Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-118261 - Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in Decompress middleware exposes a gzip-decoded reque
Source ↗
CVE-2026-118261 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
INFORMATIONAL
CVE-2026-118260 - Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies
Source ↗
CVE-2026-118260 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
MEDIUM
CVE-2026-106484 - Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker
Source ↗
CVE-2026-106484 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
googlelinux
MEDIUM
CVE-2026-114690 - gcc: Confirmed out-of-bounds read/write in libstdc++ parallel `std
Source ↗
CVE-2026-114690 ·
Red Hat - CVE Feed · published 2026-10-28T19:11
· correlated from 2 sources
Red Hat
LOW
CVE-2026-118681 - github.com/go-chi/chi: chi: Authentication bypass via SuppressNotFound middleware
Source ↗
CVE-2026-118681 ·
Red Hat - CVE Feed · published 2026-10-28T18:59
· correlated from 2 sources
Red Hat
MEDIUM
CVE-2026-58458 - Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native
Source ↗
CVE-2026-58458 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-118248 - Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode wal
Source ↗
CVE-2026-118248 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-117501 - HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.
Source ↗
CVE-2026-117501 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-117500 - HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart u
Source ↗
CVE-2026-117500 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116531 - HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends in
Source ↗
CVE-2026-116531 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116285 - HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked r
Source ↗
CVE-2026-116285 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116135 - HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decod
Source ↗
CVE-2026-116135 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116134 - HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block.
The m
Source ↗
CVE-2026-116134 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116133 - HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a mis
Source ↗
CVE-2026-116133 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116132 - HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk.
The mul
Source ↗
CVE-2026-116132 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
INFORMATIONAL
CVE-2026-116131 - HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form f
Source ↗
CVE-2026-116131 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
MEDIUM
CVE-2026-110183 - PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaini
Source ↗
CVE-2026-110183 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
MEDIUM
CVE-2026-110182 - PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These f
Source ↗
CVE-2026-110182 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
MEDIUM
CVE-2026-110181 - PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bo
Source ↗
CVE-2026-110181 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17
MEDIUM
CVE-2026-105620 - PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymi
Source ↗
CVE-2026-105620 ·
NIST NVD - National Vulnerability Database · published 2026-10-28T18:17