CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- ovenmedialabs ovenmediaengineOvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length8.7 High
- karingx clashmiClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM7.7 High
- oauthlibOAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client8.4 High
- tox-dev filelockfilelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold5.3 Medium
- tox-dev filelockfilelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL5.3 Medium
- tox-dev filelockfilelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses5.8 Medium
- langchain-ai langgraph-apiLangGraph JavaScript custom authentication may permit cross-user Store access8.6 High
- langchain-ai langgraph, langgraph-sdk +1 moreLangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests4.3 Medium
- @graphql-tools executor-legacy-ws, ardatan graphql-tools +1 moreGraphQL Tools: Shared legacy executor routes one subscription's results to a different caller6.0 Medium
- @graphql-tools executor-legacy-ws, ardatan graphql-tools +1 moreGraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications8.2 High
- samverschueren decode-uri-componentdecode-uri-component: Denial of service via quadratic replacement of percent-encoded runs8.2 High
- honojs node-server@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths5.3 Medium
- vitejs viteVite: `server.fs.deny` bypassed with queries6.9 Medium
- capricorn86 happy-domHappy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies6.5 Medium
- capricorn86 happy-domHappy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML8.6 High
- capricorn86 happy-dom@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy7.5 High
- labstack echoEcho: Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto4.7 Medium
- labstack echoEcho: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers5.9 Medium
- labstack echoEcho: Open Redirect via Control-Character Prefix Defeating sanitizeURI6.1 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 moreCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability8.6 High
- labstack echoEcho: Static Middleware Double-Unescape Path Traversal5.9 Medium
- red hat openshift ai (rhoai)Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization9.1 Critical
- labstack echoEcho static file middleware route protection bypass via encoded dot-dot traversal5.9 Medium
- red hat openshift ai (rhoai)Kserve: kserve: server-side request forgery via malicious storageuri7.7 High
mcp-sanitizernpmmcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv68.2 Highmcp-sanitizernpmmcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths7.5 High- rucioRucio: Authorisation Bypass on REST API endpoint for signing URLs8.1 High
MySqlConnectorNuGetMySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)6.9 Medium- caddyserver caddyCaddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through2.9 Low
- drhelius gearboyGearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools8.6 High
- endatixEndatix: Blind second-order SSRF via anonymous form-submission file URLs (`SubmissionFileExtractor`)4.7 Medium
- labstack echoEcho: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration5.3 Medium
- labstack echoEcho: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob6.1 Medium
- amazon strands-agents-toolsSecret masking bypass in the environment tool in Strands Agents Tools5.9 Medium
- labstack echoEcho: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default5.3 Medium
- fearlessgeekmedia fearlesscmsFearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS9.4 Critical
- labstack echoEcho: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path7.5 High
- labstack echoEcho: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method5.3 Medium
- wso2 business process server, enterprise integrator (bps profile) +1 moreRemote Code Execution via BPMN System REST APIs in Multiple WSO2 Products Permits Arbitrary Command Execution8.8 High
- wso2 identity server, carbon oauth +1 moreIncomplete OAuth Token Revocation via Case Mismatch in WSO2 Identity Server Allows Continued Access After Lifecycle Events7.4 High
- wso2 api control plane, api manager, carbon oauth +6 more +8 moreImproper Token Revocation via OAuth2 Scope Enforcement in Multiple WSO2 Products [Disrupted Authentication Flows]3.1 Low
- wso2 api control plane, api manager, identity server +2 moreCross-Site Scripting via Authentication Endpoint Error Message in Multiple WSO2 Products6.1 Medium
- wso2 saml2 sso authenticator ui bundle, api manager, carbon ui +4 more +6 moreServer Side Request Forgery in Multiple WSO2 Products Allows Access to Internal and External Resources8.3 High
- coderCoder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication8.3 High
- espocrmEspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex8.7 High
- tooljetToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard6.9 Medium
- project-monai monaiMONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads8.2 High
- project-monai monaiMONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf8.6 High
- go-chi chigo-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware6.3 Medium
- siyuan-note siyuanSiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias5.9 Medium
- Show moreLoading…