HIGH7.8CVE-2026-45490.NET SDK Elevation of Privilege Vulnerability
MEDIUM6.1CVE-2026-54386marimo contains a reflected cross-site scripting vulnerability in the notebook page
MEDIUM5.3joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.
MEDIUM5.9Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00,…
HIGH7.5Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a l…
HIGH7.4undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
MEDIUM5.9undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
HIGH7.5Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's orig…
MEDIUM5.8Shaarli is a personal bookmarking service.
HIGH8.2Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthent…
MEDIUM5.9libssh2 through 1.11.1, fixed in commit 1762685, contains a pre-authentication denial of service vulnerability in the SSH_MSG_EXT_INFO hand…
CRITICAL9.1Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing value…
CRITICAL9.1Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, fo…
MEDIUM4.8Shaarli is a personal bookmarking service.
MEDIUM5.8Shaarli is a personal bookmarking service.
MEDIUM6.0OpenStack Horizon RC file generation does not escape special characters in project names
CRITICAL9.6Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation
MEDIUM4.3Deno: Denial of service via non-ASCII bytes in WebSocket response headers