high7.5
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
149 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
medium5.5
medium5.5
CVE-2026-62254
LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing
LibreDWG · libredwg
medium6.5
CVE-2026-62300
Filecoin Pin: Unbounded DAG pinning can exhaust filecoin-pin server resources
filecoin-project · filecoin-pin
medium5.9
CVE-2026-62303
Pistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)
pistacheio · pistache
high8.2
CVE-2026-61854
VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth
jackh54 · VoiceSentinel
medium6.3
CVE-2026-109821
Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir
elixir-lang · elixir / elixir-lang · elixir
medium6.9
CVE-2026-59396
DoS Vulnerability in UAA Related to JWKS URI Handling
Cloud Foundry · UAA / Cloud Foundry · cf-deployment
high7.5
CVE-2026-103963
Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service
Red Hat · Red Hat Enterprise Linux 10 / Red Hat · Red Hat Enterprise Linux 6
high7.5
CVE-2026-119286Fix available
GraphQL-core: Denial of service via memory leak in aborted validations
medium6.9
CVE-2026-119284Fix available
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
high7.5
high7.1
CVE-2026-119209Fix available
pypdf: Possible large memory usage when parsing cross-reference streams
high7.1
CVE-2026-119208Fix available
pypdf: Possible long runtimes/large memory usage for encrypted PDF files
high7.1
CVE-2026-119207Fix available
pypdf: Possible large memory usage for exceptions in strict mode
high7.1
high7.1
high7.5
CVE-2026-119191
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
digitalbazaar · forge
high7.5
CVE-2026-118779Fix available
Forge: Regular expression denial of service in PEM decoding (pem.decode)
medium6.3
CVE-2026-118773Fix available
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
medium6.3
GHSA-8vfg-2r28-hvhjFix available
Crass: Non-ASCII characters cause superlinear CPU consumption
high8.7
medium5.3
CVE-2026-90870
Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
Progress Software · WS_FTP Server
medium5.3
CVE-2026-93007
Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
Red Hat · Red Hat Ceph Storage 9 / Red Hat · Red Hat Enterprise Linux 10
medium6.9
medium6.9
high8.2
medium6.5
CVE-2026-88858
Server-side expression parser denial of service
Grafana · Grafana OSS / Grafana · Grafana Enterprise
unknown
CVE-2026-114349
Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches
Apache Software Foundation · Apache Kafka / Apache Software Foundation · Apache Kafka
unknown
CVE-2026-111551
Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation
Apache Software Foundation · Apache Kafka / Apache Software Foundation · Apache Kafka