Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-50013 | high | 7.5 | No | Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the `AddDiff()` function wri... | 2026-09-30 |
| CVE-2026-45056 | not reported | — | No | matrix-sdk-crypto is a no-network-IO implementation of a state machine that handles end-to-end encryption for Matrix clients. Starting in ve... | 2026-09-30 |
| CVE-2026-54174 | high | 8.3 | No | melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to versi... | 2026-09-30 |
| CVE-2026-54166 | high | 7.1 | No | Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` permission can trigge... | 2026-09-30 |
| CVE-2026-54165 | not reported | — | No | Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross... | 2026-09-30 |
| CVE-2026-48490 | not reported | — | No | ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.... | 2026-09-30 |
| CVE-2026-45057 | medium | 4.9 | No | matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the `matrix-sdk-ui` crate prior... | 2026-09-30 |
| CVE-2026-54135 | high | 7.5 | No | AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a vulnerability in th... | 2026-09-30 |
| CVE-2026-53952 | critical | 9.8 | No | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS... | 2026-09-30 |
| CVE-2026-49463 | medium | 6.5 | No | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and... | 2026-09-30 |
| CVE-2026-49462 | medium | 5.3 | No | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and... | 2026-09-30 |
| CVE-2026-54047 | not reported | — | No | Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior to 1.2.3 have an impr... | 2026-09-30 |
| CVE-2026-71416 | high | 8.8 | No | Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not val... | 2026-09-30 |
| CVE-2026-54054 | medium | 6.5 | No | Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint,... | 2026-09-30 |
| CVE-2026-49836 | not reported | — | No | psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, `SmartObject.save()` writes an embedded s... | 2026-09-30 |
| CVE-2026-88062 | not reported | — | No | OmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /... | 2026-09-30 |
| CVE-2026-47680 | not reported | — | No | The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositori... | 2026-09-30 |
| CVE-2026-53769 | medium | 6.5 | No | Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment uplo... | 2026-09-30 |
| CVE-2026-102281 | high | 7.5 | No | Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply neste... | 2026-09-30 |
| CVE-2026-54160 | high | 8.2 | No | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. P... | 2026-09-30 |