🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-123567 MEDIUM Sveltejs devalue before 5.6.4 contains a prototype injection vulnerability that allows attackers to inject __proto__ own properties into objects retur... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123566 HIGH Sveltejs devalue before 5.9.3 contains a denial of service vulnerability that allows attackers to cause CPU amplification by supplying sparse arrays t... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123565 HIGH Sveltejs devalue before 5.9.3 contains a resource exhaustion vulnerability where repeated primitive strings cause quadratic expansion in the uneval fu... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123564 HIGH Sveltejs devalue from 1.0.0 before 5.9.3 contains a memory exhaustion flaw in uneval, whose generated code for sparse arrays allocates memory proporti... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123563 HIGH Devalue before 5.9.3 contains a validation bypass vulnerability that allows custom ArrayBuffer revivers to skip typed-array allocation checks in the p... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123562 HIGH devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing multiple promises, a later p... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123561 MEDIUM devalue before 5.9.3 allows malformed null-prototype object keys to bypass parse's __proto__ rejection through property-key coercion, an incomple... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123560 HIGH Zebra before 7.0.0 contains an incomplete cleanup vulnerability that allows unauthenticated peers to stall initial sync by serving a forged checkpoint... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123559 HIGH Zebra before 7.0.0 contains an inefficient algorithmic complexity vulnerability that allows unauthenticated peers to exhaust verification threads by s... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123558 HIGH Zebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by cancelling the verifier ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123557 HIGH ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote peers to abort the node by ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123556 MEDIUM ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections a... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123555 HIGH Zebra from 2.3.0 before 7.0.0 contains a denial of service vulnerability that allows unauthenticated peers to evade misbehavior scoring by sending tra... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123554 HIGH Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because Transaction::coinbase_spend_restriction() rebui... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123553 MEDIUM OpenAM before 16.1.4 ships built-in identities in the Top Level Realm (demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth) with passwords t... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123552 MEDIUM OpenAM before 16.1.4 contains a server-side request forgery vulnerability in certificate CRL checking that fetches CRLs from the distribution point na... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123551 CRITICAL OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session tokens fr... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123550 CRITICAL OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP (PA... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123549 CRITICAL OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set restricted attr... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123548 LOW OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and name-identifier management, SAM... | LOW | ????? | ????? | NVD | 6 days ago |