CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- openidentityplatform openamOpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback9.8 Critical
- openidentityplatform openamOpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page6.1 Medium
- openidentityplatform openamOpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass9.2 Critical
- nltk, ntlk +1 moreNLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments8.5 High
- quic-go webtransport-gowebtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules5.3 Medium
- cloudreveCloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials7.1 High
- cloudreveCloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients4.3 Medium
- cloudreveCloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS)6.5 Medium
- cloudreveCloudreve: Inactive/banned account emails leaked via GET /api/v4/user/search because SearchActive() omits the active-status predicate4.3 Medium
- cloudreveCloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account4.3 Medium
- ffmpegFFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter7.7 High
- ffmpegFFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder8.7 High
- ffmpegFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File8.7 High
- ffmpegFFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c7.1 High
- ffmpegFFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()7.1 High
- ffmpegFFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter7.7 High
- microsoft azure portalAzure Portal Information Disclosure Vulnerability9.3 Critical
- milkdownMilkdown < 7.21.3 DOM XSS via innerHTML Assignment5.1 Medium
- milkdownMilkdown < 7.21.3 Stored XSS via javascript: URL in link href5.1 Medium
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreCluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster8.5 High
- med-united epa4allepa4all Security Incident: Implement keystore based on Telematik TSL, implement hostname check and certificate check for lib-vau9.1 Critical
- med-united epa4allTLS Certificate Verification Disabled on CXF Transport Clients in epa4all8.1 High
- open-webuiOpen WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)7.1 High
- getkin kin-openapikin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default9.1 Critical
github.com/google/cel-goGocel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag6.3 Medium- nodeca js-yamljs-yaml: Exponential parsing time in the flow collections leads to denial of service7.5 High
- eugeny russhRussh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)5.3 Medium
- eugeny russhRussh: Post-auth remote panic via pty-req with more than 130 terminal-mode records4.3 Medium
- eugeny russhRussh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)5.3 Medium
- libssh2libssh2 Heap Buffer Overflow via ETM Cipher Negotiation7.7 High
aws-cdk-libnpm,Amazon.CDK.AWS.CodeBuildNuGet,Amazon.CDK.LibNuGet +6 more +8 moreAWS CDK CodeBuild S3 Log Encryption Boolean Inversion3.3 Low- gitpython-developers gitpythonGitPython before 3.1.54 Remote Code Execution via kwarg value smuggling8.7 High
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Heap Out-of-Bounds Read via publickey subsystem7.7 High
- gitpython-developers gitpythonGitPython before 3.1.54 Remote Code Execution via --template7.7 High
- gitpython-developers gitpythonGitPython before 3.1.54 Arbitrary File Overwrite via diff7.2 High
- libssh2libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation8.7 High
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Double-Free Heap Corruption via sftp_open()8.7 High
- mtrudel banditQuadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit8.7 High
- isaacs node-tarnode-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection7.5 High
- postcssPostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure7.5 High
- microsoft promptyPrompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer10.0 Critical
- automattic mongooseMongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)6.5 Medium
- gitpython-developers gitpythonGitPython before 3.1.53 Config Injection via Submodule Names7.3 High
- backstage, linuxfoundation backstage\/plugin-auth-backend +1 moreBackstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass in `@backstage/plugin-auth-backend`4.7 Medium
- imagemagickImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds5.1 Medium
- facelessuser pymdown-extensionsPyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path5.3 Medium
- basecamp trixTrix: Stored XSS via HTMLParser attribute injection on paste4.6 Medium
- microsoft kiotaKiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)6.1 Medium
- open-circle valibotValibot: record() issue paths can make flatten() throw for inherited Object property names6.9 Medium
- lxsmnsyc serovalSeroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization9.8 Critical
- Show moreLoading…