Aggregator

A vulnerability classified as problematic was found in Linux Kernel up to 7.1.4. Affected by this vulnerability is the function nla_put of the component psample. Executing a manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2026-64553. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Livebook-dev Livebook up to 0.18.6/0.19.8. It has been declared as problematic. This impacts the function Livebook.ZTA.LivebookTeams.handle_request of the file lib/livebook/zta/livebook_teams.ex of the component OAuth Callback Handler. The manipulation of the argument code results in cross-site request forgery. This vulnerability is identified as CVE-2026-66885. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MervinPraison PraisonAI up to 1.6.57. It has been classified as critical. This affects the function web_crawl. The manipulation leads to server-side request forgery. This vulnerability is referenced as CVE-2026-55524. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in HCL Digital Experience and Digital Experience Compose 9.5 and classified as problematic. The impacted element is an unknown function of the component Login Portlet. Executing a manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2026-21766. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in TinyAGI 0.0.20 and classified as problematic. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. This vulnerability was named CVE-2026-19011. The attack may be initiated remotely. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability, which was classified as critical, was found in TinyAGI 0.0.20. Impacted is the function processMessage of the file packages/main/src/index.ts of the component Message API Endpoint. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-19010. The attack can be launched remotely. Moreover, an exploit is present. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability, which was classified as critical, has been found in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core/src/response.ts of the component Message API Endpoint. This manipulation causes file inclusion. This vulnerability is handled as CVE-2026-19009. The attack can be initiated remotely. Additionally, an exploit exists. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability classified as critical was found in GitHub Enterprise Server up to 3.17.18/3.18.12/3.19.9/3.20.5/3.21.3. This vulnerability affects unknown code. The manipulation of the argument X-GitHub-Request-Id results in path traversal. This vulnerability is known as CVE-2026-17556. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Spacebar Server. This affects an unknown part of the component Roles Member-Ids Endpoint. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-70618. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability described as problematic has been identified in livebook-dev Livebook up to 0.13.0/0.18.6/0.19.0/0.19.8. Affected by this issue is the function LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_instructions of the file lib/livebook_web/live/hub/teams/deployment_group_agent_component.ex of the component DeploymentGroupAgentComponent. Executing a manipulation can lead to os command injection. This vulnerability appears as CVE-2026-66297. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Spacebar Server. Affected by this vulnerability is an unknown functionality of the component Channels Recipient Endpoint. Performing a manipulation results in missing authorization. This vulnerability is reported as CVE-2026-70617. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

A vulnerability labeled as problematic has been found in boringproxy up to 0.10.0. Affected is an unknown function of the component Handler. Such manipulation of the argument ID leads to resource consumption. This vulnerability is documented as CVE-2026-70616. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in livebook-dev livebook up to 0.18.6/0.19.8. This impacts the function Livebook.LiveMarkdown.Import.file_entry_metadata_to_attrs of the file lib/livebook/live_markdown/import.ex of the component Import. This manipulation of the argument Name causes path traversal. This vulnerability is registered as CVE-2026-66881. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in livebook-dev Livebook up to 0.18.6/0.19.8. This affects an unknown function of the file assets/js/hooks/js_view.js of the component Keyboard Shortcuts. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-66298. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

Submit #862674 / VDB-386404

Submit #862673 / VDB-386403

Submit #862672 / VDB-386402

A vulnerability was found in Amazon DocumentDB MCP Server up to 1.0.11. It has been rated as problematic. The impacted element is an unknown function of the component Aggregation Pipeline. The manipulation leads to improper authorization. This vulnerability is listed as CVE-2026-18954. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Livebook-dev Livebook up to 0.19.7/0.19.8. It has been declared as critical. The affected element is the function Livebook.Hubs.TeamClient.handle_call of the file lib/livebook/hubs/team_client.ex. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2026-68746. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in popt. It has been classified as critical. Impacted is the function singleOptionHelp. Performing a manipulation results in integer underflow. This vulnerability is identified as CVE-2026-18839. The attack can only be performed from the local network. There is not any exploit available.