DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-107804: CVE-2026-107804: Client IP Resolution Flaw & Authentication Lockout in Nginx UI
cverports profile

CVE-2026-107804: CVE-2026-107804: Client IP Resolution Flaw & Authentication Lockout in Nginx UI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication
cverports profile

CVE-2026-107805: CVE-2026-107805: Unauthenticated Storage Exhaustion in Nginx UI Node Authentication

#security #cve #cybersecurity
Comments
2 min read
GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline
cverports profile

GHSA-4HV6-XC92-J86G: GHSA-4HV6-XC92-J86G: Insufficient Session Expiration in Vikunja WebSocket Authentication Pipeline

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja
cverports profile

GHSA-FPRF-R6RV-XG99: GHSA-FPRF-R6RV-XG99: Cross-Tenant Task Position Recalculation in Vikunja

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja
cverports profile

GHSA-HJX8-QV73-F7CM: GHSA-HJX8-QV73-F7CM: Incomplete Access Revocation Leading to Webhook Data Exfiltration in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-PJR3-86V4-5P7W: GHSA-PJR3-86V4-5P7W: Broken Access Control via MAX Aggregation in Vikunja Subtree Permissions
cverports profile

GHSA-PJR3-86V4-5P7W: GHSA-PJR3-86V4-5P7W: Broken Access Control via MAX Aggregation in Vikunja Subtree Permissions

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FMMF-XQ98-G327: GHSA-fmmf-xq98-g327: Write-Level Project Members Can Delete Admin-Tier Link Shares in Vikunja
cverports profile

GHSA-FMMF-XQ98-G327: GHSA-fmmf-xq98-g327: Write-Level Project Members Can Delete Admin-Tier Link Shares in Vikunja

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-M687-P538-R5HP: GHSA-m687-p538-r5hp: Permissive Localhost CORS Policy Leads to Account Takeover in Vikunja
cverports profile

GHSA-M687-P538-R5HP: GHSA-m687-p538-r5hp: Permissive Localhost CORS Policy Leads to Account Takeover in Vikunja

#security #cve #cybersecurity #ghsa
Comments
3 min read
GHSA-JQ7H-WRVP-3RGX: GHSA-JQ7H-WRVP-3RGX: Insufficient Session Invalidation in pyLoad Core REST API
cverports profile

GHSA-JQ7H-WRVP-3RGX: GHSA-JQ7H-WRVP-3RGX: Insufficient Session Invalidation in pyLoad Core REST API

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-9Q47-3CM2-2RP8: GHSA-9Q47-3CM2-2RP8: Rate-Limit Bypass and Audit Log Spoofing in pyLoad WebUI
cverports profile

GHSA-9Q47-3CM2-2RP8: GHSA-9Q47-3CM2-2RP8: Rate-Limit Bypass and Audit Log Spoofing in pyLoad WebUI

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-68W4-83FH-F2W8: GHSA-68W4-83FH-F2W8: Privilege Escalation and Administrative Password Oracle in pyLoad-ng
cverports profile

GHSA-68W4-83FH-F2W8: GHSA-68W4-83FH-F2W8: Privilege Escalation and Administrative Password Oracle in pyLoad-ng

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-R44W-V6GF-X3P6: Authentication Bypass in pyLoad API Key Caching Mechanism (GHSA-R44W-V6GF-X3P6)
cverports profile

GHSA-R44W-V6GF-X3P6: Authentication Bypass in pyLoad API Key Caching Mechanism (GHSA-R44W-V6GF-X3P6)

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-107728: CVE-2026-107728: Authorization Bypass in Strawberry GraphQL Permission Validation
cverports profile

CVE-2026-107728: CVE-2026-107728: Authorization Bypass in Strawberry GraphQL Permission Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107727: CVE-2026-107727: Connection-Level Denial of Service via State Leak in Strawberry GraphQL Legacy WS Handler
cverports profile

