1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 10, 2026, 2:25 AM 16,371 active 1,443 known exploited

Catalog summary

16,371

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 10, 2026, 2:25 AM 16,371 active 1,443 known exploited

Catalog summary

16,371

Active CVEs

8,462

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 4,451–4,500 of 16,371 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-49146High
    App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc
    CVSS 7.5
    PETDANCE/App::Ackgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  2. CVE-2026-55668Medium
    File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope
    CVSS 6.3
    filebrowser/filebrowsergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  3. CVE-2026-49145High
    App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc
    CVSS 7.5
    PETDANCE/App::Ackgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  4. CVE-2026-54652High
    Frigate viewer can read logs exposing admin and camera credentials
    CVSS 8.1
    blakeblackshear/frigategeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  5. CVE-2026-55873Medium
    SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets
    CVSS 4.3
    seaweedfs/seaweedfsgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  6. CVE-2026-55874High
    SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
    CVSS 7.7
    seaweedfs/seaweedfsgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  7. CVE-2026-15067High
    Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover
    CVSS 8.8
    Snowflake/Terraform Provider for Snowflakegeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  8. CVE-2026-15044Medium
    Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis
    CVSS 6.3
    Affected software not mappedEcosystem not listed
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 14, 2026View HOL analysis
  9. CVE-2026-15062Critical
    SQL Injection in Snowflake Snowpark Python SDK
    CVSS 9.6
    Snowflake/Snowpark Python SDKgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  10. CVE-2026-15036Medium
    Harness gitspaces Endpoint list_all.go getAuthorizedSpaces authorization
    CVSS 4.3
    n/a/Harnessgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  11. CVE-2026-11903High
    Stored XSS in MOVEit Transfer Ad Hoc module
    CVSS 8.0
    Progress/MOVEit Transfergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  12. CVE-2026-10699High
    Memory leak in SFTP service can result in a denial of service in MOVEit Transfer
    CVSS 7.5
    Progress/MOVEit Transfergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  13. CVE-2026-10698High
    Table scope bypass vulnerability in custom reports
    CVSS 7.2
    Progress/MOVEit Transfergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  14. CVE-2026-10706High
    Exposure of Sensitive Information to an Unauthorized attacker
    CVSS 7.5
    Adalo No-Code App Builder/App Buildergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  15. CVE-2026-10708High
    Insufficiently Protected Credentials
    CVSS 7.5
    Adalo No-Code App Builder/App Buildergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  16. CVE-2026-15035Medium
    bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection
    CVSS 5.3
    bentoml/OpenLLMgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  17. CVE-2026-59257High
    n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation
    CVSS 8.8
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  18. CVE-2026-59253Medium
    n8n - Improper Authorization in Workflow Assignment to Folders
    CVSS 5.3
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  19. CVE-2026-58657Medium
    Grav - Stored CSS Injection via Markdown Image resize() Action
    CVSS 4.8
    Grav/Gravgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  20. CVE-2026-58656High
    Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter
    CVSS 7.5
    getgrav/gravgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  21. CVE-2026-58654Medium
    Grav - Arbitrary File Upload via Avatar Endpoint
    CVSS 4.3
    Grav/Gravgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  22. CVE-2026-56778Medium
    n8n - Authorization Bypass in Public API Execution Retry Endpoint
    CVSS 6.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  23. CVE-2026-56776High
    n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint
    CVSS 7.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  24. CVE-2026-56775Medium
    n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints
