CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- @fastify/static, fastify fastify-static +1 more@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths5.3 Medium
- grafana ossCVE-2026-21723 Record5.3 Medium
- boazsegev facil.ioboazsegev facil.io Public Folder http.c http_sendfile2 path traversal6.9 Medium
- No product listedAn issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type...9.8 Critical
knotDebianKnot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where...6.5 Medium- No product listedAn issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...7.8 High
- boazsegev facil.ioboazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation6.9 Medium
- No product listedpublint package-manager pack.js child_process.exec os command injection4.8 Medium
- n8nn8n before 1.123.67 SQL Injection via executeQuery Operation5.3 Medium
- n8nn8n before 1.123.67 SQL Injection via PostgresTrigger Node5.8 Medium
- n8nn8n before 1.123.67 Module Cache Poisoning via Code Node5.8 Medium
- jupyterlabJupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)8.6 High
- jupyterlabjupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab7.5 High
- jupyterlabjupyterlab: PyPI extension blocklist package-name canonicalization bypass6.1 Medium
- jupyterlabJupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass6.0 Medium
- jupyterlabJupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager7.7 High
- vercel next.jsNext.js: Denial of Service in the Image Optimization API using SVGs6.3 Medium
- vercel next.jsNext.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale8.3 High
- eclipse jetty, eclipse foundation jetty - ee8, jetty - ee9 +2 moreDigest authentication lossy encoding8.7 High
- dompdfDompdf: Embedded SVG images can leak existence of files and directories within the filesystem6.3 Medium
- dompdfDompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps6.3 Medium
- dompdfDompdf: Uncontrolled resource consumption based on declared BMP dimensions6.3 Medium
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.0 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...7.5 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.9 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.8 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...10.0 Critical
- syncfusion ej2-javascript-ui-controlssyncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection4.8 Medium
- n8nn8n before 2.32.1 Path Traversal via computer-use search_files4.9 Medium
- n8nn8n before 1.123.67 Prototype Pollution via VM Expression Engine6.1 Medium
- n8nn8n before 1.123.67 Prototype Pollution via Edit Fields7.1 High
- n8nn8n before 1.123.67 Arbitrary File Write via Edit Image Node7.7 High
- n8nn8n before 1.123.67 Credential Exfiltration via Sub-Workflow7.2 High
- n8nn8n before 1.123.67 Authentication Bypass via HTTP Request Node7.1 High
- n8nn8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape8.7 High
- n8nn8n before 1.123.67 Arbitrary File Read via Send Email Node8.2 High
- n8nn8n before 1.123.67 Remote Code Execution via Git node8.7 High
- n8nn8n before 2.32.1 SSRF Protection Bypass via MCP Client6.4 Medium
- n8nn8n before 1.123.67 Path Traversal via Git Node Operations7.1 High
- n8nn8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes7.1 High
- n8nn8n before 2.32.1 Authentication Bypass via Token Exchange8.9 High
- dompdfDompdf: Local file read due to improper file path validation in SVG images encoded as data-URI6.3 Medium
- danger danger-jsdanger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection4.8 Medium
- dompdfDompdf: File existence oracle via font-face stylesheet declaration2.3 Low
- Show moreLoading…