CVE Vulnerability Database
Search and browse 394,439 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-54316 | CRITICAL | 9.1 | 0.4% | Jun 23, 2026 | Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved ... |
| CVE-2026-54257 | CRITICAL | 9.3 | 0.3% | Jun 23, 2026 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 unti... |
| CVE-2026-54157 | CRITICAL | 9 | 1.8% | Jun 23, 2026 | LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to ... |
| CVE-2026-54022 | MEDIUM | 5.3 | 0.3% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.11, the ... |
| CVE-2026-54021 | MEDIUM | 6.3 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, sever... |
| CVE-2026-54019 | MEDIUM | 6.5 | 0.3% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open ... |
| CVE-2026-54018 | HIGH | 7.7 | 0.3% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the S... |
| CVE-2026-54016 | MEDIUM | 4.3 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open ... |
| CVE-2026-54015 | MEDIUM | 6.4 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open ... |
| CVE-2026-54014 | MEDIUM | 4.3 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, a pat... |
| CVE-2026-54013 | HIGH | 7.6 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open ... |
| CVE-2026-54012 | HIGH | 7.1 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open ... |
| CVE-2026-54011 | MEDIUM | 5.4 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6,Open W... |
| CVE-2026-54010 | HIGH | 8.3 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open ... |
| CVE-2026-54009 | MEDIUM | 6.5 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST ... |
| CVE-2026-54008 | HIGH | 8.5 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, backe... |
| CVE-2026-54007 | MEDIUM | 6.5 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the c... |
| CVE-2026-54006 | MEDIUM | 4.3 | 0.2% | Jun 23, 2026 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, POST ... |
| CVE-2026-53662 | CRITICAL | 9.6 | 0.2% | Jun 23, 2026 | immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 until 4eb1003, a refl... |
| CVE-2026-52846 | MEDIUM | 4.2 | 0.1% | Jun 23, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy’s stripHTML template function ca... |
| CVE-2026-52845 | HIGH | 8.1 | 0.2% | Jun 23, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the ... |
| CVE-2026-52844 | HIGH | 7.5 | 0.4% | Jun 23, 2026 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, on Windows, Caddy path matchers treat ... |
| CVE-2026-50221 | MEDIUM | 5.4 | 0.2% | Jun 23, 2026 | In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Dev... |
| CVE-2026-49983 | MEDIUM | 5.2 | 0.1% | Jun 23, 2026 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, environment access is gated by the env permis... |
| CVE-2026-49860 | MEDIUM | 5.2 | 0.1% | Jun 23, 2026 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when a WebSocket connection was opened, Deno ... |