CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- joaonuno flat-to-nested-jsflat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key7.5 High
- cyclonedx cyclonedx-node-npm@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument8.5 High
github.com/0xERR0R/blockyGoBlocky DNSSEC validation bypass and validation-cache scope pollution8.6 High- ultrajsonUltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()6.5 Medium
- ruby-concurrency concurrent-ruby, rubyconcurrency concurrent ruby +1 moreconcurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption2.1 Low
- ruby-concurrency concurrent-ruby, rubyconcurrency concurrent ruby +1 moreconcurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity2.0 Low
- ruby-concurrency concurrent-ruby, rubyconcurrency concurrent ruby +1 moreconcurrent-ruby: `AtomicReference#update` livelocks when the stored value is `Float::NAN`8.2 High
- ohler55 ojOj: Integer Overflow in Oj.load 2GB String Handling6.3 Medium
- ohler55 ojOj: Use-After-Free in Oj::Parser SAJ Long Key Callback6.3 Medium
- ohler55 ojOj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking6.3 Medium
- ohler55 ojOj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling6.3 Medium
kozounpm,@kozou/apinpm,@kozou/corenpm +1 more +3 moreKozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure)8.4 High- corewcfCoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality7.4 High
- corewcfCoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages7.4 High
- corewcfCoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation10.0 Critical
- corewcfCoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced7.4 High
- corewcfCoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass3.7 Low
- corewcfCoreWCF: SAML token replay protection is inoperative5.9 Medium
- corewcfCoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution6.2 Medium
- corewcfCoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance6.5 Medium
- corewcfCoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade4.4 Medium
- corewcfCoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.6.5 Medium
- corewcfCoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate7.4 High
- corewcfCoreWCF: WS-Security signature substitution via document-wide Signature lookup5.9 Medium
- corewcfCoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake7.5 High
- jg-rp liquidPython Liquid: Infinite loop when parsing malformed `{% case %}` tags7.1 High
- microsoft 365 copilotMicrosoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability8.8 High
- microsoft exchange online, microsoft exchange online +1 moreMicrosoft Exchange Online Elevation of Privilege Vulnerability9.6 Critical
- microsoft github copilot chatMicrosoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability6.5 Medium
- microsoft azure synapseMicrosoft Azure Synapse Elevation of Privilege Vulnerability9.9 Critical
- microsoft azure active directoryAzure Active Directory Elevation of Privilege Vulnerability10.0 Critical
- microsoft 365 copilotMicrosoft Copilot Tampering Vulnerability6.5 Medium
- microsoft edge chromium, edge (chromium-based) +1 moreMicrosoft Entra ID Spoofing Vulnerability8.8 High
- quarkus, red hat cryostat 4 on rhel 9, openshift serverless +15 more +17 moreAuthentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities7.5 High
- autheliaAuthelia has an Edge Case Access Control Rule Mismatch1.3 Low
- kestra-io kestraKestra task inputFiles accepts traversal filenames for worker file writes6.5 Medium
- struktur libde265libde265 has a heap buffer overflow in de265_image_get_buffer via SPS dimension integer overflow7.1 High
- struktur libde265libde265 has an out-of-bounds write in process_reference_picture_set via predicted short-term RPS7.1 High
- strukturag libde265libde265 has an unbounded memory leak via orphaned slice headers in `read_slice_NAL`4.3 Medium
- flipped-aurora gin-vue-admingin-vue-admin vulnerable to RCE7.4 High
- ohler55 ojOj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation2.1 Low
- ohler55 ojOj : Use-After-Free in Oj::Doc Iterators via Reentrant Close2.1 Low
- ohler55 ojOj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent2.1 Low
- parse-community parse-serverParse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklist2.1 Low
- ohler55 ojOj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input7.5 High
- jupyter jupyterlab-gitjupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories7.1 High
- jupyter jupyterlab-gitJupyterLab Git: Stored XSS leading to RCE9.3 Critical
- ohler55 ojOj: intern.c form_attr has an uninitialized stack read5.3 Medium
- stanford stanzaStanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders7.5 High
- home-assistant core, home-assistant +1 moreHome Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN7.6 High
- Show moreLoading…