Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers …

▾ Midnightagno · agnoEPSS 0.86%via NVD

CVE-2026-32871Critical· 10.0

7mo ago

FastMCP is a Pythonic way to build MCP servers and clients

FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for const…

▾ Midnightjlowin · fastmcpEPSS 0.92%via NVD

CVE-2026-2950Medium· 6.5

7mo ago

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows …

▾ Sunlitlodash · lodashEPSS 0.34%via NVD

CVE-2026-34036Medium· 6.5PoC

7mo ago

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) vulnerability in the core AJAX endpoint /core/ajax/selecto…

▾ Twilightdolibarr · dolibarr_erp/crmEPSS 1.5%via NVD

CVE-2026-33762Low· 2.8

7mo ago

go-git is an extensible git implementation library written in pure Go

go-git is an extensible git implementation library written in pure Go. Prior to version 5.17.1, go-git’s index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decoded path n…

▾ Sunlitgo-git_project · go-gitEPSS 0.18%via NVD

CVE-2026-27489High· 7.5

7mo ago

onnx Vulnerable to Path Traversal via Symlink

▾ Twilightonnx · onnxEPSS 0.62%via OSV

CVE-2026-33433High· 8.8

7mo ago

Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField

▾ Twilighttraefik · github.com/traefik/traefik/v2EPSS 0.49%via OSV

CVE-2026-28369High· 8.7

7mo ago

A flaw was found in Undertow

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP s…

▾ Twilightredhat · build_of_apache_camel_-_hawtioEPSS 0.69%via NVD

CVE-2026-28368High· 8.7

7mo ago

A flaw was found in Undertow

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretati…

▾ Twilightredhat · build_of_apache_camel_-_hawtioEPSS 0.73%via NVD

CVE-2026-28367High· 8.7

7mo ago

A flaw was found in Undertow

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic …

▾ Twilightredhat · build_of_apache_camel_-_hawtioEPSS 0.72%via NVD

CVE-2026-32846High· 7.5PoC

7mo ago

OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions

OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit …

▾ Midnightopenclaw · openclawEPSS 0.70%via NVD

CVE-2026-33287High· 7.5

7mo ago

LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern

▾ Twilightliquidjs · liquidjsEPSS 0.48%via GHSA

CVE-2026-4633Low· 3.7

7mo ago

Keycloak's identity-first login flow exposes user information

▾ Sunlitkeycloak · org.keycloak:keycloak-servicesEPSS 0.43%via GHSA

CVE-2026-4628Medium· 4.3

7mo ago

Keycloak has Improper Access Control that allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false

▾ Sunlitkeycloak · org.keycloak:keycloak-servicesEPSS 0.27%via GHSA

CVE-2026-33236High· 8.1

7mo ago

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the…

▾ Twilightnltk · nltkEPSS 0.61%via NVD

CVE-2026-33228Critical· 9.8

7mo ago

flatted is a circular JSON parser

flatted is a circular JSON parser. Prior to version 3.4.2, the parse() function in flatted can use attacker-controlled string values from the parsed JSON as direct array index keys, without validating that they are numeric. Since the int…

▾ MidnightRed Hat · Cluster Observability Operator 1.5.3EPSS 0.86%via NVD

CVE-2026-33194Medium· 6.8

7mo ago

SiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /home (GHSA-h5vh-m7fg-w5h6 Bypass)

▾ Sunlitsiyuan-note · github.com/siyuan-note/siyuan/kernelEPSS 0.52%via OSV

GHSA-wmxr-6j5f-838pHigh· 7.7

7mo ago

Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

▾ Twilightkeycloak · org.keycloak:keycloak-saml-adapter-corevia GHSA

CVE-2026-2575Medium· 5.3

7mo ago

A flaw was found in Keycloak

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limi…

▾ Sunlitredhat · build_of_keycloakEPSS 0.66%via NVD

CVE-2026-30922High· 7.5PoC

7mo ago

pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)

An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x3…

▾ MidnightRed Hat · Red Hat Enterprise Linux AppStream (v. 10)EPSS 0.83%via CSAF

CVE-2026-2092High· 7.7

7mo ago

A flaw was found in Keycloak

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML asserti…

▾ Twilightredhat · build_of_keycloakEPSS 0.38%via NVD

CVE-2026-32944High

7mo ago

Parse Server crash via deeply nested query condition operators

▾ Twilightparse-server · parse-serverEPSS 0.51%via GHSA

CVE-2026-32633Critical· 9.1

7mo ago

Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`

▾ Midnightglances · glancesEPSS 0.50%via OSV

CVE-2026-32267High

7mo ago

Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController->actionImpersonateWithToken()

▾ Twilightcraftcms · craftcms/cmsEPSS 9.6%via GHSA

CVE-2026-30405High· 7.5

7mo ago

GoBGP vulnerable to a denial of service via the NEXT_HOP path attribute

▾ Twilightosrg · github.com/osrg/gobgp/v4EPSS 0.35%via OSV

CVE-2026-27962Critical· 9.1PoC

7mo ago

Authlib is a Python library which builds OAuth and OpenID Connect servers

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbitrary JWT tokens that…

▾ Abyssalauthlib · authlibEPSS 0.57%via NVD