Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112948 | medium | 6.5 | No | Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.deny because project... | 2026-10-20 |
| CVE-2026-112946 | not reported | — | No | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relat... | 2026-10-20 |
| CVE-2026-111764 | high | 7.5 | No | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration... | 2026-10-20 |
| CVE-2026-112944 | not reported | — | No | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem... | 2026-10-20 |
| CVE-2026-112943 | not reported | — | No | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Window... | 2026-10-20 |
| CVE-2026-111767 | high | 8.6 | No | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32... | 2026-10-20 |
| CVE-2026-113711 | high | 7.5 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, i... | 2026-10-20 |
| CVE-2026-113671 | medium | 4.3 | No | ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with i... | 2026-10-20 |
| CVE-2026-113668 | medium | 5.3 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET /api/v1//:_id/locales (and the equiva... | 2026-10-20 |
| CVE-2026-113666 | high | 7.1 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with... | 2026-10-20 |
| CVE-2026-113662 | medium | 5.4 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with im... | 2026-10-20 |
| CVE-2026-113660 | medium | 4.3 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, ApostropheCMS’s exist-in-locale API allows an authentica... | 2026-10-20 |
| CVE-2026-113657 | low | 3.7 | No | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From... | 2026-10-20 |
| CVE-2026-113655 | medium | 4.3 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated editor with legitimate edit rights on a... | 2026-10-20 |
| CVE-2026-113653 | not reported | — | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous visitors when a dev... | 2026-10-20 |
| CVE-2026-113651 | low | 3.3 | No | ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attac... | 2026-10-20 |
| CVE-2026-112958 | medium | 5.4 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry... | 2026-10-20 |
| CVE-2026-112956 | medium | 6.5 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation... | 2026-10-20 |
| CVE-2026-112953 | not reported | — | No | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive fi... | 2026-10-20 |
| CVE-2026-112951 | medium | 5.4 | No | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid r... | 2026-10-20 |