Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119186 GHSA-5cwg-6vw7-rj6p - Forge: AES-GCM authentication bypass via unvalidated tagLength option MEDIUM 5.9 node-forge node-forge Unknown 2 sources Details
CVE-2026-118782 GHSA-jc66-7q78-782g - Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count HIGH 7.5 node-forge node-forge Unknown 2 sources Details
CVE-2026-119190 GHSA-5x38-2vff-x55p - Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 HIGH 7.4 node-forge node-forge Unknown 2 sources Details
CVE-2026-119193 GHSA-9vw2-f4vp-x7gf - PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling MEDIUM - phpunit phpunit/phpunit Unknown 2 sources Details
CVE-2026-119201 GHSA-3xf4-9g3c-4h4w - Nuxt dev server exposes generated appSecret through Vite file serving MEDIUM 4.8 @nuxt @nuxt/vite-builder Unknown 2 sources Details
CVE-2026-119200 GHSA-9v7c-q64q-vv33 - Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes MEDIUM 6.5 nuxt@nuxt nuxt@nuxt/nitro-server Unknown 2 sources Details
CVE-2026-119198 GHSA-x287-wcfc-q46c - Nuxt dev server arbitrary file read through client error reports MEDIUM 5.9 @nuxt @nuxt/vite-builder Unknown 2 sources Details
CVE-2026-119199 GHSA-648h-gw55-m2g7 - Nuxt dev server exposes private runtime config through the Nitro dev bundle MEDIUM 5.9 @nuxt @nuxt/vite-builder Unknown 2 sources Details
CVE-2026-118763 GHSA-j63v-mwhm-56jx - @sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location HIGH 7.4 @sigstore @sigstore/oci Unknown 2 sources Details
CVE-2026-119276 GHSA-h599-m3w5-9m7x - MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets MEDIUM 5.9 org.mariadb.jdbc:mariadb-java-client org.mariadb.jdbc:mariadb-java-client Unknown 2 sources Details
CVE-2026-119279 GHSA-797x-p4mc-jwpm - MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths MEDIUM 5.9 org.mariadb.jdbc:mariadb-java-client org.mariadb.jdbc:mariadb-java-client Unknown 2 sources Details
CVE-2026-119210 GHSA-fhx5-2xqw-2cgm - MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files MEDIUM 5.9 org.mariadb.jdbc:mariadb-java-client org.mariadb.jdbc:mariadb-java-client Unknown 2 sources Details
CVE-2026-119281 GHSA-grfq-r75j-rw9x - MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing MEDIUM 5.9 org.mariadb.jdbc:mariadb-java-client org.mariadb.jdbc:mariadb-java-client Unknown 2 sources Details
CVE-2026-119285 GHSA-g5jq-qmqr-qrwf - Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads MEDIUM 5.9 github github.com/gofiber/fiber/v2 Unknown 2 sources Details
- GHSA-7wpf-ch8f-5f4x - signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher MEDIUM 4.2 signalk-server signalk-server Unknown 1 Details
- GHSA-4xm8-rg9h-jhq2 - Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution CRITICAL 9.8 signalk-server@signalk signalk-server@signalk/resources-provider Unknown 1 Details
- GHSA-hff9-5pqw-6w9f - imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution CRITICAL 9.8 github github.com/imgproxy/imgproxy/v3github.com/imgproxy/imgproxy/v2 Unknown 1 Details
- GHSA-494m-4556-wf5p - imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash HIGH 7.5 github github.com/imgproxy/imgproxy/v3 Unknown 1 Details
- GHSA-mmq5-xm89-9pfg - imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field HIGH 7.5 github github.com/imgproxy/imgproxy/v3 Unknown 1 Details
- GHSA-2wrx-84qj-4pcg - anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS MEDIUM 6.5 github github.com/anacrolix/torrent Unknown 1 Details