CVE Vulnerability Database
Search and browse 420,383 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118669 | HIGH | 8.4 | 0.3% | Oct 28, 2026 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials... |
| CVE-2026-118538 | MEDIUM | 5.5 | 0.3% | Oct 28, 2026 | A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTr... |
| CVE-2026-118537 | MEDIUM | 4.3 | 0.4% | Oct 28, 2026 | A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file src/v0_9/basic_catal... |
| CVE-2026-116641 | MEDIUM | 6.8 | 0.1% | Oct 28, 2026 | The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. Howe... |
| CVE-2026-118668 | HIGH | 8.6 | 0.4% | Oct 28, 2026 | langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or Typ... |
| CVE-2026-118667 | MEDIUM | 4.3 | 0.4% | Oct 28, 2026 | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs fro... |
| CVE-2026-118666 | MEDIUM | 6 | 0.3% | Oct 28, 2026 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the Gr... |
| CVE-2026-118665 | HIGH | 8.2 | 0.4% | Oct 28, 2026 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the Gr... |
| CVE-2026-118664 | HIGH | 8.2 | 0.3% | Oct 28, 2026 | decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in ind... |
| CVE-2026-118663 | MEDIUM | 5.3 | 0.4% | Oct 28, 2026 | @hono/node-server allows running the Hono application on Node.js. From 1.19.10 until 2.1.3, serveStatic decodes a reques... |
| CVE-2026-118662 | MEDIUM | 6.9 | 0.3% | Oct 28, 2026 | Vite is a frontend tooling framework for JavaScript. From 6.4.4 until 6.4.5, the Vite development server can evaluate se... |
| CVE-2026-118661 | MEDIUM | 6.5 | 0.3% | Oct 28, 2026 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 20.14.6, Happy ... |
| CVE-2026-118660 | HIGH | 8.6 | 0.4% | Oct 28, 2026 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.0, Happy D... |
| CVE-2026-118659 | HIGH | 7.5 | 0.4% | Oct 28, 2026 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the Hap... |
| CVE-2026-118658 | MEDIUM | 4.7 | 0.2% | Oct 28, 2026 | Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme returns values from X-Forwarded-Proto, X-Forwarded... |
| CVE-2026-118657 | MEDIUM | 5.9 | 0.1% | Oct 28, 2026 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers fr... |
| CVE-2026-118656 | MEDIUM | 6.1 | 0.2% | Oct 28, 2026 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target ... |
| CVE-2026-78674 | HIGH | 8.8 | 1.0% | Oct 28, 2026 | The BPMN System REST APIs do not sufficiently validate input parameters, allowing authenticated users to submit crafted ... |
| CVE-2026-76418 | HIGH | 8.6 | 0.6% | Oct 28, 2026 | A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software... |
| CVE-2026-6647 | HIGH | 7.4 | 0.2% | Oct 28, 2026 | In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for i... |
| CVE-2026-63190 | CRITICAL | 9.4 | 0.5% | Oct 28, 2026 | FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, f... |
| CVE-2026-61542 | HIGH | 8.6 | 0.3% | Oct 28, 2026 | Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem,... |
| CVE-2026-61529 | MEDIUM | 4.7 | 0.2% | Oct 28, 2026 | Endatix is a self-hosted form and survey management platform with a headless API. Prior to 0.7.0, the anonymous `POST /f... |
| CVE-2026-54162 | MEDIUM | 4.7 | 0.3% | Oct 28, 2026 | Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row f... |
| CVE-2026-3583 | LOW | 3.1 | 0.3% | Oct 28, 2026 | When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechanism does not immediately invali... |