CVE-2026-107727: CVE-2026-107727: Connection-Level Denial of Service via State Leak in Strawberry GraphQL Legacy WS Handler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107723: CVE-2026-107723: Silent Claim-Validator Bypass in NearForm fast-jwt via Array Payload Type Confusion
cverports profile

CVE-2026-107723: CVE-2026-107723: Silent Claim-Validator Bypass in NearForm fast-jwt via Array Payload Type Confusion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107721: CVE-2026-107721: Time Validation Bypass in NearForm fast-jwt due to Loose Temporal Option Validation
cverports profile

CVE-2026-107721: CVE-2026-107721: Time Validation Bypass in NearForm fast-jwt due to Loose Temporal Option Validation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107722: CVE-2026-107722: Algorithm Confusion via Non-Whitespace Prefix Bypass in fast-jwt
cverports profile

CVE-2026-107722: CVE-2026-107722: Algorithm Confusion via Non-Whitespace Prefix Bypass in fast-jwt

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107720: CVE-2026-107720: Signature Verification Bypass in NearForm fast-jwt
cverports profile

CVE-2026-107720: CVE-2026-107720: Signature Verification Bypass in NearForm fast-jwt

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107715: CVE-2026-107715: Information Disclosure and Credential Leakage in Ruby Mechanize via Cross-Origin Redirections
cverports profile

CVE-2026-107715: CVE-2026-107715: Information Disclosure and Credential Leakage in Ruby Mechanize via Cross-Origin Redirections

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107399: CVE-2026-107399: Information Disclosure via HTML Meta-Refresh in Ruby Mechanize
cverports profile

CVE-2026-107399: CVE-2026-107399: Information Disclosure via HTML Meta-Refresh in Ruby Mechanize

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107718: CVE-2026-107718: Open Redirect Vulnerability in @adonisjs/http-server
cverports profile

CVE-2026-107718: CVE-2026-107718: Open Redirect Vulnerability in @adonisjs/http-server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107725: CVE-2026-107725: Remote Code Execution via Authorization Bypass in Hazelcast Predicates API
cverports profile

CVE-2026-107725: CVE-2026-107725: Remote Code Execution via Authorization Bypass in Hazelcast Predicates API

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-107396: CVE-2026-107396: Stored Cross-Site Scripting (XSS) in Indico
cverports profile

CVE-2026-107396: CVE-2026-107396: Stored Cross-Site Scripting (XSS) in Indico

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107397: CVE-2026-107397: Stored Cross-Site Scripting via Collaborative Editor Conflict Resolution and Custom Link Fields in Indico
cverports profile

CVE-2026-107397: CVE-2026-107397: Stored Cross-Site Scripting via Collaborative Editor Conflict Resolution and Custom Link Fields in Indico

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107395: CVE-2026-107395: Missing Authorization in Indico Legacy Session Export API
cverports profile

CVE-2026-107395: CVE-2026-107395: Missing Authorization in Indico Legacy Session Export API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107394: CVE-2026-107394: Server-Side Request Forgery Bypass via Parser Differential in Indico
cverports profile

CVE-2026-107394: CVE-2026-107394: Server-Side Request Forgery Bypass via Parser Differential in Indico

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107717: CVE-2026-107717: Chat Role Injection and Prompt Boundary Bypass in Banks Library
cverports profile

CVE-2026-107717: CVE-2026-107717: Chat Role Injection and Prompt Boundary Bypass in Banks Library

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107716: CVE-2026-107716: Path Traversal and Link Following in banks DirectoryPromptRegistry
cverports profile

CVE-2026-107716: CVE-2026-107716: Path Traversal and Link Following in banks DirectoryPromptRegistry

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107726: CVE-2026-107726: Unrestricted Deserialization in Hazelcast Zero Config Compact Serialization
cverports profile

CVE-2026-107726: CVE-2026-107726: Unrestricted Deserialization in Hazelcast Zero Config Compact Serialization

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107719: CVE-2026-107719: Session Expiration Bypass in fast-jwt via Verifier Cache
cverports profile

CVE-2026-107719: CVE-2026-107719: Session Expiration Bypass in fast-jwt via Verifier Cache

