Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Versions

all
64

Apache CXFApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)

Risk 76
Severity
7.5
First published (updated )
CVE-2026-44417

Symfony TwigTwig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface

Risk 82
Severity
8.7
First published (updated )
CVE-2026-24425

maven/io.opentelemetry:opentelemetry-extension-trace-propagatorsopentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

Risk 43
Severity
7.5
First published (updated )
CVE-2026-45292

npm/protobufjsprotobufjs: Denial of Service via unbounded recursive JSON descriptor expansion

Risk 43
Severity
7.5
First published (updated )
CVE-2026-45740

Apache TomcatApache Tomcat: LockOutRealm treats user names as case-sensitive

Risk 46
Severity
7.5
First published (updated )
CVE-2026-43513
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: WebSocket authentication header exposure

Risk 55
Severity
7.3
First published (updated )
CVE-2026-42498

Apache TomcatApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Risk 46
Severity
7.5
First published (updated )
CVE-2026-41284

npm/@opentelemetry/auto-instrumentations-nodeopentelemetry-js: Prometheus exporter process crash via malformed HTTP request

Risk 43
Severity
7.5
First published (updated )
CVE-2026-44902

npm/i18next-fs-backendi18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite

Risk 54
Severity
8.2
First published (updated )
CVE-2026-41693

maven/io.netty:netty-transport-native-epollNetty: epoll transport denial of service via RST on half-closed TCP connection

Risk 43
Severity
7.5
First published (updated )
CVE-2026-42577
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

pip/GitPythonGitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

Risk 69
Severity
7.8
First published (updated )
CVE-2026-44244

pip/python-multipartPython-Multipart: Denial of Service via unbounded multipart part headers

Risk 43
Severity
7.5
First published (updated )
CVE-2026-42561

pip/MakoMako: Path traversal via backslash URI on Windows in TemplateLookup

Risk 47
Severity
8.7
First published (updated )
CVE-2026-44307

pip/notebookjupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content

Risk 80
Severity
8.6
First published (updated )
CVE-2026-42557

pip/GitPythonGitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository

Risk 62
Severity
7.8
First published (updated )
CVE-2026-44243
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

npm/basic-ftpbasic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

Risk 43
Severity
7.5
First published (updated )
CVE-2026-44240

pip/mistuneMistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles

Risk 47
Severity
8.7
First published (updated )
CVE-2026-33079

pip/jupyterlabJupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.

Risk 79
Severity
8.8
First published (updated )
CVE-2026-42266

npm/@jupyterlab/help-extensionJupyter Notebook and JupyterLab token theft via stored XSS in help command linker

Risk 70
Severity
8.4
First published (updated )
CVE-2026-40171

VMware Spring BootWeak RNG

Risk 54
Severity
8.2
First published (updated )
CVE-2026-40975
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring BootA local attacker on the same host as the application may be able to take control of the directory us…

Risk 63
Severity
7
First published (updated )
CVE-2026-40973

go/github.com/Azure/go-ntlmsspgo-ntlmssp NTLM challenges can panic on malformed payloads

Risk 43
Severity
7.5
First published (updated )
CVE-2026-32952

pip/lxmllxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41066

Oracle JRELast updated 2 June 2026

Risk 43
Severity
7.5
First published (updated )
CVE-2026-34282

Apache TomcatApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34487
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache TomcatApache Tomcat: Incomplete escaping of JSON access logs

Risk 46
Severity
7.5
First published (updated )
CVE-2026-34483

Apache TomcatApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

Risk 46
Severity
7.5
First published (updated )
CVE-2026-29146

Apache TomcatApache Tomcat: Request smuggling via invalid chunk extension

Risk 46
Severity
7.5
First published (updated )
CVE-2026-24880

maven/org.eclipse.jetty.ee10:jetty-ee10In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two Th…

Risk 41
Severity
7.4
EPSS
0.02%
First published (updated )
CVE-2026-5795

Microsoft azl3 vim 9.2.0240-1Vim modeline bypass via various options affects Vim < 9.2.0276

Risk 62
Severity
8.2
First published (updated )
CVE-2026-34982
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203