    CVSS 5.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  25. CVE-2026-56374Low
    ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter
    CVSS 3.3
    ImageMagick/ImageMagickgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  26. CVE-2026-56362Low
    ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization
    CVSS 3.3
    ImageMagick/ImageMagickgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  27. CVE-2026-56360Medium
    n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger
    CVSS 4.0
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  28. CVE-2026-56359Medium
    n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL
    CVSS 5.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  29. CVE-2026-56298Medium
    Capgo - EXIF Metadata Exposure in App Information Image Upload
    CVSS 4.3
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  30. CVE-2026-56297High
    FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback
    CVSS 7.0
    FreeRDP/FreeRDPgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  31. CVE-2026-56293Medium
    Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()
    CVSS 5.4
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  32. CVE-2026-56284Medium
    Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC
    CVSS 5.3
    Cap-go/capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  33. CVE-2026-56283Medium
    Capgo - HTML Injection Leading to Open Redirection in Organization Settings
    CVSS 5.4
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  34. CVE-2026-56273Medium
    Flowise - Path Traversal in Vector Store basePath Parameter
    CVSS 6.5
    Flowise/Flowisegeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  35. CVE-2026-56250High
    Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions
    CVSS 7.5
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  36. CVE-2026-56246High
    Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance
    CVSS 8.1
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  37. CVE-2026-56226High
    Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC
    CVSS 7.5
    Cap-go/capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  38. CVE-2026-56220Medium
    Capgo - Unauthorized Manifest Insertion via Read-Only Org Member
    CVSS 6.5
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  39. CVE-2026-56217Medium
    Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update
    CVSS 4.3
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  40. CVE-2026-15053High
    Tanium addressed a denial of service vulnerability in Tanium Server.
    CVSS 7.5
    Tanium/Tanium Servergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  41. CVE-2026-53480Low
    CISA ADP Vulnrichment
    CVSS 2.7
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  42. CVE-2026-53482High
    CISA ADP Vulnrichment
    CVSS 7.5
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  43. CVE-2026-22927High
    CISA ADP Vulnrichment
    CVSS 7.8
    Omnissa/Omnissa Workspace ONE® Tunnel for Windowsgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026View HOL analysis
  44. CVE-2026-60125Medium
    importModule function in MISP ignores per-organisation import module restrictions
    CVSS 5.3
    misp/mispgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  45. CVE-2026-56086High
    CISA ADP Vulnrichment
    CVSS 8.8
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  46. CVE-2026-60124Medium
    MISP importModule missing authorization allows read-only users to modify events via misp_standard imports
    CVSS 5.3
    misp/mispgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  47. CVE-2026-15034Medium
    flask-dashboard Flask-MonitoringDashboard cross-site request forgery
    CVSS 4.3
    flask-dashboard/Flask-MonitoringDashboardgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  48. CVE-2026-44840High
    Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
    CVSS 7.5
    dgraph-io/dgraph, github.com/dgraph-io/dgraph +2generic · go
    PublishedJul 8, 2026First seen at HOL Jun 29, 2026Updated Jul 23, 2026 Fix availableView HOL analysis
  49. CVE-2026-41122High
    CISA ADP Vulnrichment
    CVSS 7.1
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  50. CVE-2026-54061Critical
    Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import
    CVSS 9.1
    dgraph-io/dgraphgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
Page 90 of 328
Previous8889909192Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,462

