CVE ID :CVE-2026-75149 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server…
CVE ID :CVE-2026-72717 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${…} expression or backtick in a schema default…
CVE ID :CVE-2026-72716 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${…} expression or backtick in a query parameter…
CVE ID :CVE-2026-73541 Published : Aug. 19, 2026, 6:17 p.m. | 27 minutes ago Description :Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored payments, denying service…
CVE ID :CVE-2025-9210 Published : Aug. 18, 2026, 6:25 p.m. | 34 minutes ago Description :Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs…
CVE ID :CVE-2026-47627 Published : Aug. 18, 2026, 6:23 p.m. | 36 minutes ago Description :NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service. Severity:…
CVE ID :CVE-2026-75130 Published : Aug. 18, 2026, 6:19 p.m. | 40 minutes ago Description :Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the…
CVE ID :CVE-2026-75625 Published : Aug. 18, 2026, 6:19 p.m. | 40 minutes ago Description :Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece…
CVE ID :CVE-2026-71879 Published : Aug. 18, 2026, 6:19 p.m. | 40 minutes ago Description :Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative…
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari. To Read More Visit Read More