CVE-2026-9537 | JBERGER Mojo::JWT up to 1.1 HMAC Signature Verification decode comparison
A vulnerability has been found in JBERGER Mojo::JWT up to 1.1 and classified as critical. Affected is the function decode
Read MoreVulns
03-03
CVE-2026-16133 | LiuMengxuan04 MiniCode 0.1.0 mcp.ts child_process.spawn command injection (Issue 35)
A vulnerability was found in LiuMengxuan04 MiniCode 0.1.0 and classified as critical. Affected by this vulnerability is the function child_process.spawn
Read MoreCVE-2026-63099 | Hive-Project TheHive up to 4.1.24 Attachment Download Endpoint improper authorization
A vulnerability was found in Hive-Project TheHive up to 4.1.24. It has been classified as problematic. Affected by this issue
Read MoreCVE-2026-63097 | matrix-org dendrite up to 0.13.8 Context Endpoint context.go roomexists access control
A vulnerability was found in matrix-org dendrite up to 0.13.8. It has been declared as problematic. This affects an unknown
Read More
openSUSE Kernel Important Security Fix Advisory 2026-3089-1
An update that solves 29 vulnerabilities can now be installed.LinuxSecurity – Security AdvisoriesRead More
Read MoreCVE-2026-49211 | Symfony UX up to 2.35.x/3.0.x Autocomplete addSearchClause sql injection
A vulnerability was found in Symfony UX up to 2.35.x/3.0.x. It has been rated as critical. This vulnerability affects the
Read MoreCVE-2026-49209 | symfony UX up to 2.35.x/3.0.x LiveComponent __invoke resource consumption
A vulnerability categorized as problematic has been discovered in symfony UX up to 2.35.x/3.0.x. This issue affects the function BatchActionController::__invoke
Read MoreCVE-2026-57860 | tailcallhq ForgeCode 2.11.1 MCP Server Loader .mcp.json loadMcpServers os command injection
A vulnerability identified as critical has been detected in tailcallhq ForgeCode 2.11.1. Impacted is the function loadMcpServers of the file
Read MoreCVE-2026-63101 | fossasia open-event-server up to 1.19.1 Group Followers CSV Export Endpoint missing authentication
A vulnerability labeled as problematic has been found in fossasia open-event-server up to 1.19.1. The affected element is an unknown
Read MoreCVE-2026-49210 | Symfony up to 2.35.x/3.0.x LiveComponent createHtml cross site scripting
A vulnerability marked as problematic has been reported in Symfony up to 2.35.x/3.0.x. The impacted element is the function createHtml
Read More