Medium
CVE-2026-59888
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2026-59892
OpenTelemetry JavaScript: Denial of service in `JaegerPropagator` via unhandled exception on a malformed header
High
CVE-2026-59887
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text
High
CVE-2026-13760
aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling
High
CVE-2026-13676
fast-uri vulnerable to host confusion via failed IDN canonicalization
High
CVE-2026-59880
Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
High
CVE-2026-59879
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
Medium
CVE-2026-59882
guzzlehttp/psr7: Host Confusion via Weak URI Host Validation
Medium
CVE-2026-59896
hono/jsx does not isolate context per request, leading to cross-request data disclosure
Medium
CVE-2026-59895
Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility
Medium
CVE-2026-59897
Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication
Medium
ghsa-frvp-7c67-39w9
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
High
CVE-2026-54291
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
High
CVE-2026-56170
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
High
CVE-2026-50526
Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability
High
CVE-2026-47300
Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-47303
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-50527
Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability
High
CVE-2026-50650
Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-15802
WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action
Medium
CVE-2026-27399
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.40 - Missing Authorization
High
CVE-2026-59512
PiWeb Product Enquiry or product catalog for WooCommerce <= 2.2.34.43 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57809
AffiliateWP <= 2.34.0 - Reflected Cross-Site Scripting
Critical
CVE-2026-57716
Broadcast Live Video <= 7.2.4 - Unauthenticated Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.