CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.10)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
W M365 Copilot występuje niewłaściwe neutralizowanie specjalnych elementów używanych w poleceniach, co prowadzi do podatności na wstrzykiwanie poleceń ('command injection'). Ta luka umożliwia nieautoryzowanemu atakującemu ujawnienie informacji przez sieć.
A vulnerability has been detected in Feedback System 1.0 that allows SQL injection through manipulation of the email argument in the /admin/checklogin.php file. The attack can be executed remotely.
In versions 2.47.4 through 2.47.13, n8n-MCP has a vulnerability related to the lack of IPv6 address validation in the URL validation function. An attacker can exploit this flaw to send HTTP requests to unauthorized endpoints, leading to data exposure.
Inngest is a platform for running background functions that in versions 3.22.0 through 3.53.1 contains a vulnerability allowing unauthenticated remote attackers to exfiltrate environment variables from the host process via the serve() HTTP handler. A change introduced in v3.22.0 caused the diagnostic response to include the contents of process.env, exposing secrets and API keys.
A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This affects users using untrusted module proxies or checksum databases.
Specially crafted input can cause a denial of service (DoS) through the consumePhrase function when parsing an email address according to RFC 5322.
Budibase to otwartoźródłowa platforma low-code. W wersjach przed 3.35.10, ciasteczko budibase:auth zawierające token sesji JWT jest ustawione z httpOnly: false, co pozwala na odczytanie go przez JavaScript, co prowadzi do pełnego przejęcia konta w przypadku ataku XSS.
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate functions can trigger excessive CPU exhaustion and memory allocations.
When processing HTTP/2 SETTINGS frames, the transport enters an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
A vulnerability in the cgo DNS resolver in Go (when using LookupCNAME) causes a double-free of C memory and a crash when handling a very long CNAME response.
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0 affecting an unknown part of the file /ajax.php?action=save_user. Manipulation of the argument ID results in SQL injection.
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.
GitPython is a Python library used to interact with Git repositories. In versions prior to 3.1.49, the GitConfigParser.set_value() method did not validate values for newlines, allowing for the injection of malicious paths into Git configuration.
GitPython is a Python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability allowed attackers to manipulate files outside the repository's .git directory due to insufficient validation of reference paths.
GitPython is a Python library used to interact with Git repositories. In versions prior to 3.1.47, the _clone() function improperly validates multi_options, allowing malicious hooks to be executed during repository cloning.
GitPython is a Python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, the library blocks dangerous Git options, but equivalent Python kwargs can bypass that check, leading to arbitrary command execution.
Notepad Next prior to version 0.14 had a detectLanguageFromExtension() function that interpolated a file's extension without sanitization, allowing attackers to inject Lua code. When such a file is opened in NotepadNext, the malicious code is executed automatically.
FreeScout is a free help desk and shared inbox built with the Laravel framework. Prior to version 1.8.214, the Change Customer modal correctly hides out-of-scope customers, but the backend conversation_change_customer action accepts any supplied customer_email.
FreeScout prior to version 1.8.217 had a vulnerability in the Helper::sanitizeRemoteUrl() function that improperly validated URLs after HTTP redirects. An attacker could exploit this vulnerability to redirect traffic to internal HTTP services that would normally be blocked.
FreeScout prior to version 1.8.217 allows users with updateAutoReply permission to store an XSS payload in the auto-reply message. The payload is rendered unescaped in the auto-reply email sent to customers.