CWE-284 (2634) CWE-79 (1821) CWE-416 (1297) CWE-862 (1175) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (470) CWE-770 (440) CWE-287 (432) CWE-121 (407) CWE-77 (373) CWE-190 (368) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-91

8 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-55789 high 8.5 0.0034 2026-07-10 Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's
CVE-2026-32870 medium 6.9 0.0035 2026-04-24 Kirby is an open-source content management system. Kirby's `Xml::value()` method has special handlin
CVE-2026-47273 medium 6.5 0.0027 2026-05-27 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, p
CVE-2026-41650 medium 6.1 0.0024 2026-05-07 fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callback
CVE-2026-44664 medium 6.1 0.0019 2026-05-13 fast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-parser sanit
CVE-2026-44665 medium 6.1 0.0024 2026-05-13 fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute va
CVE-2026-53723 medium 5.8 0.0022 2026-06-11 Guzzle Services provides an implementation of the Guzzle Command library that uses Guzzle service de
CVE-2026-59728 medium 4.3 0.0032 2026-07-27 Astro is a web framework for content-driven websites. In versions 1.0.0 through 4.0.18, the source.t