Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106443 | high | 8.8 | No | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image... | 2026-10-06 |
| CVE-2026-106439 | not reported | — | No | Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate... | 2026-10-06 |
| CVE-2026-106119 | not reported | — | No | LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented st... | 2026-10-06 |
| CVE-2026-106118 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDeco... | 2026-10-06 |
| CVE-2026-106109 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively r... | 2026-10-06 |
| CVE-2026-106107 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG r... | 2026-10-06 |
| CVE-2026-106103 | high | 7.1 | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie genera... | 2026-10-06 |
| CVE-2026-105485 | medium | 6.8 | No | Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a u... | 2026-10-06 |
| CVE-2026-106040 | high | 8.2 | No | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any... | 2026-10-06 |
| CVE-2026-105842 | medium | 6.4 | No | lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when copying overlong sen... | 2026-10-06 |
| CVE-2026-105837 | high | 7.8 | No | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer... | 2026-10-06 |
| CVE-2026-95153 | medium | 4.9 | No | An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-dr... | 2026-10-06 |
| CVE-2026-56936 | medium | 6.8 | No | In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physi... | 2026-10-06 |
| CVE-2026-55307 | medium | 4.4 | No | In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to l... | 2026-10-06 |
| CVE-2026-0198 | medium | 4.4 | No | In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information... | 2026-10-06 |
| CVE-2026-106106 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/ap... | 2026-10-06 |
| CVE-2026-106105 | not reported | — | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.... | 2026-10-06 |
| CVE-2026-106102 | critical | 10.0 | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in... | 2026-10-06 |
| CVE-2026-106101 | low | 3.1 | No | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL() utility in ui/src/utils... | 2026-10-06 |
| CVE-2026-104850 | high | 7.5 | No | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to ve... | 2026-10-06 |