DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
GHSA-9Q4R-4842-93VW: GHSA-9Q4R-4842-93VW: Cross-Tenant SQL Injection in Trigger.dev TSQL Query Compiler
cverports profile

GHSA-9Q4R-4842-93VW: GHSA-9Q4R-4842-93VW: Cross-Tenant SQL Injection in Trigger.dev TSQL Query Compiler

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-4672-HWV6-GQ62: GHSA-4672-HWV6-GQ62: Cross-environment deployment cancellation in Trigger.dev
cverports profile

GHSA-4672-HWV6-GQ62: GHSA-4672-HWV6-GQ62: Cross-environment deployment cancellation in Trigger.dev

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-JQMF-MX4F-HFR6: GHSA-JQMF-MX4F-HFR6: Multiple Remote Code Execution and Security Flaws in Vibe-Trading AI-Agent Pipeline
cverports profile

GHSA-JQMF-MX4F-HFR6: GHSA-JQMF-MX4F-HFR6: Multiple Remote Code Execution and Security Flaws in Vibe-Trading AI-Agent Pipeline

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-5RMQ-CHC7-M22F: GHSA-5RMQ-CHC7-M22F: Arbitrary File Read and Path Traversal in Vibe-Trading Platform
cverports profile

GHSA-5RMQ-CHC7-M22F: GHSA-5RMQ-CHC7-M22F: Arbitrary File Read and Path Traversal in Vibe-Trading Platform

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-V2F8-6655-7GRJ: GHSA-v2f8-6655-7grj: Remote Code Execution and Authentication Bypass in vibe-trading-ai
cverports profile

GHSA-V2F8-6655-7GRJ: GHSA-v2f8-6655-7grj: Remote Code Execution and Authentication Bypass in vibe-trading-ai

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-18140: CVE-2026-18140: Uncontrolled Recursion in aws-smithy-json Token Skipping Path
cverports profile

CVE-2026-18140: CVE-2026-18140: Uncontrolled Recursion in aws-smithy-json Token Skipping Path

#security #cve #cybersecurity
Comments
2 min read
GHSA-FJ2X-MQQP-3V2W: GHSA-FJ2X-MQQP-3V2W: Sensitive Information Disclosure in Trigger.dev CLI Build Logs
cverports profile

GHSA-FJ2X-MQQP-3V2W: GHSA-FJ2X-MQQP-3V2W: Sensitive Information Disclosure in Trigger.dev CLI Build Logs

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-104855: CVE-2026-104855: Sandbox Escape via Reentrant State Desynchronization in Wasmtime Bulk Memory Operations
cverports profile

CVE-2026-104855: CVE-2026-104855: Sandbox Escape via Reentrant State Desynchronization in Wasmtime Bulk Memory Operations

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-74802: CVE-2026-74802: Cross-Site WebSocket Hijacking (CSWSH) in SiYuan Knowledge Workspace
cverports profile

CVE-2026-74802: CVE-2026-74802: Cross-Site WebSocket Hijacking (CSWSH) in SiYuan Knowledge Workspace

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-74904: CVE-2026-74904: Missing Authorization in SiYuan Note-Taking Application API
cverports profile

CVE-2026-74904: CVE-2026-74904: Missing Authorization in SiYuan Note-Taking Application API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71416: CVE-2026-71416: Cross-Site WebSocket Hijacking in Headroom Proxy Server
cverports profile

CVE-2026-71416: CVE-2026-71416: Cross-Site WebSocket Hijacking in Headroom Proxy Server

#security #cve #cybersecurity
Comments
2 min read
GHSA-CJCG-CXMH-9WCR: GHSA-cjcg-cxmh-9wcr: Unbounded Memory Allocation via HTTP/2 Bomb in praxis-proxy
cverports profile

GHSA-CJCG-CXMH-9WCR: GHSA-cjcg-cxmh-9wcr: Unbounded Memory Allocation via HTTP/2 Bomb in praxis-proxy

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-MWM8-39RW-8826: GHSA-MWM8-39RW-8826: Use-After-Free Vulnerability in Ruby sqlite3 Gem native extension
cverports profile

GHSA-MWM8-39RW-8826: GHSA-MWM8-39RW-8826: Use-After-Free Vulnerability in Ruby sqlite3 Gem native extension

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-19484: CVE-2026-19484: Remote Denial of Service via Boyer-Moore-Horspool Integer Wrap-around in @fastify/busboy
cverports profile

