Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-71538 | not reported | — | No | @cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path i... | 2026-09-30 |
| CVE-2026-63225 | medium | 4.4 | No | Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command construct... | 2026-09-30 |
| CVE-2026-85756 | high | 7.5 | No | SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to... | 2026-09-30 |
| CVE-2026-68904 | high | 7.0 | No | node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.0.0 until 2.170.0, node-opcua clients using the default keepSessio... | 2026-09-30 |
| CVE-2026-61544 | not reported | — | No | libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an... | 2026-09-30 |
| CVE-2026-63443 | high | 8.3 | No | Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4, agentC... | 2026-09-30 |
| CVE-2026-61549 | not reported | — | No | Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backend/kubernetes/backend_options.go defines backend_options.kubernetes.ser... | 2026-09-30 |
| CVE-2026-54559 | not reported | — | No | PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngram_model_trie.c do not adequately va... | 2026-09-30 |
| CVE-2026-47773 | not reported | — | No | ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in th... | 2026-09-30 |
| CVE-2026-100841 | high | 7.8 | No | In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing... | 2026-09-30 |
| CVE-2026-100842 | high | 8.8 | No | MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates... | 2026-09-30 |
| CVE-2026-54546 | medium | 5.0 | No | CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated... | 2026-09-30 |
| CVE-2026-44235 | medium | 6.5 | No | rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHO... | 2026-09-30 |
| CVE-2026-85721 | high | 7.5 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2... | 2026-09-30 |
| CVE-2026-85718 | medium | 5.9 | No | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3... | 2026-09-30 |
| CVE-2026-79752 | not reported | — | No | CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder... | 2026-09-30 |
| CVE-2026-81872 | not reported | — | No | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor... | 2026-09-30 |
| CVE-2026-81869 | not reported | — | No | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation pat... | 2026-09-30 |
| CVE-2026-62949 | medium | 6.5 | No | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyn... | 2026-09-30 |
| CVE-2026-81876 | high | 7.5 | No | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser... | 2026-09-30 |