Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-54723 | medium | 6.5 | No | devpi is a Python package index staging server and packaging, testing, and release tool. Prior to 6.20.2 and 7.0.0b3, a server configured wi... | 2026-09-30 |
| CVE-2026-54182 | high | 8.1 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-54176 | medium | 6.5 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-54175 | high | 7.6 | No | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build c... | 2026-09-30 |
| CVE-2026-54150 | not reported | — | No | next-video is a library for adding video to Next.js applications. Prior to 2.8.1, the GET endpoint exported by next-video/request-handler an... | 2026-09-30 |
| CVE-2026-54087 | high | 7.6 | No | EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browse... | 2026-09-30 |
| CVE-2026-53659 | high | 7.5 | No | http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.49.0.0, ServerFilters.GZip, RequestFilters.G... | 2026-09-30 |
| CVE-2026-49250 | not reported | — | No | Conform, a type-safe form validation library, allows the parsing of nested objects in the form of object.property. From 1.8.0 until 1.19.4,... | 2026-09-30 |
| CVE-2026-46696 | low | 3.3 | No | October System provides the system module for October Content Management System. Versions prior to 3.7.17 and 4.2.21 have a vulnerability in... | 2026-09-30 |
| CVE-2026-44162 | low | 2.7 | No | fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the in_s3 input plugin reads the entire decompres... | 2026-09-30 |
| CVE-2026-34151 | not reported | — | No | XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double... | 2026-09-30 |
| CVE-2026-57579 | high | 7.5 | No | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthe... | 2026-09-30 |
| CVE-2026-55451 | not reported | — | No | gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next() in lib/js2i18next.js splits ne... | 2026-09-30 |
| CVE-2026-55102 | not reported | — | No | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes fai... | 2026-09-30 |
| CVE-2026-55236 | medium | 5.9 | No | langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorize... | 2026-09-30 |
| CVE-2026-53708 | medium | 6.6 | No | ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or... | 2026-09-30 |
| CVE-2026-57129 | high | 7.5 | No | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, MentionsParser._process_file_mention accepts file-mention values a... | 2026-09-30 |
| CVE-2026-54248 | medium | 6.5 | No | Doco-CD is a GitOps continuous delivery tool that automatically deploys and updates Docker Compose projects/services and Swarm stacks. Prior... | 2026-09-30 |
| CVE-2026-54241 | high | 7.4 | No | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sa... | 2026-09-30 |
| CVE-2026-54240 | high | 7.4 | No | libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate pixel... | 2026-09-30 |