Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context.Check if you run itEPSS 0.29%Oct 14, 2026
- Medium4.3Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the requesting user.Check if you run itEPSS 0.28%Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Check if you run itEPSS 0.13%Oct 14, 2026
- UnknownCVE-2026-53613 affecting package util-linux 2.40.2-6Open the advisoryOct 14, 2026
- Medium5.3When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses.Check if you run itEPSS 0.41%Oct 14, 2026
- Critical9.2A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return direct…Check if you run itEPSS 0.52%Oct 14, 2026
- Critical9.3Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because…Check if you run itEPSS 0.72%Oct 14, 2026
- Critical9.2Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255.Check if you run itEPSS 0.43%Oct 14, 2026
- Critical9.2NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_to…Check if you run itEPSS 0.81%Oct 14, 2026
- High7.1Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sor…Check if you run itEPSS 0.47%Oct 14, 2026
- Medium5.3ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated users to make the ser…Check if you run itEPSS 0.30%Oct 14, 2026
- High7.1BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the Pay…Check if you run itEPSS 0.30%Oct 14, 2026
- High8.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.72%Oct 14, 2026
- High8.3Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the builtCheck if you run itEPSS 0.20%Oct 14, 2026
- Medium6.9Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanuCheck if you run itEPSS 0.32%Oct 14, 2026
- Medium6.9NGINX ngx_http_v3_module vulnerabilityCheck if you run itEPSS 0.25%Oct 14, 2026
- High8.7An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the policy or Ingress external authentication.Check if you run itEPSS 0.39%Oct 14, 2026
- High8.8Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unCheck if you run itEPSS 0.48%Oct 14, 2026
- Critical9.2NGINX map directive and regex matching vulnerabilityCheck if you run itEPSS 0.55%Oct 14, 2026
- High8.8Gitea fork workflow approval bypass through review eventsCheck if you run itEPSS 0.49%Oct 14, 2026
- UnknownCVE-2026-98426 affecting package kernel 6.6.157.1-1Open the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026