CVE-2026-19484: CVE-2026-19484: Remote Denial of Service via Boyer-Moore-Horspool Integer Wrap-around in @fastify/busboy

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19481: CVE-2026-19481: Unauthenticated Remote Denial of Service via Prototype Lookup Crash in @fastify/busboy
cverports profile

CVE-2026-19481: CVE-2026-19481: Unauthenticated Remote Denial of Service via Prototype Lookup Crash in @fastify/busboy

#security #cve #cybersecurity
Comments
2 min read
GHSA-P23F-CM6Q-2QP8: GHSA-P23F-CM6Q-2QP8: Workspace Boundary Bypass and Arbitrary File Leak in SiYuan MCP
cverports profile

GHSA-P23F-CM6Q-2QP8: GHSA-P23F-CM6Q-2QP8: Workspace Boundary Bypass and Arbitrary File Leak in SiYuan MCP

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-X8GV-G2G3-65FJ: CVE-2026-82234: Server-Side Request Forgery via DNS-Rebinding TOCTOU in SiYuan Kernel
cverports profile

GHSA-X8GV-G2G3-65FJ: CVE-2026-82234: Server-Side Request Forgery via DNS-Rebinding TOCTOU in SiYuan Kernel

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-104861: CVE-2026-104861: Quadratic-time Regular Expression Denial of Service in probe-image-size SVG Parser
cverports profile

CVE-2026-104861: CVE-2026-104861: Quadratic-time Regular Expression Denial of Service in probe-image-size SVG Parser

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-10032: CVE-2026-10032: DOM-based Cross-Site Scripting (XSS) via window.open in Google @a2ui/web_core
cverports profile

CVE-2026-10032: CVE-2026-10032: DOM-based Cross-Site Scripting (XSS) via window.open in Google @a2ui/web_core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59944: CVE-2026-59944: Path Traversal and Symlink Resolution Bypass in Composer
cverports profile

CVE-2026-59944: CVE-2026-59944: Path Traversal and Symlink Resolution Bypass in Composer

#security #cve #cybersecurity
Comments
2 min read
GHSA-QXPP-QJG8-X4JV: GHSA-QXPP-QJG8-X4JV: Cross-Tenant Run Replay and Task Injection in Trigger.dev
cverports profile

GHSA-QXPP-QJG8-X4JV: GHSA-QXPP-QJG8-X4JV: Cross-Tenant Run Replay and Task Injection in Trigger.dev

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-XXV7-2VV3-H682: CVE-2026-85650: Server-Side Request Forgery in Trigger.dev Webhook Alert Channel Delivery
cverports profile

GHSA-XXV7-2VV3-H682: CVE-2026-85650: Server-Side Request Forgery in Trigger.dev Webhook Alert Channel Delivery

#security #cve #cybersecurity
Comments
2 min read
GHSA-C9XM-49CP-XCR9: GHSA-C9XM-49CP-XCR9: Server-Side Request Forgery in rmcp OAuth Client
cverports profile

GHSA-C9XM-49CP-XCR9: GHSA-C9XM-49CP-XCR9: Server-Side Request Forgery in rmcp OAuth Client

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-92945: CVE-2026-92945: Sandbox Escape and Module Allowlist Bypass via Path Prefix Matching in vm2
cverports profile

CVE-2026-92945: CVE-2026-92945: Sandbox Escape and Module Allowlist Bypass via Path Prefix Matching in vm2

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92941: CVE-2026-92941: Sandbox Escape and Process-Wide TLS Trust Store Manipulation in vm2
cverports profile

CVE-2026-92941: CVE-2026-92941: Sandbox Escape and Process-Wide TLS Trust Store Manipulation in vm2

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92944: CVE-2026-92944: Sandbox Escape in vm2 via Stale V8 PromiseThenLookupChain Protector
cverports profile

CVE-2026-92944: CVE-2026-92944: Sandbox Escape in vm2 via Stale V8 PromiseThenLookupChain Protector

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92939: CVE-2026-92939: Critical Sandbox Escape via Host Crypto setEngine Native Code Execution in vm2
cverports profile

CVE-2026-92939: CVE-2026-92939: Critical Sandbox Escape via Host Crypto setEngine Native Code Execution in vm2

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92938: CVE-2026-92938: Remote Code Execution in vm2 via node:sqlite DatabaseSync Sandbox Escape
cverports profile

CVE-2026-92938: CVE-2026-92938: Remote Code Execution in vm2 via node:sqlite DatabaseSync Sandbox Escape

