CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- cc-tweakedCC-Tweaked has an SSRF Protection Bypass with NAT647.1 High
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood6.5 Medium
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion6.5 Medium
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service6.5 Medium
Nerdbank.MessagePackNuGetNerdbank.MessagePack has Inefficient CPU Computation5.3 Medium- koelKoel Vulnerable to SSRF via Podcast Episode Enclosure URLs7.7 High
Nerdbank.MessagePackNuGetNerdbank.MessagePack has a memory amplification DoS in collection deserialization5.3 Mediumpython-pipUbuntupython-pip regressionNo score- freescout-help-desk freescoutFreeScout: User Account Enumeration via Password Reset Response Differentiation5.3 Medium
- freescout-help-desk freescoutFreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path7.5 High
- spatie laravel-medialibrarySpatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.php8.7 High
- freescout-help-desk freescoutFreeScout: Thread Edit Authorization Bypass via Missing Mailbox Check4.3 Medium
- freescout-help-desk freescoutFreeScout: Thread Deletion Bypasses Mailbox Access Revocation4.3 Medium
- sparkle project sparkleSparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection4.2 Medium
- sparkle project sparkleSparkle: Binary delta apply intermediate-symlink traversal in malicious .delta6.1 Medium
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +13 more +15 moreHeap-buffer-overflow write in planar bitmap decoder7.7 High
github.com/go-git/go-git/v5Go,github.com/go-git/go-git/v6Go +1 morego-git: Malformed Git object data may cause panics or resource exhaustion6.5 Medium- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS8.8 High
- freerdp, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreFreeRDP RDPEAR NDR ref-id aliasing causes client-side UAF/double-free and type confusion7.5 High
- eugeny russhrussh server userauth state is not reset when authentication principal changes5.3 Medium
- labring fastgptFastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassable6.3 Medium
- labring fastgptFastGPT: SSRF Protection Bypass via `externalFile` in Dataset Preview API7.7 High
- nanomqNanoMQ: NULL Pointer Dereference2.9 Low
- nanomqNanoMQ: QUIC Dialer Close Type Confusion4.5 Medium
- astral-sh uvuv before 0.11.15 Arbitrary File Write via Entry Point Names8.7 High
- agenticmail @agenticmail/api, @agenticmail/core +1 moreAgenticMail API/storage and outbound relay hardening8.2 High
- yhirose cpp-httplibcpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection9.9 Critical
- yhirose cpp-httplibcpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash8.7 High
- parse-community parse-serverParse Server: GraphQL "Did you mean" validation suggestions disclose schema to unauthenticated callers6.9 Medium
- golang.org/x/image golang.org/x/image/tiffExcessive resource consumption in PackBits decompression in golang.org/x/image/tiff7.5 High
tarcrates.iotar has a PAX header desynchronization issueNo score- yhirose cpp-httplibcpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding5.3 Medium
- rizinorg rizinRizin: Double free in cmd_search.c3.3 Low
- rizinorg rizinRizin: Heap-buffer-overflow in OMF parser3.3 Low
ezsystems/ezpublish-legacyPackagistezsystems/ezpublish-legacy has a SQL injection in dfscleanup7.1 High- spearman unbounded-spscunbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race5.8 Medium
- verbb formieFormie: Unauthenticated front-end submission editing can overwrite existing submissions8.7 High
github.com/metal3-io/cluster-api-provider-metal3GoCAPM3 vulnerable to Cross-Namespace resource access5.5 Medium- tp-link systems inc. tl-sg108pe v5, tp-link tl-sg108pe firmware +1 moreStored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE5.3 Medium
- spatie laravel-medialibrarySpatie Laravel Media Library < 11.23.0 SSRF via addMediaFromUrl()5.3 Medium
- strongdm desktop application, desktop client +1 moreUnencrypted storage of authentication state in StrongDM Desktop Application state.kv file2.0 Low
- metal3 ip-address-managerIPAM controller service account granted unnecessary full access to Secrets4.4 Medium
github.com/metal3-io/ironic-standalone-operatorGoIronic Standalone Operator's controller modifies user-owned resources without consent4.3 Mediumgithub.com/metal3-io/ironic-standalone-operatorGoIronic Standalone Operator's prometheus metrics exporter bound to all interfaces4.3 Medium- patriksimek vm2vm2: NodeVM observability builtins leak host process and HTTP request data6.9 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of...6.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to...6.5 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible6.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible3.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in...4.5 Medium
- Show moreLoading…