THE OPEN VULNERABILITY FEED

Find your next signal.

Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.

SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED

low2.3

CVE-2026-109823

Host filesystem path disclosure via DNS rebinding

Published advisory

27 Oct

medium5.3

CVE-2026-117510

Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

Published advisory

27 Oct

medium5.3

CVE-2026-117509

crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal

Published advisory

27 Oct

high7.5

CVE-2026-104189

3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share

Published advisory

27 Oct

high8.8

CVE-2026-111585

Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

Published advisory

27 Oct

high7.3

CVE-2026-111584

Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows

Published advisory

27 Oct

high7.3

CVE-2026-111583

Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows

Published advisory

27 Oct

high7.3

CVE-2026-111582

Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows

Published advisory

27 Oct

high7.8

CVE-2026-92377

Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Published advisory

27 Oct

high7.8

CVE-2026-92376

Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows

Published advisory

27 Oct

high7.8

CVE-2026-92375

Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring

Published advisory

27 Oct

high7.8

CVE-2026-92374

Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS

Published advisory

27 Oct

high8.8

CVE-2026-92372

Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

Published advisory

27 Oct

medium5.9

GHSA-4ffr-jq9g-5ffxFix available

Nodemailer: Quadratic backtracking in SMTP AUTH mechanism detection regexes allows pre-auth remote denial of service

npm / nodemailer

27 Oct

medium5.3

GHSA-g73g-hqqh-jr95Fix available

Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

npm / nodemailer

27 Oct

medium5.9

GHSA-4g23-2xm8-66gcFix available

Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

npm / nodemailer

27 Oct

critical9.9

GHSA-7hp6-4w63-5g45Fix available

LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

27 Oct

high7.5

GHSA-j586-36cw-2gc2Fix available

MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

27 Oct

medium5.3

CVE-2026-117507

a2aproject a2a-java TaskManager.saveTaskEvent race condition

Published advisory

27 Oct

high8.6

GHSA-j456-xh4h-cpf2Fix available

NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment

27 Oct

critical9.1

GHSA-6v38-4h7w-rj9hFix available

Authlib: empty signatures validation in JWS JSON deserialization

27 Oct

high8.1

GHSA-q84f-53jg-9ppmFix available

better-auth: Device login approval does not show the requesting client or permissions

npm / better-auth

27 Oct

medium5.4

GHSA-22qq-2fwx-7p67Fix available

Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME

27 Oct

medium5.3

GHSA-wx4j-mvgx-mqwpFix available

Satori-generated SVG has improper escaping

27 Oct

high8.6

GHSA-qr6x-7v33-6qmgFix available

Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

27 Oct

low3.1

GHSA-jj36-9pvh-vj5rFix available

Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

27 Oct

medium5.3

CVE-2026-117506

a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

Published advisory

27 Oct

medium6.5

GHSA-qrh6-cwg3-343xFix available

Ghost: Authorization Bypass in Comment Like Feature

27 Oct

medium4.9

GHSA-c8r8-95hg-mp34Fix available

SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

Go / github.com/siyuan-note/siyuan/kernel

27 Oct

medium6.5

GHSA-wqw6-wpr3-45rhFix available

fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

27 Oct