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92937: CVE-2026-92937: Sandbox Escape leading to Remote Code Execution via Promise Indirection in vm2
cverports profile

CVE-2026-92937: CVE-2026-92937: Sandbox Escape leading to Remote Code Execution via Promise Indirection in vm2

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92935: CVE-2026-92935: Remote Code Execution via Array-Shaped Require Config in vm2 NodeVM Sandbox
cverports profile

CVE-2026-92935: CVE-2026-92935: Remote Code Execution via Array-Shaped Require Config in vm2 NodeVM Sandbox

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92949: CVE-2026-92949: Sandbox Escape and State Mutation in vm2 via Accessor Property Descriptor Leak
cverports profile

CVE-2026-92949: CVE-2026-92949: Sandbox Escape and State Mutation in vm2 via Accessor Property Descriptor Leak

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92957: CVE-2026-92957: Sandbox Escape and Remote Code Execution in vm2 via node: Prefix Policy Bypass
cverports profile

CVE-2026-92957: CVE-2026-92957: Sandbox Escape and Remote Code Execution in vm2 via node: Prefix Policy Bypass

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92958: CVE-2026-92958: Built-in Module Denylist Bypass via fs/promises in vm2 NodeVM Subsystem
cverports profile

CVE-2026-92958: CVE-2026-92958: Built-in Module Denylist Bypass via fs/promises in vm2 NodeVM Subsystem

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92951: CVE-2026-92951: Sandbox Escape via External Package Allowlist Bypass in vm2
cverports profile

CVE-2026-92951: CVE-2026-92951: Sandbox Escape via External Package Allowlist Bypass in vm2

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92940: CVE-2026-92940: Host-Realm Credential Exposure and Socket Hijacking via globalAgent in vm2
cverports profile

CVE-2026-92940: CVE-2026-92940: Host-Realm Credential Exposure and Socket Hijacking via globalAgent in vm2

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92950: CVE-2026-92950: Sandbox Escape Vulnerability in vm2 CLI
cverports profile

CVE-2026-92950: CVE-2026-92950: Sandbox Escape Vulnerability in vm2 CLI

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92948: CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test
cverports profile

CVE-2026-92948: CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-92952: CVE-2026-92952: Sandbox Escape and State Corruption in vm2 via Node.js-internal Symbol Leak
cverports profile

CVE-2026-92952: CVE-2026-92952: Sandbox Escape and State Corruption in vm2 via Node.js-internal Symbol Leak

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73607: CVE-2026-73607: Missing Authorization in SiYuan /api/storage/getOutlineStorage Leads to Information Disclosure
cverports profile

CVE-2026-73607: CVE-2026-73607: Missing Authorization in SiYuan /api/storage/getOutlineStorage Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73609: CVE-2026-73609: Missing Authorization in SiYuan Note getBookmarkLabels Endpoint
cverports profile

CVE-2026-73609: CVE-2026-73609: Missing Authorization in SiYuan Note getBookmarkLabels Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76504: CVE-2026-76504: Unauthenticated Authentication Bypass in Cisco Catalyst SD-WAN Manager
cverports profile

CVE-2026-76504: CVE-2026-76504: Unauthenticated Authentication Bypass in Cisco Catalyst SD-WAN Manager

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-73606: CVE-2026-73606: Authorization Bypass and Information Disclosure in SiYuan /api/block/getRefIDs Endpoint
cverports profile

CVE-2026-73606: CVE-2026-73606: Authorization Bypass and Information Disclosure in SiYuan /api/block/getRefIDs Endpoint

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73605: CVE-2026-73605: Path Traversal and File Existence Oracle via getUniqueFilename Endpoint in SiYuan
cverports profile

CVE-2026-73605: CVE-2026-73605: Path Traversal and File Existence Oracle via getUniqueFilename Endpoint in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102990: CVE-2026-102990: Regular Expression Denial of Service in basic-ftp Directory Parsing
cverports profile

CVE-2026-102990: CVE-2026-102990: Regular Expression Denial of Service in basic-ftp Directory Parsing

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102821: CVE-2026-102821: Unbounded Memory Exhaustion via CHANNEL_OPEN Flood in russh
cverports profile

CVE-2026-102821: CVE-2026-102821: Unbounded Memory Exhaustion via CHANNEL_OPEN Flood in russh

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102820: CVE-2026-102820: Out-of-Bounds Read and Excessive Memory Allocation in russh pageant
cverports profile

