OSV - Open Source Vulnerabilities

CVE-2026-69185

github.com/socketio/socket.io

Socket.IO: Zero-attachment Memory Exhaustion

16 hours ago

Fix available
Severity - 7.5 (High)

CVE-2026-66296

github.com/lud/oaskit

Reflected XSS in oaskit's default HTML error handler

16 hours ago

Fix available
Severity - 5.1 (Medium)

EEF-CVE-2026-66296

Hex/oaskit
github.com/lud/oaskit

Reflected XSS in oaskit's default HTML error handler

16 hours ago

Fix available
Severity - 5.1 (Medium)

CVE-2026-67598

github.com/emlog/emlog

Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

16 hours ago

No fix available
Severity - 9.1 (Critical)

CVE-2026-69153

github.com/postcss/postcss

PostCSS: incomplete fix of CVE-2026-45623 — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

18 hours ago

Fix available
Severity - 6.3 (Medium)

CVE-2026-18718

github.com/nationalsecurityagency/ghidra

Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State

18 hours ago

Fix available
Severity - 7.1 (High)

CVE-2026-69151

github.com/angular/angular

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

18 hours ago

Fix available
Severity - 7.6 (High)

CVE-2026-69149

github.com/angular/angular

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

19 hours ago

Fix available
Severity - 8.6 (High)

CVE-2026-67612

github.com/openemr/openemr

OpenEMR 8.2.0 Stored XSS via import_template.php Template Management

19 hours ago

No fix available
Severity - 4.8 (Medium)

CVE-2026-67611

github.com/openemr/openemr

OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

19 hours ago

No fix available
Severity - 8.6 (High)

CVE-2026-67610

github.com/openemr/openemr

OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access

19 hours ago

No fix available
Severity - 8.6 (High)

CVE-2026-39932

github.com/openemr/openemr

OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection

19 hours ago

No fix available
Severity - 9.4 (Critical)

CVE-2026-68945

github.com/angular/angular

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

19 hours ago

Fix available
Severity - 8.8 (High)

CVE-2026-39931

github.com/openemr/openemr

OpenEMR Authenticated SQL Injection via backup.php Import Feature

19 hours ago

No fix available
Severity - 8.6 (High)

CVE-2026-41453

github.com/krayin/laravel-crm

Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter

19 hours ago

Fix available
Severity - 8.7 (High)

CVE-2026-41452

github.com/krayin/laravel-crm

Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup

19 hours ago

No fix available
Severity - 9.3 (Critical)