CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Use-After-Free in MSL decoder.6.2 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion7.5 High
- imagemagickImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression5.5 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in MNG coder could5.3 Medium
- imagemagickImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.5.1 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreIncomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow7.0 High
- hapifhir org.hl7.fhir.coreHAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint7.5 High
- zauberzeug niceguiNiceGUI: Unauthenticated log-flood DoS via trailing slash on ESM and per-component resource routes5.3 Medium
- zauberzeug niceguiNiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers4.9 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals5.1 Medium
- aws amazon redshift connector for pythonRemote Code Execution via eval() Injection in amazon-redshift-python-driver9.3 Critical
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure3.8 Low
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size5.9 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU5.9 Medium
- alinto sogo webmailSOGo < 5.12.8 SQL Injection via addUserInAcls endpoint8.6 High
- jarrodwatts claude-hud, claude hud +1 moreClaude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable7.3 High
- jarrodwatts claude hud, claude-hud +1 moreClaude HUD 0.0.12 Path Traversal via transcript_path4.8 Medium
- jarrodwatts claude hud, claude-hud +1 moreClaude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks2.4 Low
- hclsoftware connectionsHCL Connections is vulnerable to broken access control4.6 Medium
- steipete summarizeSummarize < 0.15.1 Insecure File Permissions Information Disclosure6.8 Medium
- wwbn avideoWWBN AVideo: Authenticated Arbitrary File Read in view/update.php6.9 Medium
- steipete summarizeSummarize < 0.15.1 Unauthorized Daemon Request via Untrusted Events4.6 Medium
- steipete summarizeSummarize < 0.15.1 Unapproved Browser Automation Execution2.1 Low
- steipete summarizeSummarize < 0.15.1 Path Traversal via slidesDir Parameter7.1 High
- steipete summarizeSummarize < 0.15.1 Browser Extension Missing Authorization via Content Script5.3 Medium
lwipDebianlwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow9.3 Critical- dumbwareio dumbassetsDumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields5.3 Medium
- dumbwareio dumbassetsDumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file8.8 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages6.5 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent5.5 Medium
@mistralai/mistralainpm,@mistralai/mistralai-azurenpm,@mistralai/mistralai-gcpnpm +2 moreBroken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp0.0 NonemistralaiPyPIMalicious dropper in mistralai 2.4.6 PyPI package9.6 Critical- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in PSD decoder5.3 Medium
- docker engine, moby, mobyproject moby\/v2 +2 moreMoby: Race condition in docker cp allows bind mount redirection to host path7.2 High
- docker engine, moby, mobyproject moby\/v2 +2 moreMoby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap6.1 Medium
- netbsd srcNetBSD cryptodev Race Condition Double-Free via cryptodev_op()5.7 Medium
- cloakhq cloakbrowserCloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion8.8 High
- imagemagickImageMagick: Out-of-Bounds Read of a single byte in meta encoder5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define5.7 Medium
- budibaseBudibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API6.5 Medium
- docker engine, moby docker engine, docker docker/daemon +20 more +22 moreDocker: `PUT /containers/{id}/archive` executes container binary on the host7.2 High
- budibaseBudibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows5.4 Medium
- netbsd srcNetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c5.7 Medium
- budibaseBudibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration8.8 High
- czlonkowski n8n-mcpn8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete8.1 High
- Show moreLoading…