Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-53613 | high | 7.0 | No | util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the lega... | 2026-10-16 |
| CVE-2026-53612 | high | 7.0 | No | util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's... | 2026-10-16 |
| CVE-2026-101895 | not reported | — | No | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to... | 2026-10-16 |
| CVE-2026-108383 | high | 8.8 | No | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avr... | 2026-10-16 |
| CVE-2026-108382 | high | 8.8 | No | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avr... | 2026-10-16 |
| CVE-2026-108378 | high | 8.8 | No | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avr... | 2026-10-16 |
| CVE-2026-108377 | high | 8.8 | No | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avr... | 2026-10-16 |
| CVE-2026-108375 | high | 8.8 | No | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avr... | 2026-10-16 |
| CVE-2026-94603 | critical | 10.0 | No | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.a... | 2026-10-16 |
| CVE-2026-77459 | critical | 9.9 | No | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD cr... | 2026-10-16 |
| CVE-2026-61642 | high | 7.7 | No | Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulner... | 2026-10-16 |
| CVE-2026-104250 | medium | 6.1 | No | The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Wor... | 2026-10-16 |
| CVE-2026-102989 | critical | 9.3 | No | TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39... | 2026-10-16 |
| CVE-2026-81507 | medium | 6.5 | No | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid... | 2026-10-16 |
| CVE-2026-103928 | not reported | — | No | Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native quer... | 2026-10-16 |
| CVE-2026-102832 | medium | 4.2 | No | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 u... | 2026-10-16 |
| CVE-2026-101899 | not reported | — | No | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NO_PROXY CIDR... | 2026-10-16 |
| CVE-2026-4869 | not reported | — | No | A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup w... | 2026-10-16 |
| CVE-2026-102603 | not reported | — | No | Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint... | 2026-10-16 |
| CVE-2026-77362 | medium | 4.3 | No | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently a... | 2026-10-16 |