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61427: CVE-2026-61427: Authentication Bypass and Unvalidated Tool Execution in PraisonAI MCP HTTP-Stream Server
cverports profile

CVE-2026-61427: CVE-2026-61427: Authentication Bypass and Unvalidated Tool Execution in PraisonAI MCP HTTP-Stream Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107387: CVE-2026-107387: Uncontrolled Memory Allocation (OOM) in music-metadata APEv2 Parser
cverports profile

CVE-2026-107387: CVE-2026-107387: Uncontrolled Memory Allocation (OOM) in music-metadata APEv2 Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107391: CVE-2026-107391: Synchronous Infinite Loop and Memory Exhaustion in music-metadata MP4 Parser
cverports profile

CVE-2026-107391: CVE-2026-107391: Synchronous Infinite Loop and Memory Exhaustion in music-metadata MP4 Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107377: CVE-2026-107377: Arbitrary File Write and Overwrite via Protobuf Weak Import Path Traversal in datamodel-code-generator
cverports profile

CVE-2026-107377: CVE-2026-107377: Arbitrary File Write and Overwrite via Protobuf Weak Import Path Traversal in datamodel-code-generator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61431: CVE-2026-61431: Arbitrary Local File Read and Path Traversal in PraisonAI ContextGatherer
cverports profile

CVE-2026-61431: CVE-2026-61431: Arbitrary Local File Read and Path Traversal in PraisonAI ContextGatherer

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-107212: CVE-2026-107212: CPU Exhaustion Denial of Service via Look-Ahead Row Parsing in Excelize
cverports profile

CVE-2026-107212: CVE-2026-107212: CPU Exhaustion Denial of Service via Look-Ahead Row Parsing in Excelize

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105647: CVE-2026-105647: Server-Side Request Forgery via Favicon Probing in Ghost CMS
cverports profile

CVE-2026-105647: CVE-2026-105647: Server-Side Request Forgery via Favicon Probing in Ghost CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106450: CVE-2026-106450: Denial of Service via Eager Resource Allocation in lz4-java LZ4FrameInputStream
cverports profile

CVE-2026-106450: CVE-2026-106450: Denial of Service via Eager Resource Allocation in lz4-java LZ4FrameInputStream

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106449: CVE-2026-106449: Stack Overflow via Uncontrolled Recursion in yawkat lz4-java
cverports profile

CVE-2026-106449: CVE-2026-106449: Stack Overflow via Uncontrolled Recursion in yawkat lz4-java

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76485: CVE-2026-76485: Remote Code Execution in Cisco NX-OS VXLAN OAM (NGOAM)
cverports profile

CVE-2026-76485: CVE-2026-76485: Remote Code Execution in Cisco NX-OS VXLAN OAM (NGOAM)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106451: CVE-2026-106451: Local Privilege Escalation via JNI Extraction TOCTOU in lz4-java
cverports profile

CVE-2026-106451: CVE-2026-106451: Local Privilege Escalation via JNI Extraction TOCTOU in lz4-java

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105698: CVE-2026-105698: Missing Authorization in Deprecated Chat Vertices Endpoints in Langflow
cverports profile

CVE-2026-105698: CVE-2026-105698: Missing Authorization in Deprecated Chat Vertices Endpoints in Langflow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105697: CVE-2026-105697: OS Command Injection in Langflow Model Context Protocol Integration
cverports profile

CVE-2026-105697: CVE-2026-105697: OS Command Injection in Langflow Model Context Protocol Integration

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105745: CVE-2026-105745: Arbitrary Code Execution via Malicious Entrypoint Discovery in Docling base_factory
cverports profile

CVE-2026-105745: CVE-2026-105745: Arbitrary Code Execution via Malicious Entrypoint Discovery in Docling base_factory

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-105749: CVE-2026-105749: Unbounded Table Attributes in Docling Backends Leads to Resource Exhaustion
cverports profile

CVE-2026-105749: CVE-2026-105749: Unbounded Table Attributes in Docling Backends Leads to Resource Exhaustion

