CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- ranfdev deepobjdeepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')8.2 High
- universal-tool-calling-protocol typescript-utcptypescript-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol4.7 Medium
github.com/slack-go/slackGoslack-go `SecretsVerifier` accepts empty signing secret without precondition4.8 Medium- jasperfx martenMarten has an SQL injection vulnerability in its full-text search regConfig parameter9.8 Critical
- macwarrior clipbucket-v5ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7.1 High
@samanhappy/mcphubnpm@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation9.1 Critical- tuistTuist: IDOR in preview deletion API allows cross-tenant deletion of any preview by UUID7.1 High
- tuistTuist: Forgot password flow lacks throttling for reset email delivery6.9 Medium
- cesnet libyang, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 morelibyang: lyb_read_string() integer overflow → heap buffer overflow7.5 High
- zelon88 hrconvert2HRConvert2: Missing Sanitization enables Unauthenticated Remote Command Execution9.3 Critical
sveltenpmSvelte: SSR XSS via Insecure Promise Serialization in hydratable5.3 Medium- electermelecterm's encrypt method not safe enough6.0 Medium
- electermelecterm: Local code through electerm's single-instance socket9.3 Critical
- hmbown codewhaleCodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files9.6 Critical
- hmbown codewhaleCodeWhale: SSRF IPV6 bypass7.4 High
- hmbown codewhaleCodeWhale: run_tests Tool Enables RCE via Malicious Repository Without Approval9.6 Critical
- hmbown codewhaleCodeWhale: SSRF via HTTP Redirect Bypass in fetch_url Tool7.4 High
- svelte, red hat build of podman desktop +1 moreSvelte: XSS via DOM Clobbering of Internal Framework State5.3 Medium
- svelteSvelte: ReDoS in `<svelte:element>` Tag Validation5.9 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed8.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion8.0 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS)6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Indirect Object Reference (IDOR) in user notes6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS in Banner Component via Improper Sanitization Order8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`8.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated RAG Configuration Disclosure5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution7.2 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: An IDOR vulnerability exists in the update_message_by_id API endpoint4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can bypass model access control via exposed query parameter5.4 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Exposure of System Prompt to Regular User [Non-Admin]6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Chat completion API allows tool restrictions to be bypassed7.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Broken Access Control for Completions API7.1 High
- pyloadpyLoad: Stored XSS in Downloads view via unsanitized link URL in packages.js template literal8.7 High
- svelte devalue, red hat build of podman desktop, enterprise linux 10 +1 more +3 moreSvelte devalue: DoS via sparse array deserialization7.5 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Blind server side request forgery (SSRF) via the PDF generate function4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored Cross-Site Scripting in SVG Renderer5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Missing authorization check at the model update function - models from other users can be updated6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)7.7 High
- svelteCross-site scripting via spread attributes in Svelte SSR5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Full SSRF Vulnerability in the RAG Web Search Feature8.5 High
- Show moreLoading…