CVE ID :CVE-2026-16117 Published : July 18, 2026, 2:17 p.m. | 5 hours, 4 minutes ago Description :Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify’s router URL-decodes paths for…
CVE ID :CVE-2025-71392 Published : July 18, 2026, 2:17 p.m. | 5 hours, 4 minutes ago Description :SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command. An authenticated…
CVE ID :CVE-2024-58366 Published : July 18, 2026, 2:17 p.m. | 5 hours, 4 minutes ago Description :SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string…
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. The malicious package campaign, codenamed ViteVenom by Checkmarx, marks an expansion of ChainVeil, which was…
CVE ID :CVE-2026-9103 Published : July 17, 2026, 6:49 p.m. | 25 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. The endpoint issues…
CVE ID :CVE-2026-9135 Published : July 17, 2026, 6:48 p.m. | 25 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Policies component’s ToolGuard integration that bypasses…
CVE ID :CVE-2026-9198 Published : July 17, 2026, 6:17 p.m. | 57 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec())…
CVE ID :CVE-2026-9202 Published : July 17, 2026, 6:17 p.m. | 57 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documented deployment option), newly created accounts…
CVE ID :CVE-2026-46686 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :Emlog is an open source website building system. In 2.6.13 and earlier, the admin backend user search module’s keyword parameter from admin is processed with addslashes…
CVE ID :CVE-2026-45336 Published : July 16, 2026, 6:16 p.m. | 52 minutes ago Description :HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key…