DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-12411: CVE-2026-12411: Cross-Guest Volume Hijack via DevLXD Device PATCH in Canonical LXD

CVE-2026-12411: CVE-2026-12411: Cross-Guest Volume Hijack via DevLXD Device PATCH in Canonical LXD

Comments
4 min read
CVE-2026-105769: CVE-2026-105769: Azure Entra ID Token Exfiltration in Kaniko via Unanchored ACR Hostname Regex

CVE-2026-105769: CVE-2026-105769: Azure Entra ID Token Exfiltration in Kaniko via Unanchored ACR Hostname Regex

Comments
4 min read
CVE-2026-62300: CVE-2026-62300: Uncontrolled Resource Consumption in filecoin-pin Daemon

CVE-2026-62300: CVE-2026-62300: Uncontrolled Resource Consumption in filecoin-pin Daemon

Comments
5 min read
CVE-2026-61536: CVE-2026-61536: Remote Code Execution via Unsafe Reflection in masci/banks CompletionExtension

CVE-2026-61536: CVE-2026-61536: Remote Code Execution via Unsafe Reflection in masci/banks CompletionExtension

Comments
4 min read
CVE-2026-58868: A HEIF Grid Mismatch in Android's Media Decoder

CVE-2026-58868: A HEIF Grid Mismatch in Android's Media Decoder

Comments
5 min read
CVE-2026-93363: CVE-2026-93363: Improper Access Control in Payload CMS Storage Upload Route

CVE-2026-93363: CVE-2026-93363: Improper Access Control in Payload CMS Storage Upload Route

1
Comments
3 min read
GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc

GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc

Comments
3 min read
CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads

CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads

Comments 1
4 min read
CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak

CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak

Comments
4 min read
GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder

GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder

Comments
4 min read
CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer

CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer

Comments
4 min read
CVE-2026-44265: CVE-2026-44265: Code and SQL Injection via Programmatic AST Emission in @enspirit/elo

CVE-2026-44265: CVE-2026-44265: Code and SQL Injection via Programmatic AST Emission in @enspirit/elo

Comments
2 min read
CVE-2026-44266: CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation

CVE-2026-44266: CVE-2026-44266: Remote Code Execution in @enspirit/elo Ruby Compiler Backend via Unescaped String Interpolation

1
Comments
4 min read
CVE-2026-44267: CVE-2026-44267: Sandbox Escape and Arbitrary Code Execution in Elo Expression Language

CVE-2026-44267: CVE-2026-44267: Sandbox Escape and Arbitrary Code Execution in Elo Expression Language

1
Comments
3 min read
CVE-2026-62374: CVE-2026-62374: Silent Claim-Set Reduction and Verification Bypass in SD JWT JS

CVE-2026-62374: CVE-2026-62374: Silent Claim-Set Reduction and Verification Bypass in SD JWT JS

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.