CVE ID :CVE-2026-44717 Published : May 15, 2026, 5:16 p.m. | 1 hour, 17 minutes ago Description :MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical…
CVE ID :CVE-2026-45035 Published : May 15, 2026, 5:16 p.m. | 1 hour, 17 minutes ago Description :Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Tabby registers itself as the handler for the tabby:// URL scheme on all…
CVE ID :CVE-2026-45038 Published : May 15, 2026, 5:16 p.m. | 1 hour, 17 minutes ago Description :Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, since Tabby does not escape control characters from file paths when dragging and…
CVE ID :CVE-2026-44699 Published : May 15, 2026, 5:16 p.m. | 1 hour, 17 minutes ago Description :LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as…
CVE ID :CVE-2025-15024 Published : May 14, 2026, 5:48 p.m. | 39 minutes ago Description :Improper Control of Generation of Code (‘Code Injection’) vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows…
Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that it said has been exploited in limited attacks. The vulnerability, tracked as CVE-2026-20182, carries a CVSS score of 10.0. “A vulnerability in the peering…
CVE ID :CVE-2025-15023 Published : May 14, 2026, 5:36 p.m. | 51 minutes ago Description :Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Configured Access Control Security…
Cybersecurity researchers are sounding the alarm about what has been described as “malicious activity” in newly published versions of node-ipc. According to Socket and StepSecurity, three different versions of the npm package have been confirmed as malicious – node-ipc@9.1.6 node-ipc@9.2.3…
CVE ID :CVE-2026-44827 Published : May 14, 2026, 5:16 p.m. | 1 hour, 11 minutes ago Description :Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loading pipelines…
CVE ID :CVE-2026-44574 Published : May 13, 2026, 5:16 p.m. | 44 minutes ago Description :Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes…