Browse All CVEs
33,299 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-55423 |
medium | 6.1 | 0.0022 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-55446 |
high | 7.5 | 0.0058 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-55447 |
critical | 9.6 | 0.0066 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-55450 |
critical | 9.3 | 0.0119 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-56113 |
medium | 6.0 | 0.0027 | 2026-10-29 | dhcpcd through 10.3.2, fixed in commit 5733d3c, contains a heap use-after-free vulnerabili | |
CVE-2026-56114 |
medium | 6.0 | 0.0027 | 2026-10-29 | dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds wr | |
CVE-2026-56115 |
high | 8.7 | 0.0045 | 2026-10-29 | Bootimus through 0.1.70 contains a broken access control vulnerability that allows authent | |
CVE-2026-56116 |
high | 7.1 | 0.0029 | 2026-10-29 | dhcpcd through 10.3.2, fixed in commit 708b4a5, contains a memory leak vulnerability in th | |
CVE-2026-56117 |
medium | 5.7 | 0.0014 | 2026-10-29 | dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerabili | |
CVE-2026-56968 |
medium | 5.3 | 0.0041 | 2026-10-29 | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step i | |
CVE-2026-0864 |
medium | 4.1 | 0.0013 | 2026-10-29 | When using the "configparser" module to write configuration files containing multi-line te | |
CVE-2026-44726 |
critical | 9.1 | 0.0023 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.0.0 until 2.7.8, a flaw | |
CVE-2026-45135 |
high | 8.1 | 0.0068 | 2026-10-29 | Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, | |
CVE-2026-45692 |
low | 3.8 | 0.0024 | 2026-10-29 | Caddy is an extensible server platform that uses TLS by default. From 2.4.0 until 2.11.3, | |
CVE-2026-49401 |
high | 8.4 | 0.0020 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permiss | |
CVE-2026-49402 |
high | 8.1 | 0.0044 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:ch | |
CVE-2026-49406 |
medium | 5.5 | 0.0018 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.12, when Deno was | |
CVE-2026-49411 |
medium | 6.5 | 0.0016 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.0, the Node.js com | |
CVE-2026-49440 |
high | 7.4 | 0.0024 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, node:crypto.che | |
CVE-2026-49859 |
medium | 5.2 | 0.0014 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when fetch() wa | |
CVE-2026-49860 |
medium | 5.2 | 0.0014 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocke | |
CVE-2026-49983 |
medium | 5.2 | 0.0014 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, environment acc | |
CVE-2026-50221 |
medium | 5.3 | 0.0022 | 2026-10-29 | In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-C | |
CVE-2026-52844 |
high | 7.5 | 0.0062 | 2026-10-29 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windo | |
CVE-2026-52845 |
— | — | 0.0044 | 2026-10-29 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_ | |
CVE-2026-53662 |
critical | 9.6 | 0.0030 | 2026-10-29 | immich is a high performance self-hosted photo and video management solution. From commit | |
CVE-2026-54316 |
medium | 6.0 | 0.0052 | 2026-10-29 | Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname hu | |
CVE-2026-54317 |
high | 7.6 | 0.0031 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-54318 |
high | 7.1 | 0.0017 | 2026-10-29 | Home Assistant is open source home automation software that puts local control and privacy | |
CVE-2026-54323 |
medium | 5.9 | 0.0019 | 2026-10-29 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and | |
CVE-2026-54324 |
medium | 6.5 | 0.0046 | 2026-10-29 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and | |
CVE-2026-55517 |
medium | 4.3 | 0.0032 | 2026-10-29 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.5, a Deno program | |
CVE-2026-57053 |
low | 2.5 | 0.0014 | 2026-10-29 | GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUn | |
CVE-2026-53753 |
critical | 10.0 | 0.0290 | 2026-10-29 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_e | |
CVE-2026-53754 |
high | 7.5 | 0.0043 | 2026-10-29 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker | |
CVE-2026-53755 |
high | 7.5 | 0.0158 | 2026-10-29 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker | |
CVE-2026-54319 |
medium | 4.2 | 0.0024 | 2026-10-29 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and | |
CVE-2026-54320 |
high | 8.4 | 0.0035 | 2026-10-29 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and | |
CVE-2026-54321 |
high | 7.0 | 0.0040 | 2026-10-29 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and | |
CVE-2026-54322 |
high | 7.7 | 0.0030 | 2026-10-29 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and | |
CVE-2026-55249 |
high | 8.8 | 0.0055 | 2026-10-29 | @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec too | |
CVE-2026-55736 |
medium | 5.9 | 0.0022 | 2026-10-29 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-39253 |
high | 8.1 | 0.0072 | 2026-10-29 | An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via | |
CVE-2026-45792 |
medium | 6.9 | 0.0011 | 2026-10-29 | rtk filters and compresses command outputs before they reach your LLM context. Prior to 0. | |
CVE-2026-54325 |
medium | 4.4 | 0.0016 | 2026-10-29 | Pi is a minimal terminal coding harness. Pi before 0.79.0 loaded project-local configurati | |
CVE-2026-54326 |
low | 2.5 | 0.0017 | 2026-10-29 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi HTML exports render | |
CVE-2026-54327 |
low | 2.2 | 0.0009 | 2026-10-29 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and | |
CVE-2026-54328 |
high | 7.3 | 0.0016 | 2026-10-29 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with tempor | |
CVE-2026-54555 |
high | 7.8 | 0.0020 | 2026-10-29 | rtk filters and compresses command outputs before they reach your LLM context. Prior to 0. | |
CVE-2026-12112 |
— | — | 0.0022 | 2026-10-29 | A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP |