GIT - OSV

CVE-2026-71519

github.com/prestashop/prestashop

PrestaShop Webservice API Broken Access Control via Customer Endpoint 13 hours ago

Fix available
Severity - 8.6 (High)

CVE-2026-71531

github.com/prestashop/prestashop

PrestaShop Webservice API Authorization Bypass via id_shop Parameter 13 hours ago

Fix available
Severity - 8.6 (High)

CVE-2026-128134

github.com/nltk/nltk

NLTK dot2img runs Graphviz 'dot' without the trusted-exec chokepoint, enabling... 13 hours ago

Fix available
Severity - 7.8 (High)

CVE-2026-19194

github.com/hashicorp/cap

CAP JWT claims validation bypass using non-canonical claim names 14 hours ago

Fix available
Severity - 5.9 (Medium)

CVE-2026-128132

github.com/aio-libs/aiohttp

AIOHTTP: WebSocket receive queue limits bypassed by small or compressed... 15 hours ago

Fix available
Severity - 8.7 (High)

CVE-2026-128131

github.com/aio-libs/aiohttp

AIOHTTP: Concatenated compressed streams cause excessive CPU use 15 hours ago

Fix available
Severity - 8.7 (High)

CVE-2026-128130

github.com/aio-libs/aiohttp

AIOHTTP: Pure-Python parser request replay and buffer growth behind a declined... 15 hours ago

Fix available
Severity - 8.3 (High)

CVE-2026-128129

github.com/aio-libs/aiohttp

AIOHTTP: Unbounded buffering of data received during an upgrade request 15 hours ago

Fix available
Severity - 8.2 (High)

CVE-2026-128128

github.com/aio-libs/aiohttp

AIOHTTP: WebSocket max_msg_size bypass via integer overflow 15 hours ago

Fix available
Severity - 7.5 (High)

CVE-2026-128127

github.com/aio-libs/aiohttp

AIOHTTP: Base64 multipart parts bypass client_max_size 15 hours ago

Fix available
Severity - 8.7 (High)

CVE-2026-128126

github.com/aio-libs/aiohttp

AIOHTTP: Too many URL-encoded form fields block the event loop 15 hours ago

Fix available
Severity - 8.7 (High)

CVE-2026-89037

github.com/dolibarr/dolibarr

Dolibarr < 24.0.2 IDOR via Ticket Documents API 15 hours ago

Fix available
Severity - 7.1 (High)

CVE-2026-128125

github.com/aio-libs/aiohttp

AIOHTTP: Unbounded cookie storage in client CookieJar 15 hours ago

Fix available
Severity - 6.3 (Medium)

CVE-2026-128124

github.com/aio-libs/aiohttp

AIOHTTP: Event loop stall in add_domain() wildcard matching 15 hours ago

Fix available
Severity - 8.2 (High)

CVE-2026-128123

github.com/sveltejs/kit

SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via... 16 hours ago

Fix available
Severity - 5.9 (Medium)

CVE-2026-128122

github.com/sveltejs/kit

SvelteKit: Prerendered redirect paths can inject arbitrary rules into the... 16 hours ago

Fix available
Severity - 5.9 (Medium)

Vulnerabilities