Tagged “osv”

CVEs tagged osv, newest first.

7182 CVEsRSS

CVE-2026-18679Medium

3mo ago

kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

▾ Sunlitkumahq · github.com/kumahq/kuma/v2EPSS 0.16%via OSV

CVE-2026-18678Medium

3mo ago

kumactl connects to control plane without verifying TLS certificate when no CA is configured

▾ Sunlitkumahq · github.com/kumahq/kuma/v2EPSS 0.13%via OSV

CVE-2026-62290High· 7.3

3mo ago

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources und…

▾ Twilightcert-manager · github.com/cert-manager/cert-managerEPSS 0.11%via NVD

MAL-2026-10760None

3mo ago

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

▾ Twilightmcp · mcpEPSS 0.53%via OSV

CVE-2026-59950High

3mo ago

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

▾ Twilightmcp · mcpEPSS 0.23%via OSV

CVE-2026-52870High· 7.6

3mo ago

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

▾ Twilightmcp · mcpEPSS 0.39%via OSV

MAL-2026-10702None

3mo ago

Malicious code in discordia-telemetria (PyPI)

▾ Sunlitdiscordia-telemetria · discordia-telemetriavia OSV

MAL-2026-10701None

3mo ago

Malicious code in discord-telemetry (PyPI)

▾ Sunlitdiscord-telemetry · discord-telemetryvia OSV

CVE-2025-65720Critical· 9.8

3mo ago

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

▾ Midnightgpt-researcher · gpt-researcherEPSS 0.72%via NVD

CVE-2026-56742Medium· 5.9

3mo ago

Cilium is a networking, observability, and security solution

Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users with permissions to create or update namespaced HTTPRoutes to mirror HTTP traffic to any S…

▾ Sunlitcilium · ciliumEPSS 0.18%via NVD

CVE-2026-58659High· 7.8PoC

3mo ago

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters…

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters…

▾ Midnightlightningai · pytorch_lightningEPSS 0.63%via NVD

CVE-2026-61440Medium· 6.5

3mo ago

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member…

▾ Sunlitpraisonai-platform · praisonai-platformEPSS 0.26%via NVD

RUSTSEC-2026-0210None

3mo ago