Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 681 total.
CPU exhaustion via uncapped terminal dimensions in JLine3 (CVE-2026-56741)
The JLine3 remote-telnet module fails to enforce an upper bound on terminal dimensions received via the Telnet NAWS (Negotiate About Window Size) option. An unauthenticated remote attacker can send client-supplied wid...
Fixed in 3.30.14; 4.2.1
SSRF and local file disclosure in css_parser (RubyGems) (CVE-2026-53727)
CVE-2026-53727 is a Server-Side Request Forgery (SSRF) and local file disclosure vulnerability in the `css_parser` RubyGems package affecting `CssParser::Parser#read_remote_file`, which issues HTTP/HTTPS requests agai...
Fixed in 3.0.0
Message corruption in the websocket-driver npm package (CVE-2026-54466)
CVE-2026-54466 is a message corruption vulnerability in the websocket-driver npm package affecting draft versions of the WebSocket protocol implementation. A remote, unauthenticated client can send an indefinite seque...
Fixed in >= 0.7.5
Hard-coded credentials in IBM Langflow OSS (CVE-2026-13446)
IBM Langflow OSS contains hard-coded credentials (such as a password or cryptographic key) used for inbound authentication, outbound communication to external components, or encryption of internal data. Specifically, ...
Fixed in 1.10.2
Insecure file path handling in IBM Langflow OSS (CVE-2026-13445)
CVE-2026-13445 affects IBM Langflow OSS and allows an authenticated attacker to exploit the SaveToFile component to read and modify other users' uploaded files by specifying absolute paths to victim storage locations....
Fixed in 1.10.2
Unauthenticated remote code execution in IBM Langflow (CVE-2026-13448)
IBM Langflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint (/api/v1/build_public_tmp/{flow_id}/flow). The vulnerability originates from an incomplete denylist in...
Fixed in 1.10.2
Heap-based buffer overflow in IBM Storage Protect Client (CVE-2026-13473)
IBM Storage Protect Client contains a heap-based buffer overflow vulnerability caused by improper bounds checking in string copy operations. A remote unauthenticated attacker could exploit this flaw to execute arbitra...
Fixed in 8.2.1.2
OS command injection in IBM Langflow OSS Python Interpreter (CVE-2026-14499)
CVE-2026-14499 affects IBM Langflow OSS, where improper validation of user-supplied input in the Python Interpreter component allows an authenticated user to execute arbitrary OS commands with elevated privileges on t...
Fixed in 1.10.2
Parameter smuggling in the @hapi/content npm package (CVE-2026-44974)
CVE-2026-44974 is a parameter smuggling vulnerability in the @hapi/content npm package, where the `Content.disposition()` and `Content.type()` parsers resolve duplicate header parameters inconsistently: the former ret...
Fixed in 6.0.2
Authorization bypass in Pimcore's CustomReports bundle (CVE-2026-45704)
CVE-2026-45704 is an authorization bypass vulnerability in Pimcore's CustomReports bundle where inconsistent access control between the report listing endpoint and the report detail endpoint allows a low-privileged au...
Fixed in 11.5.17 (LTS); 12.3.6
Authentication bypass in the joserfc Python library (CVE-2026-49852)
CVE-2026-49852 is an authentication bypass vulnerability in the joserfc Python library where `joserfc.jwt.decode` accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty strin...
Fixed in 1.6.8
Request body extraction bypass in Zalando Skipper OPA authorization filter (CVE-2026-50197)
In github.com/zalando/skipper, the `opaAuthorizeRequestWithBody` filter fails to read the request body for HTTP/1.1 `Transfer-Encoding: chunked` requests and HTTP/2 requests lacking a `content-length` pseudo-header. T...
Fixed in >= v0.26.10
OS command injection in the `systeminformation` npm package (CVE-2026-50289)
CVE-2026-50289 is an OS command injection vulnerability in the `systeminformation` npm package affecting the `networkInterfaces()` function on Linux. The `checkLinuxDCHPInterfaces()` function reads `/etc/network/inter...
Fixed in 5.31.7
Information disclosure in IBM Engineering AI Hub in (CVE-2026-15322)
CVE-2026-15322 is an information disclosure vulnerability in IBM Engineering AI Hub in which session tokens are exposed in URLs (CWE-598: Use of HTTP Request With Sensitive Query String). A remote, unauthenticated att...
Fixed in 1.3.0
Cross-site scripting (CWE-79) in IBM Engineering AI Hub (CVE-2026-15091)
CVE-2026-15091 is a cross-site scripting (CWE-79) vulnerability in IBM Engineering AI Hub caused by improper neutralization of input during web page generation. A remote attacker could exploit this flaw to execute arb...
Fixed in 1.3.0
Path traversal in the API Request component of IBM Langflow OSS (CVE-2026-7667)
CVE-2026-7667 is a path traversal vulnerability in the API Request component of IBM Langflow OSS affecting the Content-Disposition header processing logic. An authenticated attacker can create a malicious flow pointin...
Fixed in 1.10.1
Server-side request forgery (SSRF) in IBM Langflow OSS (CVE-2026-7754)
CVE-2026-7754 is a server-side request forgery (SSRF) vulnerability in IBM Langflow OSS affecting versions 1.0.0 through 1.10.0. The vulnerability arises from an insecure default configuration and incomplete enforceme...
Fixed in 1.10.1
Path traversal in Langflow OSS File component tar extraction (CVE-2026-7872)
A path traversal vulnerability in the Langflow OSS File component's tar archive extraction functionality allows an authenticated attacker to upload a specially crafted tar archive containing symbolic links to read arb...
Fixed in 1.10.1
Remote code execution in IBM Langflow OSS (CVE-2026-7755)
CVE-2026-7755 is a remote code execution vulnerability in IBM Langflow OSS affecting the MCP server configuration file handling. The file upload endpoint accepted MCP configuration files without invoking the MCPServer...
Fixed in 1.10.1
Code injection in Langflow OSS API Graph Execution Engine (CVE-2026-8056)
CVE-2026-8056 is a code injection vulnerability in the parameter filtering mechanism of Langflow OSS's API Graph Execution Engine, specifically within the `apply_tweaks()` function. Authenticated attackers can craft A...
Fixed in 1.10.1