Tagged “osv”
CVEs tagged osv, newest first.
7180 CVEsRSS
CVE-2026-34031Medium· 6.5Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
CVE-2026-33582Medium· 6.5Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability
CVE-2026-34905Medium· 6.5Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Apache Answer has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability
CVE-2026-34033Medium· 5.4Apache Answer vulnerable to Cross-site Scripting
Apache Answer vulnerable to Cross-site Scripting
CVE-2026-52902Medium· 4.7Awxkit: path traversal via yaml !include directive
A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the lo…
CVE-2026-49818Medium· 6.5Apache Airflow has a Path Traversal issue
Apache Airflow has a Path Traversal issue
CVE-2026-25699Medium· 6.1Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability
Apache Answer has an Exposure of Private Personal Information to an Unauthorized Actor vulnerability
CVE-2026-25688Medium· 6.1Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability
Apache Answer has an Improper Neutralization of Alternate XSS Syntax vulnerability
MAL-2026-5345NoneMalicious code in dstill (PyPI)
Malicious code in dstill (PyPI)
RUSTSEC-2026-0209NoneAES-GCM did not enforce limits on AAD length
AES-GCM did not enforce limits on AAD length
CVE-2026-11481Low· 2.5grepai Uses a Broken or Risky Cryptographic Algorithm
grepai Uses a Broken or Risky Cryptographic Algorithm
CVE-2026-11500Medium· 5.0Weaviate has an Improper Authorization issue
Weaviate has an Improper Authorization issue
CVE-2026-11465Low· 3.1songquanpeng one-api has an issue that results in business logic errors
songquanpeng one-api has an issue that results in business logic errors
CVE-2026-11479Medium· 4.2grepai Uses a Broken or Risky Cryptographic Algorithm
grepai Uses a Broken or Risky Cryptographic Algorithm
CVE-2026-11466Medium· 5.4zilliztech deep-searcher has an Incorrect Privilege Assignment issue
zilliztech deep-searcher has an Incorrect Privilege Assignment issue
MAL-2026-5334NoneMalicious code in spaysrbx (PyPI)
Malicious code in spaysrbx (PyPI)
MAL-2026-5329NoneMalicious code in spaysdatarbx (PyPI)
Malicious code in spaysdatarbx (PyPI)
CVE-2026-11529Medium· 6.3MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler
MySQL MCP Server is Vulnerable to SQL Injection Through its mysql URI Handler
MAL-2026-5330NoneMalicious code in bittensor-burn-alert (PyPI)
Malicious code in bittensor-burn-alert (PyPI)
MAL-2026-5335NoneMalicious code in xfoobar (PyPI)
Malicious code in xfoobar (PyPI)
MAL-2026-5332NoneMalicious code in xforpy (PyPI)
Malicious code in xforpy (PyPI)
MAL-2026-5305NoneMalicious code in tlask (PyPI)
Malicious code in tlask (PyPI)
MAL-2026-5304NoneMalicious code in rsquests (PyPI)
Malicious code in rsquests (PyPI)
MAL-2026-5303NoneMalicious code in rlask (PyPI)
Malicious code in rlask (PyPI)
MAL-2026-5302NoneMalicious code in nhmpy (PyPI)
Malicious code in nhmpy (PyPI)
MAL-2026-5367NoneMalicious code in odoo-addon-spp-base (PyPI)
Malicious code in odoo-addon-spp-base (PyPI)
MAL-2026-5333NoneMalicious code in nerfstudio-gs (PyPI)
Malicious code in nerfstudio-gs (PyPI)
MAL-2026-5326NoneMalicious code in tiktoken-mcp (PyPI)
Malicious code in tiktoken-mcp (PyPI)
MAL-2026-5320NoneMalicious code in openai-mcp (PyPI)
Malicious code in openai-mcp (PyPI)
RUSTSEC-2026-0181NoneDoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths