Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

pypi/aiohttpAIOHTTP vulnerable to cross-origin redirect with per-request cookies

Risk 43
Severity
6.6
First published (updated )
CVE-2026-47265

npm/react-routerReact Router has stored XSS via unescaped Location header in prerendered redirect HTML

Risk 34
Severity
5.4
First published (updated )
CVE-2026-33244

npm/axiosAxios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix

Risk 27
Severity
5.3
First published (updated )
CVE-2026-44489

Python Software Foundation CPythonThe expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Risk 32
Severity
6.3
EPSS
0.06%
First published (updated )
CVE-2026-7210

npm/ip-addressip-address: XSS in Address6 HTML-emitting methods

Risk 59
Severity
5.3
First published (updated )
CVE-2026-42338
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

musl musl libcmusl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity

Risk 17
Severity
4.8
EPSS
0.01%
First published (updated )
CVE-2026-6042

OpenSSL OpenSSLOpenSSL TLS 1.3 server may choose unexpected key agreement group

Risk 43
Severity
6.5
First published (updated )
CVE-2026-2673

redhat/libcurlwrong proxy connection reuse with credentials

Risk 29
Severity
6.5
EPSS
0.01%
First published (updated )
CVE-2026-3784

redhat/curltoken leak with redirect and netrc

Risk 20
Severity
5.3
EPSS
0.02%
First published (updated )
CVE-2026-3783

golang.org/x/net/htmlQuadratic parsing complexity in golang.org/x/net/html

Risk 27
Severity
5.3
First published (updated )
CVE-2025-47911
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/libcurllibssh global known_hosts override

Risk 34
Severity
5.3
First published (updated )
CVE-2025-15079

redhat/libcurlOpenSSL partial chain store policy bypass

Risk 34
Severity
5.3
First published (updated )
CVE-2025-14819

Apple iOSbearer token leak on cross-protocol redirect

Risk 34
Severity
5.3
First published (updated )
CVE-2025-14524

redhat/libcurlbroken TLS options for threaded LDAPS

Risk 50
Severity
6.3
First published (updated )
CVE-2025-14017

libcurlNo QUIC certificate pinning with GnuTLS

Risk 38
Severity
5.9
First published (updated )
CVE-2025-13034
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Kubernetes gitRepo volume[kubernetes] CVE-2025-1767: Gitpo Volume Inadvertent Local pository Access

Risk 53
Severity
6.5
First published (updated )
CVE-2025-1767

IBM API ConnectIBM API Connect HOST header injection

Risk 35
Severity
5.4
First published (updated )
CVE-2021-38997

coredns.io CoreDNSA flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for exte…

Risk 39
Severity
6.1
First published (updated )
CVE-2022-2837

coredns.io CoreDNSA flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some int…

Risk 29
Severity
4.4
First published (updated )
CVE-2022-2835

IBM Guardium Data EncryptionIBM Guardium Data Encryption (GDE) could disclose internal IP address information when the web backe…

Risk 28
Severity
5.3
First published (updated )
CVE-2021-39025
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Guardium Data EncryptionIBM Guardium Data Encryption (GDE) could allow a remote attacker to obtain sensitive information, ca…

Risk 36
Severity
5.9
First published (updated )
CVE-2021-39026

IBM API Connect on cloudXSS

Risk 35
Severity
5.5
First published (updated )
CVE-2020-4706

IBM API ConnectXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2020-4825

IBM API ConnectInput Validation

Risk 41
Severity
6.5
First published (updated )
CVE-2020-4828

IBM API ConnectInfoleak

Risk 28
Severity
4.1
First published (updated )
CVE-2020-4640
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM API ConnectXSS

Risk 35
Severity
5.4
First published (updated )
CVE-2020-4251

IBM API Connect  V5.0.0.0-5.0.8.7IBM API Connect could reveal sensitive information to an attacker using a specially crafted HTTP req…

Risk 27
Severity
5.3
First published (updated )
CVE-2019-4600

IBM API ConnectInfoleak

Risk 27
Severity
5.3
First published (updated )
CVE-2018-2013

IBM API ConnectInput Validation

Risk 34
Severity
5.4
First published (updated )
CVE-2018-1599

IBM 5.0.0.0-5.0.8.3IBM API Connect information disclosure

Risk 36
Severity
5.9
First published (updated )
CVE-2018-1546
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203