VulnSea

Tagged “osv”

CVEs tagged osv, newest first.

5681 CVEsRSS

CVE-2026-6110High· 7.3
5mo ago

MetaGPT has an eval injection in metagpt/strategy/tot.py

MetaGPT has an eval injection in metagpt/strategy/tot.py

▾ Twilightmetagpt · metagptEPSS 0.71%via OSV
CVE-2026-6109Medium· 4.3
5mo ago

MetaGPT has an eval injection via a cross-site request forgery attack

MetaGPT has an eval injection via a cross-site request forgery attack

▾ Sunlitmetagpt · metagptEPSS 0.29%via OSV
CVE-2026-6111Medium· 6.3PoC
5mo ago

MetaGPT affected by server-side request forgery in metagpt/utils/common.py

MetaGPT affected by server-side request forgery in metagpt/utils/common.py

▾ Twilightmetagpt · metagptEPSS 0.37%via OSV
GHSA-x462-jjpc-q4q4High· 8.1
5mo ago

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

▾ Twilightpraisonaiagents · praisonaiagentsvia OSV
GHSA-pjjw-68hj-v9mwLow
5mo ago

uv vulnerable to arbitrary file deletion through RECORD entries

uv vulnerable to arbitrary file deletion through RECORD entries

▾ Sunlituv · uvvia OSV
CVE-2026-79671Medium· 5.5
5mo ago

Ech0 has SSRF via DNS Resolution Bypass in Webhook URL Validation

Ech0 has SSRF via DNS Resolution Bypass in Webhook URL Validation

▾ Sunlitlin-snow · github.com/lin-snow/ech0EPSS 0.31%via OSV
CVE-2026-79673Medium· 6.5
5mo ago

Ech0 Scope Bypass: profile:read Access Token Can Change Admin Password and Escalate to Unrestricted Session

Ech0 Scope Bypass: profile:read Access Token Can Change Admin Password and Escalate to Unrestricted Session

▾ Sunlitlin-snow · github.com/lin-snow/ech0EPSS 0.43%via OSV
CVE-2026-79672Medium· 5.5
5mo ago

Ech0 Comment Panel Endpoints Missing RequireScopes Middleware — Scoped Access Token Bypass

Ech0 Comment Panel Endpoints Missing RequireScopes Middleware — Scoped Access Token Bypass

▾ Sunlitlin-snow · github.com/lin-snow/ech0EPSS 0.32%via OSV
CVE-2026-79666Medium· 6.5
5mo ago

Ech0: Missing authorization on dashboard log endpoints allows low-privilege users to access sensitive system logs

Ech0: Missing authorization on dashboard log endpoints allows low-privilege users to access sensitive system logs

▾ Sunlitlin-snow · github.com/lin-snow/ech0EPSS 0.39%via OSV
CVE-2026-79670Medium· 4.8
5mo ago

Ech0 has Stored XSS via SVG Upload and Content-Type Validation Bypass in File Upload

Ech0 has Stored XSS via SVG Upload and Content-Type Validation Bypass in File Upload

▾ Sunlitlin-snow · github.com/lin-snow/ech0EPSS 0.25%via OSV
CVE-2026-79667High· 7.6
5mo ago

Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export

Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export

▾ Twilightlin-snow · github.com/lin-snow/ech0EPSS 0.32%via OSV
CVE-2026-5388Medium
5mo ago

justhtml includes multiple security fixes

justhtml includes multiple security fixes

▾ Sunlitjusthtml · justhtmlEPSS 0.59%via OSV
CVE-2026-34178Critical· 9.1
5mo ago

LXD: Importing a crafted backup leads to project restriction bypass

LXD: Importing a crafted backup leads to project restriction bypass

▾ Midnightcanonical · github.com/canonical/lxdEPSS 0.68%via OSV
CVE-2026-34177Critical· 9.1
5mo ago

LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

▾ Midnightcanonical · github.com/canonical/lxdEPSS 0.61%via OSV
CVE-2026-34179Critical· 9.1
5mo ago

LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

▾ Midnightcanonical · github.com/canonical/lxdEPSS 0.42%via OSV
CVE-2026-35204High· 8.6PoC
5mo ago

Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

Helm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory

▾ Midnighthelm · helm.sh/helm/v4EPSS 0.19%via OSV
CVE-2026-35205High· 7.8
5mo ago

Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install

Helm's plugin verification fails open when .prov is missing, allowing unsigned plugin install

▾ Twilighthelm · helm.sh/helm/v4EPSS 0.28%via OSV
CVE-2026-35206Medium
5mo ago

Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment

▾ Sunlithelm · helm.sh/helm/v4EPSS 0.19%via OSV
CVE-2026-35596Medium· 4.3
5mo ago

Vikunja has Broken Access Control on Label Read via SQL Operator Precedence Bug

Vikunja has Broken Access Control on Label Read via SQL Operator Precedence Bug

▾ Sunlitapi · code.vikunja.io/apiEPSS 0.35%via OSV
CVE-2026-35597Medium· 5.9
5mo ago

Vikunja Vulnerable to TOTP Brute-Force Due to Non-Functional Account Lockout

Vikunja Vulnerable to TOTP Brute-Force Due to Non-Functional Account Lockout

▾ Sunlitapi · code.vikunja.io/apiEPSS 0.47%via OSV
CVE-2026-40242High· 7.2PoC
5mo ago

Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint

Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint

▾ Midnightgetarcaneapp · github.com/getarcaneapp/arcane/backendEPSS 0.72%via OSV
CVE-2026-35594Medium· 6.5
5mo ago

Vikunja: Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

Vikunja: Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

▾ Sunlitapi · code.vikunja.io/apiEPSS 0.44%via OSV
CVE-2026-34727High· 7.4
5mo ago

Vikunja has TOTP Two-Factor Authentication Bypass via OIDC Login Path

Vikunja has TOTP Two-Factor Authentication Bypass via OIDC Login Path

▾ Twilightapi · code.vikunja.io/apiEPSS 0.42%via OSV
CVE-2026-39921Medium· 6.3
5mo ago

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated user…

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malici…

▾ Sunlitgeonode · geonodeEPSS 0.37%via OSV
CVE-2026-40315Medium
5mo ago

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

▾ Sunlitpraisonai · praisonaiEPSS 0.40%via OSV
CVE-2026-40153High· 7.4
5mo ago

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

▾ Twilightpraisonaiagents · praisonaiagentsEPSS 0.39%via OSV
CVE-2026-40160High
5mo ago

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

▾ Twilightpraisonaiagents · praisonaiagentsEPSS 0.40%via OSV
CVE-2026-40116High· 7.5
5mo ago

PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

▾ Twilightpraisonai · praisonaiEPSS 0.57%via OSV
CVE-2026-40151Medium· 5.3PoC
5mo ago

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

▾ Twilightpraisonai · praisonaiEPSS 0.84%via OSV
CVE-2026-40159Medium· 5.5
5mo ago

PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

▾ Sunlitpraisonai · praisonaiEPSS 0.18%via OSV
CVEs tagged “osv” — page 77 · VulnSea