low2.3
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
ORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
15 matching advisories · 15 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
medium4.2
CVE-2026-116251
pgAdmin 4: A user's other sessions survive a change of their password
pgadmin.org · pgAdmin 4
high7.6
CVE-2026-119577
ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections
ArcadeData · arcadedb
high8.2
high7.4
CVE-2026-6647
Incomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events
WSO2 · WSO2 Identity Server / WSO2 · WSO2 Carbon OAuth
low3.1
CVE-2026-3583
Improper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]
WSO2 · WSO2 API Manager / WSO2 · WSO2 Traffic Manager
low3.7
CVE-2026-117499
@fastify/session vulnerable to session revocation bypass via a logout race condition
@fastify/session · @fastify/session
medium4.2
medium6.3
CVE-2026-107146
Insufficient session expiration in twofactor_gauthenticator
alexandregz · twofactor_gauthenticator
low2.2
CVE-2026-115362
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired AppRole SecretID Authentication Bypass
openbao · openbao
low3.1
CVE-2026-54238
Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization
supabase · realtime
critical9.1
CVE-2026-89035
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
MikroTik · RouterOS
high7.4
CVE-2025-0326
Improper Token Revocation in WSO2 Identity Server Allows Unauthorized Access
WSO2 · WSO2 Identity Server / WSO2 · WSO2 Carbon OAuth
high8.6
CVE-2026-74037
Wazuh 4.0.0 before 4.14.8 Session Invalidation Bypass in check_token
Wazuh · wazuh-manager
high8.8
CVE-2026-104084
SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
Smartertools · Smartermail