| CVE-2026-77604 | HIGH | 7.5 | Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing … | 2026-11-05 |
| CVE-2026-110802 | MEDIUM | 6.1 | Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.… | 2026-11-05 |
| CVE-2026-111062 | NA | N/A | russh is a Rust SSH client and server library. From version 0.34.0-beta.1 until version 0.64.0, its SSH server… | 2026-11-05 |
| CVE-2026-111753 | NA | N/A | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript… | 2026-11-05 |
| CVE-2026-111771 | MEDIUM | 6.8 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model C… | 2026-11-05 |
| CVE-2026-112899 | NA | N/A | Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scal… | 2026-11-05 |
| CVE-2026-112902 | NA | N/A | Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to… | 2026-11-05 |
| CVE-2026-114134 | NA | N/A | Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with use_pyprojec… | 2026-11-05 |
| CVE-2026-114604 | NA | N/A | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0… | 2026-11-05 |
| CVE-2026-119434 | MEDIUM | 6.2 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in silviucpp ezstd allows an at… | 2026-11-05 |
| CVE-2026-34157 | NA | N/A | Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0,… | 2026-11-05 |
| CVE-2026-46350 | CRITICAL | 9.1 | dcmjs is a JavaScript implementation of DICOM manipulation. Prior to 0.52.0, the DecimalString and IntegerStri… | 2026-11-05 |
| CVE-2026-48705 | CRITICAL | 9.3 | MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. Prior to 1.6.1, PydicomReader._g… | 2026-11-05 |
| CVE-2026-49272 | HIGH | 8.5 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAut… | 2026-11-05 |
| CVE-2026-54442 | MEDIUM | 4.8 | Emissary is a P2P based data-driven workflow engine. Prior to 8.51.0, the VALID_LINK validation in src/main/ja… | 2026-11-05 |
| CVE-2026-55458 | NA | N/A | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalize… | 2026-11-05 |
| CVE-2026-62268 | NA | N/A | borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. Prior to 1.… | 2026-11-05 |
| CVE-2026-69143 | NA | N/A | Rejected reason: This CVE is a duplicate of another CVE.… | 2026-11-05 |
| CVE-2026-77463 | MEDIUM | 6.5 | Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comment… | 2026-11-05 |
| CVE-2026-77622 | NA | N/A | Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts a… | 2026-11-05 |
| CVE-2026-81190 | NA | N/A | KurrentDB is a database engineered for modern software applications and event-driven architectures. In version… | 2026-11-05 |
| CVE-2026-85076 | NA | N/A | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.124, an auth… | 2026-11-05 |
| CVE-2026-87008 | HIGH | 7.1 | Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing … | 2026-11-05 |
| CVE-2026-100395 | NA | N/A | LXC is a userspace interface for the Linux kernel containment features used to create and manage system contai… | 2026-11-05 |
| CVE-2026-111489 | NA | N/A | A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the Match… | 2026-11-05 |
| CVE-2026-111490 | NA | N/A | Insecure direct object reference (IDOR) vulnerability in the MatchPoint API, which relies on the `actingasuser… | 2026-11-05 |
| CVE-2026-111491 | NA | N/A | Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferenc… | 2026-11-05 |
| CVE-2026-111492 | NA | N/A | SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Fi… | 2026-11-05 |
| CVE-2026-111493 | NA | N/A | Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photo… | 2026-11-05 |
| CVE-2026-111494 | NA | N/A | Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any … | 2026-11-05 |
| CVE-2026-111495 | NA | N/A | API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted thr… | 2026-11-05 |
| CVE-2026-111768 | HIGH | 7.5 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model C… | 2026-11-05 |
| CVE-2026-111769 | MEDIUM | 6.5 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model C… | 2026-11-05 |
| CVE-2026-111770 | HIGH | 7.7 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model C… | 2026-11-05 |
| CVE-2026-112907 | LOW | 2.5 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, soft lock classes on Windows… | 2026-11-05 |
| CVE-2026-112908 | MEDIUM | 5.3 | filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftF… | 2026-11-05 |
| CVE-2026-112910 | MEDIUM | 5.3 | filelock is a platform-independent file lock for Python. From 3.10.0 until 4.2.1, filelock on Windows ignores … | 2026-11-05 |
| CVE-2026-112913 | LOW | 3.3 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadW… | 2026-11-05 |
| CVE-2026-112938 | MEDIUM | 5.8 | filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, On POSIX platforms, StrictSo… | 2026-11-05 |
| CVE-2026-119757 | CRITICAL | 9.8 | BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerabili… | 2026-11-05 |
| CVE-2026-122267 | NA | N/A | MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting … | 2026-11-05 |
| CVE-2026-33944 | HIGH | 8.8 | Dolibarr is an open-source enterprise resource planning and customer relationship management application. Prio… | 2026-11-05 |
| CVE-2026-58273 | HIGH | 8.1 | Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credent… | 2026-11-05 |
| CVE-2026-88983 | MEDIUM | 5.0 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-88985 | MEDIUM | 6.5 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-88986 | MEDIUM | 6.1 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2… | 2026-11-05 |
| CVE-2026-102943 | MEDIUM | 6.5 | Dagu is a workflow engine with a built-in Web user interface. Prior to version 2.11.0, its MCP dagu_read ope… | 2026-11-05 |
| CVE-2026-110390 | NA | N/A | Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthe… | 2026-11-05 |
| CVE-2026-113663 | HIGH | 8.8 | AG2 is an open-source AgentOS. From 0.13.2 until ag2 1.1.1, and from autogen 0.13.2 to 0.14.1, SandboxShellToo… | 2026-11-05 |
| CVE-2026-16579 | NA | N/A | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.… | 2026-11-05 |