Open Source Vulnerabilities
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
eco-dotnet-libssl-1.0-ld-so-conf
electrum
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
electrum
Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
debezium-connector-cassandra-3.7-cassandra-4
knative.dev/pkg
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
knative.dev/pkg
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
knative-eventing-fips-1.24-mtchannel-broker
knative-eventing-fips-1.24-mtchannel-broker
knative-eventing-fips-1.24-mtchannel-broker
knative-eventing-fips-1.24-mtchannel-broker
@waline/vercel
Waline login accepts a non-string email as a match-all MongoDB query
@waline/vercel
Waline login accepts a non-string email as a match-all MongoDB query
seroval
Seroval: Code injection through a typed array's own constructor property
seroval
Seroval: Code injection through a typed array's own constructor property
seroval, seroval
Seroval: Script injection through RegExp sources in serialized output
seroval/ seroval
Seroval: Script injection through RegExp sources in serialized output
seroval
Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)
seroval
Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)
seroval
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
seroval
Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
seroval
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
seroval
Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
mem0ai, mem0ai
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
mem0ai/ mem0ai
Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
js-jquery
CVE-2026-118664 affecting package js-jquery 3.5.0-4
golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo
golang-github-labstack-echo/ golang-github-labstack-echo/ golang-github-labstack-echo
golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo
golang-github-labstack-echo/ golang-github-labstack-echo/ golang-github-labstack-echo
golang-github-labstack-echo, golang-github-labstack-echo, golang-github-labstack-echo
golang-github-labstack-echo/ golang-github-labstack-echo/ golang-github-labstack-echo
social-auth-core
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
social-auth-core
Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim
onnx
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank
onnx
ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank
onnx
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs
onnx
ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs
