Tagged “osv”

CVEs tagged osv, newest first.

5681 CVEsRSS

GO-2026-5934None

2mo ago

netfoil has a domain name filter bypass via multiple questions in github.com/tinfoil-factory/netfoil

▾ Sunlittinfoil-factory · github.com/tinfoil-factory/netfoilvia OSV

GO-2026-5933None

2mo ago

github.com/DataDog/dd-trace-go: Datadog dd-trace-go: Denial of Service via malicious baggage headers (CVE-2026-50274)

A flaw was found in Datadog dd-trace-go, a Go client library. A remote, unauthenticated attacker can exploit this vulnerability by sending a request with a specially crafted baggage header containing an arbitrarily large number of key-valu…

▾ TwilightRed Hat · github.com/DataDog/dd-trace-goEPSS 0.79%via CSAF

CVE-2026-15925Critical

2mo ago

Snowflake Connector for Python improperly verifies TLS hostnames

▾ Midnightsnowflake-connector-python · snowflake-connector-pythonEPSS 0.29%via OSV

CVE-2026-18679Medium

2mo ago

kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

▾ Sunlitkumahq · github.com/kumahq/kuma/v2EPSS 0.16%via OSV

CVE-2026-18678Medium

2mo ago

kumactl connects to control plane without verifying TLS certificate when no CA is configured

▾ Sunlitkumahq · github.com/kumahq/kuma/v2EPSS 0.13%via OSV

MAL-2026-10760None

2mo ago

Malicious code in abseil-py (PyPI)

▾ Sunlitabseil-py · abseil-pyvia OSV

MAL-2026-10759None

2mo ago

Malicious code in ryry-cli (PyPI)

▾ Sunlitryry-cli · ryry-clivia OSV

MAL-2026-10758None

2mo ago

Malicious code in mfq-private-encoder (PyPI)

▾ Sunlitmfq-private-encoder · mfq-private-encodervia OSV

MAL-2026-10757None

2mo ago

Malicious code in dde-common (PyPI)

▾ Sunlitdde-common · dde-commonvia OSV

MAL-2026-10756None

2mo ago

Malicious code in darkglitch (PyPI)

▾ Sunlitdarkglitch · darkglitchvia OSV

MAL-2026-10755None

2mo ago

Malicious code in captcha-solve-api (PyPI)

▾ Sunlitcaptcha-solve-api · captcha-solve-apivia OSV

MAL-2026-10754None

2mo ago

Malicious code in airflow-provider-spirit (PyPI)

▾ Sunlitairflow-provider-spirit · airflow-provider-spiritvia OSV

MAL-2026-10753None

2mo ago

Malicious code in a3s-code (PyPI)

▾ Sunlita3s-code · a3s-codevia OSV

CVE-2026-52869High· 7.1

2mo ago

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

▾ Twilightmcp · mcpEPSS 0.53%via OSV

CVE-2026-59950High

2mo ago

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

▾ Twilightmcp · mcpEPSS 0.23%via OSV

CVE-2026-52870High· 7.6

2mo ago

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

▾ Twilightmcp · mcpEPSS 0.39%via OSV

MAL-2026-10702None

2mo ago

Malicious code in discordia-telemetria (PyPI)

▾ Sunlitdiscordia-telemetria · discordia-telemetriavia OSV

MAL-2026-10701None

2mo ago

Malicious code in discord-telemetry (PyPI)

▾ Sunlitdiscord-telemetry · discord-telemetryvia OSV

CVE-2026-56742Medium· 5.9

2mo ago

Cilium is a networking, observability, and security solution

Cilium is a networking, observability, and security solution. Prior to 1.17.17, 1.18.11, and 1.19.5, Cilium clusters using Gateway API allow users with permissions to create or update namespaced HTTPRoutes to mirror HTTP traffic to any S…

▾ Sunlitcilium · ciliumEPSS 0.17%via NVD

CVE-2026-58659High· 7.8

2mo ago

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters…

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters…

▾ TwilightRed Hat · Red Hat AI Inference ServerEPSS 0.63%via NVD

RUSTSEC-2026-0210None

2mo ago