Latest vulnerabilities for "ibm api connect"

Where

Sort:

IBM API Connect V12 OnPremIBM API Connect Default Credentials

Risk 86

Severity

9.8

First published (updated )

CVE-2026-3144

IBM API Connect28 vulnerabilities

First published (updated )

Advisory

IBM-7278218

IBM API Connect SQL Injection

Risk 61

Severity

9.8

EPSS

0.28%

First published (updated )

CVE-2026-9074

AIOHTTP vulnerable to cross-origin redirect with per-request cookies

Risk 43

Severity

6.6

First published (updated )

CVE-2026-47265

React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets

Risk 58

Severity

First published (updated )

CVE-2026-33245

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

Risk 34

Severity

5.4

First published (updated )

CVE-2026-33244

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Risk 64

Severity

8.7

First published (updated )

CVE-2026-44494

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

Risk 49

Severity

8.6

First published (updated )

CVE-2026-44492

Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions

Risk 54

Severity

8.2

First published (updated )

CVE-2026-44490

Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix

Risk 27

Severity

5.3

First published (updated )

CVE-2026-44489

yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

Risk 75

Severity

8.6

First published (updated )

CVE-2026-42089

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Risk 32

Severity

6.3

EPSS

0.06%

First published (updated )

CVE-2026-7210

xfrm: esp: avoid in-place decrypt on shared skb frags

Risk 95

Severity

8.8

Exploited

Trending

Year

First published (updated )

CVE-2026-43284

ip-address: XSS in Address6 HTML-emitting methods

Risk 59

Severity

5.3

First published (updated )

CVE-2026-42338

Libxml2: libxml2: denial of service via crafted xsd-validated document

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-6732

musl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity

Risk 17

Severity

4.8

EPSS

0.01%

First published (updated )

CVE-2026-6042

An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur d…

Risk 69

Severity

8.1

First published (updated )

CVE-2026-40200

Heap Buffer Overflow in Hexadecimal Conversion

Risk 91

Severity

9.8

First published (updated )

CVE-2026-31789

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

Risk 46

Severity

7.5

First published (updated )

CVE-2026-28389

NULL Pointer Dereference When Processing a Delta CRL

Risk 46

Severity

7.5

First published (updated )

CVE-2026-28388

Potential Use-after-free in DANE Client Code

Risk 80

Severity

8.1

First published (updated )

CVE-2026-28387

Path traversal issue with zip.vim in Vim

Risk 51

Severity

7.1

First published (updated )

CVE-2026-35177

XZ Utils: Buffer overflow in lzma_index_append()

Risk 29

Severity

1.7

First published (updated )

CVE-2026-34743

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

Risk 47

Severity

7.5

First published (updated )

CVE-2026-30922

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Risk 43

Severity

6.5

First published (updated )

CVE-2026-2673

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

Risk 31

Severity

7.5

EPSS

0.01%

First published (updated )

CVE-2026-32597

use after free in SMB connection reuse

Risk 32

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2026-3805

wrong proxy connection reuse with credentials

Risk 29

Severity

6.5

EPSS

0.01%

First published (updated )

CVE-2026-3784

token leak with redirect and netrc

Risk 20

Severity

5.3

EPSS

0.02%

First published (updated )

CVE-2026-3783

Quadratic parsing complexity in golang.org/x/net/html

Risk 27

Severity

5.3

First published (updated )

CVE-2025-47911

Trending

Versions

IBM API Connect V12 OnPremIBM API Connect Default Credentials

IBM API Connect28 vulnerabilities

IBM API Connect SQL Injection

AIOHTTP vulnerable to cross-origin redirect with per-request cookies

React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets

React Router has stored XSS via unescaped Location header in prerendered redirect HTML

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions

Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix

yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

xfrm: esp: avoid in-place decrypt on shared skb frags

ip-address: XSS in Address6 HTML-emitting methods

Libxml2: libxml2: denial of service via crafted xsd-validated document

musl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity

An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur d…

Heap Buffer Overflow in Hexadecimal Conversion

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

NULL Pointer Dereference When Processing a Delta CRL

Potential Use-after-free in DANE Client Code

Path traversal issue with zip.vim in Vim

XZ Utils: Buffer overflow in lzma_index_append()

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

OpenSSL TLS 1.3 server may choose unexpected key agreement group

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

use after free in SMB connection reuse

wrong proxy connection reuse with credentials

token leak with redirect and netrc

Quadratic parsing complexity in golang.org/x/net/html

Company

Resources

Contact