DEV Community

# cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GHSA-V8W9-8MX6-G223: GHSA-v8w9-8mx6-g223: Prototype Pollution in Hono parseBody Utility

GHSA-V8W9-8MX6-G223: GHSA-v8w9-8mx6-g223: Prototype Pollution in Hono parseBody Utility

1
Comments
2 min read
CVE-2026-25253: How 42,000+ OpenClaw Instances Got Pwned (And Why Your AI Assistant Is a Security Disaster)

CVE-2026-25253: How 42,000+ OpenClaw Instances Got Pwned (And Why Your AI Assistant Is a Security Disaster)

Comments
7 min read
OpenClaw Security Catastrophe: CVE-2026-25253 and the Largest AI Privacy Breach in History

OpenClaw Security Catastrophe: CVE-2026-25253 and the Largest AI Privacy Breach in History

Comments
20 min read
CVE-2026-30241: CVE-2026-30241: Missing Query Depth Validation in Mercurius GraphQL Subscriptions

CVE-2026-30241: CVE-2026-30241: Missing Query Depth Validation in Mercurius GraphQL Subscriptions

1
Comments
2 min read
GHSA-QR2G-P6Q7-W82M: GHSA-qr2g-p6q7-w82m: Critical Payment Verification Bypass in Coinbase x402 SDK (Solana)

GHSA-QR2G-P6Q7-W82M: GHSA-qr2g-p6q7-w82m: Critical Payment Verification Bypass in Coinbase x402 SDK (Solana)

1
Comments
2 min read
GHSA-W75W-9QV4-J5XJ: GHSA-W75W-9QV4-J5XJ: Path Traversal in dbt-common Archive Extraction

GHSA-W75W-9QV4-J5XJ: GHSA-W75W-9QV4-J5XJ: Path Traversal in dbt-common Archive Extraction

1
Comments
2 min read
CVE-2026-22719: VMware Aria Operations Command Injection Now Actively Exploited

CVE-2026-22719: VMware Aria Operations Command Injection Now Actively Exploited

Comments
7 min read
CISA Adds VMware Aria Operations RCE Flaw to KEV Catalog After Active Exploitation

CISA Adds VMware Aria Operations RCE Flaw to KEV Catalog After Active Exploitation

Comments
4 min read
CVE-2026-26194: CVE-2026-26194: Command Option Injection in Gogs Release Deletion

CVE-2026-26194: CVE-2026-26194: Command Option Injection in Gogs Release Deletion

1
Comments
2 min read
CVE-2026-28415: Open Redirect in Gradio OAuth Flow Enables Phishing Attacks

CVE-2026-28415: Open Redirect in Gradio OAuth Flow Enables Phishing Attacks

Comments
2 min read
CVE-2026-28426: Chain Reaction: Stored XSS and Antlers Template Injection in Statamic Control Panel

CVE-2026-28426: Chain Reaction: Stored XSS and Antlers Template Injection in Statamic Control Panel

Comments
2 min read
CVE-2026-28414: Gradio Path Traversal: Exploiting Python 3.13 Path Semantics on Windows

CVE-2026-28414: Gradio Path Traversal: Exploiting Python 3.13 Path Semantics on Windows

Comments
2 min read
CVE-2026-28351: CVE-2026-28351: Uncontrolled Resource Consumption in pypdf RunLengthDecode

CVE-2026-28351: CVE-2026-28351: Uncontrolled Resource Consumption in pypdf RunLengthDecode

1
Comments
2 min read
GHSA-J8CJ-HW74-64JV: Critical Unsoundness in Rust 'hivex' Crate Leading to Double-Free and Use-After-Free

GHSA-J8CJ-HW74-64JV: Critical Unsoundness in Rust 'hivex' Crate Leading to Double-Free and Use-After-Free

1
Comments
2 min read
GHSA-GQ83-8Q7Q-9HFX: GHSA-GQ83-8Q7Q-9HFX: Race Condition in OpenClaw Sandbox Registry Leads to Data Corruption

GHSA-GQ83-8Q7Q-9HFX: GHSA-GQ83-8Q7Q-9HFX: Race Condition in OpenClaw Sandbox Registry Leads to Data Corruption

1
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.