630: Denial of Service via Data Amplification in file-type npm Package

CVE-2026-32630: CVE-2026-32630: Denial of Service via Data Amplification in file-type npm Package

1
Comments
2 min read
CVE-2026-30241: CVE-2026-30241: Missing Query Depth Validation in Mercurius GraphQL Subscriptions

CVE-2026-30241: CVE-2026-30241: Missing Query Depth Validation in Mercurius GraphQL Subscriptions

1
Comments
2 min read
GHSA-QR2G-P6Q7-W82M: GHSA-qr2g-p6q7-w82m: Critical Payment Verification Bypass in Coinbase x402 SDK (Solana)

GHSA-QR2G-P6Q7-W82M: GHSA-qr2g-p6q7-w82m: Critical Payment Verification Bypass in Coinbase x402 SDK (Solana)

1
Comments
2 min read
GHSA-W75W-9QV4-J5XJ: GHSA-W75W-9QV4-J5XJ: Path Traversal in dbt-common Archive Extraction

GHSA-W75W-9QV4-J5XJ: GHSA-W75W-9QV4-J5XJ: Path Traversal in dbt-common Archive Extraction

1
Comments
2 min read
CVE-2026-22719: VMware Aria Operations Command Injection Now Actively Exploited

CVE-2026-22719: VMware Aria Operations Command Injection Now Actively Exploited

Comments
7 min read
CISA Adds VMware Aria Operations RCE Flaw to KEV Catalog After Active Exploitation

CISA Adds VMware Aria Operations RCE Flaw to KEV Catalog After Active Exploitation

Comments
4 min read
CVE-2026-26194: CVE-2026-26194: Command Option Injection in Gogs Release Deletion

CVE-2026-26194: CVE-2026-26194: Command Option Injection in Gogs Release Deletion

1
Comments
2 min read
CVE-2026-28415: Open Redirect in Gradio OAuth Flow Enables Phishing Attacks

CVE-2026-28415: Open Redirect in Gradio OAuth Flow Enables Phishing Attacks

Comments
2 min read
CVE-2026-28426: Chain Reaction: Stored XSS and Antlers Template Injection in Statamic Control Panel

CVE-2026-28426: Chain Reaction: Stored XSS and Antlers Template Injection in Statamic Control Panel

Comments
2 min read
CVE-2026-28414: Gradio Path Traversal: Exploiting Python 3.13 Path Semantics on Windows

CVE-2026-28414: Gradio Path Traversal: Exploiting Python 3.13 Path Semantics on Windows

Comments
2 min read
CVE-2026-28351: CVE-2026-28351: Uncontrolled Resource Consumption in pypdf RunLengthDecode

CVE-2026-28351: CVE-2026-28351: Uncontrolled Resource Consumption in pypdf RunLengthDecode

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.