Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xwr8-qcf8-4867 |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the fu… | 2026-10-21T03:32:29Z | 2026-10-21T03:32:29Z |
| ghsa-pq4f-mjh8-pjp9 |
8.8 (3.1)
|
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in a… | 2026-10-21T03:32:29Z | 2026-10-21T03:32:29Z |
| ghsa-5w5f-rphr-2j3g |
10.0 (3.1)
9.3 (4.0)
|
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the f… | 2026-10-21T03:32:29Z | 2026-10-21T03:32:29Z |
| ghsa-xvvp-6q7c-mxwj |
5.9 (3.1)
8.2 (4.0)
|
Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(m… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-vmfm-6f34-53x7 |
8.7 (4.0)
|
Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary co… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-vchg-h45q-h36m |
5.3 (3.1)
6.0 (4.0)
|
Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-p4mc-qjvf-mf2m |
4.8 (3.1)
6.3 (4.0)
|
Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint2… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-hmqc-m6cv-3c9r |
9.8 (3.1)
9.3 (4.0)
|
Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administ… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-fccw-crcx-53fr |
3.7 (3.1)
6.3 (4.0)
|
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that re… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-99jr-jxwf-6chm |
8.7 (4.0)
|
Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary co… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-7vv3-w8cj-2245 |
8.4 (4.0)
|
Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-333… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:28Z |
| ghsa-2gvm-cwr3-3pcg |
5.3 (3.1)
6.0 (4.0)
|
Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.split… | 2026-10-21T03:32:28Z | 2026-10-21T03:32:28Z |
| ghsa-m8vc-5xpp-qpqf |
8.8 (3.1)
8.7 (4.0)
|
uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write fil… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:27Z |
| ghsa-m3wx-qqmx-qxvf |
5.3 (3.1)
8.7 (4.0)
|
Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arb… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:27Z |
| ghsa-j56w-ppx9-7qff |
8.9 (4.0)
|
sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-20… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:27Z |
| ghsa-gqw3-74gm-648q |
8.9 (4.0)
|
Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possib… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:27Z |
| ghsa-6gpw-8ggq-h6c8 |
9.8 (3.1)
9.3 (4.0)
|
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that all… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:27Z |
| ghsa-66r3-5f65-g64j |
8.8 (3.1)
8.7 (4.0)
|
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that… | 2026-10-21T03:32:27Z | 2026-10-21T03:32:27Z |
| ghsa-x5pg-q574-6h2m |
5.3 (3.1)
6.9 (4.0)
|
adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the ma… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-vmwg-gmpq-826x |
5.8 (3.1)
6.9 (4.0)
|
Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-s… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-r78r-wr5r-rqfm |
6.5 (3.1)
7.1 (4.0)
|
Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows … | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-mw9m-763w-f8m9 |
7.8 (3.1)
7.3 (4.0)
|
Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that all… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-mr8q-rv22-x3fr |
5.9 (3.1)
8.2 (4.0)
|
adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows attackers … | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-f9g8-qp78-x5c2 |
7.5 (3.1)
8.7 (4.0)
|
adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attacke… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-c5xj-9gp4-c84p |
7.5 (3.1)
8.7 (4.0)
|
HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remo… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-8wh8-hpg9-jvx8 |
7.8 (3.1)
7.3 (4.0)
|
Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(p… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-7xj5-pmcw-rwmp |
4.0 (3.1)
6.3 (4.0)
|
Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silent… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-5mgq-mp28-q7x2 |
6.2 (3.1)
6.9 (4.0)
|
Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attacker… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-5846-6v99-476c |
5.8 (3.1)
6.9 (4.0)
|
Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body proce… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |
| ghsa-4hjw-xcwg-8xfj |
7.8 (3.1)
7.3 (4.0)
|
Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_ind… | 2026-10-21T03:32:26Z | 2026-10-21T03:32:26Z |