CVE-2026-102820: CVE-2026-102820: Out-of-Bounds Read and Excessive Memory Allocation in russh pageant

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84428: CVE-2026-84428: Schema Validation Bypass in Fastify Header Normalization
cverports profile

CVE-2026-84428: CVE-2026-84428: Schema Validation Bypass in Fastify Header Normalization

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84469: CVE-2026-84469: Request Validation Bypass in Fastify via Loose Boolean Schema Evaluation
cverports profile

CVE-2026-84469: CVE-2026-84469: Request Validation Bypass in Fastify via Loose Boolean Schema Evaluation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76169: CVE-2026-76169: Authentication Bypass and Encapsulation Violation via Malformed URL Routing Fallback in Fastify
cverports profile

CVE-2026-76169: CVE-2026-76169: Authentication Bypass and Encapsulation Violation via Malformed URL Routing Fallback in Fastify

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84504: CVE-2026-84504: Schema Validation Bypass via Async Validation Result Collision in Fastify
cverports profile

CVE-2026-84504: CVE-2026-84504: Schema Validation Bypass via Async Validation Result Collision in Fastify

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-93981: CVE-2026-93981: Cross-Site Scripting via Unescaped SSR Pathways in Hono JSX Engine
cverports profile

CVE-2026-93981: CVE-2026-93981: Cross-Site Scripting via Unescaped SSR Pathways in Hono JSX Engine

#security #cve #cybersecurity
Comments
2 min read
GHSA-59CR-6R3X-644W: GHSA-59CR-6R3X-644W: GitPython Submodule Update Path Traversal Can Write Outside the Repository
cverports profile

GHSA-59CR-6R3X-644W: GHSA-59CR-6R3X-644W: GitPython Submodule Update Path Traversal Can Write Outside the Repository

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-C2M8-H5V5-343R: GHSA-C2M8-H5V5-343R: Path Traversal via Improper Link Resolution in Tornado StaticFileHandler
cverports profile

GHSA-C2M8-H5V5-343R: GHSA-C2M8-H5V5-343R: Path Traversal via Improper Link Resolution in Tornado StaticFileHandler

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-CHX6-46F5-W4VP: GHSA-CHX6-46F5-W4VP: Uncontrolled Resource Consumption in Tornado CurlAsyncHTTPClient
cverports profile

GHSA-CHX6-46F5-W4VP: GHSA-CHX6-46F5-W4VP: Uncontrolled Resource Consumption in Tornado CurlAsyncHTTPClient

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-3HV7-MJH2-FV65: GHSA-3HV7-MJH2-FV65: Unbounded Query-String Parsing Denial of Service in Tornado Web Server
cverports profile

GHSA-3HV7-MJH2-FV65: GHSA-3HV7-MJH2-FV65: Unbounded Query-String Parsing Denial of Service in Tornado Web Server

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-103001: CVE-2026-103001: State Pollution in PyJWT Option Merging Leads to Claim Verification Bypass
cverports profile

CVE-2026-103001: CVE-2026-103001: State Pollution in PyJWT Option Merging Leads to Claim Verification Bypass

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-92081: CVE-2026-92081: Denial of Service via Uncaught Exception on HTTP/2 Response Trailers in Fastify
cverports profile

CVE-2026-92081: CVE-2026-92081: Denial of Service via Uncaught Exception on HTTP/2 Response Trailers in Fastify

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102938: CVE-2026-102938: Configuration Injection and Local Execution Hijack in virtualenv
cverports profile

CVE-2026-102938: CVE-2026-102938: Configuration Injection and Local Execution Hijack in virtualenv

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-102930: CVE-2026-102930: Remote Code Execution via Unverified Dynamic Wheel Downloads in virtualenv
cverports profile

CVE-2026-102930: CVE-2026-102930: Remote Code Execution via Unverified Dynamic Wheel Downloads in virtualenv

#security #cve #cybersecurity
Comments
2 min read
GHSA-3Q6V-R5MR-HXV8: GHSA-3Q6V-R5MR-HXV8: Algorithmic Complexity Denial of Service in league/commonmark GFM Table Extension
cverports profile

GHSA-3Q6V-R5MR-HXV8: GHSA-3Q6V-R5MR-HXV8: Algorithmic Complexity Denial of Service in league/commonmark GFM Table Extension

#security #cve #cybersecurity #ghsa
Comments
2 min read
loading...