CVE ID :CVE-2026-61620 Published : Oct. 30, 2026, 7:56 p.m. | 24 minutes ago Description :HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling…
CVE ID :CVE-2026-116249 Published : Oct. 30, 2026, 7:55 p.m. | 25 minutes ago Description :In server mode pgAdmin 4 resolves a server’s password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user’s storage directory, but…
CVE ID :CVE-2026-116247 Published : Oct. 30, 2026, 7:55 p.m. | 25 minutes ago Description :When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one could not be found, pgAdmin left…
CVE ID :CVE-2026-116245 Published : Oct. 30, 2026, 7:55 p.m. | 25 minutes ago Description :libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry there can hold a password or…
CVE ID :CVE-2026-119979 Published : Oct. 30, 2026, 5:48 p.m. | 31 minutes ago Description :LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader’s resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated…
CVE ID :CVE-2026-118697 Published : Oct. 30, 2026, 5:31 p.m. | 48 minutes ago Description :In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates Severity: 9.0 | CRITICAL Visit…
CVE ID :CVE-2026-118696 Published : Oct. 30, 2026, 5:31 p.m. | 49 minutes ago Description :In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4,…
CVE ID :CVE-2026-119978 Published : Oct. 30, 2026, 5:28 p.m. | 51 minutes ago Description :Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers…
CVE ID :CVE-2026-65566 Published : Oct. 30, 2026, 5:17 p.m. | 1 hour, 2 minutes ago Description :Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8. Severity:…
CVE ID :CVE-2026-9535 Published : Oct. 29, 2026, 7:17 p.m. | 55 minutes ago Description :A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1). A specially crafted chaco can lead to an out-of-bounds read. An attacker…