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105748: CVE-2026-105748: Local File Inclusion and Arbitrary File Disclosure in Docling Document Parser
cverports profile

CVE-2026-105748: CVE-2026-105748: Local File Inclusion and Arbitrary File Disclosure in Docling Document Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105744: CVE-2026-105744: Arbitrary File Read and Remote Code Execution in Docling Tectonic Engine
cverports profile

CVE-2026-105744: CVE-2026-105744: Arbitrary File Read and Remote Code Execution in Docling Tectonic Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105743: CVE-2026-105743: Server-Side Request Forgery Guard Bypass in Docling Document Conversion Engine
cverports profile

CVE-2026-105743: CVE-2026-105743: Server-Side Request Forgery Guard Bypass in Docling Document Conversion Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105742: CVE-2026-105742: Sensitive Custom Header Leakage in Docling Image Resource Loader
cverports profile

CVE-2026-105742: CVE-2026-105742: Sensitive Custom Header Leakage in Docling Image Resource Loader

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106121: CVE-2026-106121: Denial of Service via Infinite Loop in RabbitMQ Java Client JSON Parser
cverports profile

CVE-2026-106121: CVE-2026-106121: Denial of Service via Infinite Loop in RabbitMQ Java Client JSON Parser

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-105646: CVE-2026-105646: Regular Expression Denial of Service in Ghost CMS Import Handlers
cverports profile

CVE-2026-105646: CVE-2026-105646: Regular Expression Denial of Service in Ghost CMS Import Handlers

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105645: CVE-2026-105645: Regular Expression Denial of Service (ReDoS) in Ghost CMS
cverports profile

CVE-2026-105645: CVE-2026-105645: Regular Expression Denial of Service (ReDoS) in Ghost CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105644: CVE-2026-105644: Stored Cross-Site Scripting via Malicious SVG Content Import in Ghost CMS
cverports profile

CVE-2026-105644: CVE-2026-105644: Stored Cross-Site Scripting via Malicious SVG Content Import in Ghost CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105643: CVE-2026-105643: Stored Cross-Site Scripting and Isolation Bypass in Ghost CMS
cverports profile

CVE-2026-105643: CVE-2026-105643: Stored Cross-Site Scripting and Isolation Bypass in Ghost CMS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-105642: CVE-2026-105642: Remote Code Execution in Ghost CMS via Unsafe SVG Processing during Metadata Scraping
cverports profile

CVE-2026-105642: CVE-2026-105642: Remote Code Execution in Ghost CMS via Unsafe SVG Processing during Metadata Scraping

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61439: CVE-2026-61439: Prompt Injection Defense Bypass in PraisonAI InjectionDefense Engine
cverports profile

CVE-2026-61439: CVE-2026-61439: Prompt Injection Defense Bypass in PraisonAI InjectionDefense Engine

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-104890: CVE-2026-104890: Remote Code Execution via Mixed-Case File Upload Bypass in Kunstmaan CMS MediaBundle
cverports profile

CVE-2026-104890: CVE-2026-104890: Remote Code Execution via Mixed-Case File Upload Bypass in Kunstmaan CMS MediaBundle

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106443: CVE-2026-106443: Remote Code Execution in WeasyPrint via Unvalidated Pillow EPS Processing
cverports profile

CVE-2026-106443: CVE-2026-106443: Remote Code Execution in WeasyPrint via Unvalidated Pillow EPS Processing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106489: CVE-2026-106489: Authorization Bypass via Path Traversal in Spotify Backstage TechDocs Backend
cverports profile

CVE-2026-106489: CVE-2026-106489: Authorization Bypass via Path Traversal in Spotify Backstage TechDocs Backend

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-106502: CVE-2026-106502: Sensitive Information Exposure in Backstage Scaffolder Backend
cverports profile

CVE-2026-106502: CVE-2026-106502: Sensitive Information Exposure in Backstage Scaffolder Backend

#security #cve #cybersecurity
Comments
2 min read
loading...