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 4,451–4,500 of 16,371 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-49146High
    App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc
    CVSS 7.5
    PETDANCE/App::Ackgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  2. CVE-2026-55668Medium
    File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope
    CVSS 6.3
    filebrowser/filebrowsergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  3. CVE-2026-49145High
    App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc
    CVSS 7.5
    PETDANCE/App::Ackgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  4. CVE-2026-54652High
    Frigate viewer can read logs exposing admin and camera credentials
    CVSS 8.1
    blakeblackshear/frigategeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  5. CVE-2026-55873Medium
    SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets
    CVSS 4.3
    seaweedfs/seaweedfsgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  6. CVE-2026-55874High
    SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read
    CVSS 7.7
    seaweedfs/seaweedfsgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  7. CVE-2026-15067High
    Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover
    CVSS 8.8
    Snowflake/Terraform Provider for Snowflakegeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  8. CVE-2026-15044Medium
    Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis
    CVSS 6.3
    Affected software not mappedEcosystem not listed
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 14, 2026View HOL analysis
  9. CVE-2026-15062Critical
    SQL Injection in Snowflake Snowpark Python SDK
    CVSS 9.6
    Snowflake/Snowpark Python SDKgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  10. CVE-2026-15036Medium
    Harness gitspaces Endpoint list_all.go getAuthorizedSpaces authorization
    CVSS 4.3
    n/a/Harnessgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  11. CVE-2026-11903High
    Stored XSS in MOVEit Transfer Ad Hoc module
    CVSS 8.0
    Progress/MOVEit Transfergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  12. CVE-2026-10699High
    Memory leak in SFTP service can result in a denial of service in MOVEit Transfer
    CVSS 7.5
    Progress/MOVEit Transfergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  13. CVE-2026-10698High
    Table scope bypass vulnerability in custom reports
    CVSS 7.2
    Progress/MOVEit Transfergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  14. CVE-2026-10706High
    Exposure of Sensitive Information to an Unauthorized attacker
    CVSS 7.5
    Adalo No-Code App Builder/App Buildergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  15. CVE-2026-10708High
    Insufficiently Protected Credentials
    CVSS 7.5
    Adalo No-Code App Builder/App Buildergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  16. CVE-2026-15035Medium
    bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection
    CVSS 5.3
    bentoml/OpenLLMgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  17. CVE-2026-59257High
    n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation
    CVSS 8.8
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  18. CVE-2026-59253Medium
    n8n - Improper Authorization in Workflow Assignment to Folders
    CVSS 5.3
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  19. CVE-2026-58657Medium
    Grav - Stored CSS Injection via Markdown Image resize() Action
    CVSS 4.8
    Grav/Gravgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  20. CVE-2026-58656High
    Grav API Plugin - Cross-Origin Admin Account Takeover via CORS Wildcard and JWT Query Parameter
    CVSS 7.5
    getgrav/gravgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  21. CVE-2026-58654Medium
    Grav - Arbitrary File Upload via Avatar Endpoint
    CVSS 4.3
    Grav/Gravgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  22. CVE-2026-56778Medium
    n8n - Authorization Bypass in Public API Execution Retry Endpoint
    CVSS 6.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  23. CVE-2026-56776High
    n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint
    CVSS 7.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  24. CVE-2026-56775Medium
    n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints
    CVSS 5.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  25. CVE-2026-56374Low
    ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter
    CVSS 3.3
    ImageMagick/ImageMagickgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  26. CVE-2026-56362Low
    ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization
    CVSS 3.3
    ImageMagick/ImageMagickgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  27. CVE-2026-56360Medium
    n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger
    CVSS 4.0
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  28. CVE-2026-56359Medium
    n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL
    CVSS 5.4
    n8n/n8ngeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  29. CVE-2026-56298Medium
    Capgo - EXIF Metadata Exposure in App Information Image Upload
    CVSS 4.3
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  30. CVE-2026-56297High
    FreeRDP - Use-After-Free via Race Condition in DRDYNVC Channel Callback
    CVSS 7.0
    FreeRDP/FreeRDPgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  31. CVE-2026-56293Medium
    Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()
    CVSS 5.4
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  32. CVE-2026-56284Medium
    Capgo - Unauthenticated Metrics Disclosure via get_total_metrics RPC
    CVSS 5.3
    Cap-go/capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  33. CVE-2026-56283Medium
    Capgo - HTML Injection Leading to Open Redirection in Organization Settings
    CVSS 5.4
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  34. CVE-2026-56273Medium
    Flowise - Path Traversal in Vector Store basePath Parameter
    CVSS 6.5
    Flowise/Flowisegeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  35. CVE-2026-56250High
    Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions
    CVSS 7.5
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  36. CVE-2026-56246High
    Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance
    CVSS 8.1
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  37. CVE-2026-56226High
    Capgo - Unauthenticated Organization Data Disclosure via get_orgs_v6 RPC
    CVSS 7.5
    Cap-go/capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  38. CVE-2026-56220Medium
    Capgo - Unauthorized Manifest Insertion via Read-Only Org Member
    CVSS 6.5
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  39. CVE-2026-56217Medium
    Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update
    CVSS 4.3
    Capgo/Capgogeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  40. CVE-2026-15053High
    Tanium addressed a denial of service vulnerability in Tanium Server.
    CVSS 7.5
    Tanium/Tanium Servergeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026 Fix availableView HOL analysis
  41. CVE-2026-53480Low
    CISA ADP Vulnrichment
    CVSS 2.7
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  42. CVE-2026-53482High
    CISA ADP Vulnrichment
    CVSS 7.5
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  43. CVE-2026-22927High
    CISA ADP Vulnrichment
    CVSS 7.8
    Omnissa/Omnissa Workspace ONE® Tunnel for Windowsgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 10, 2026View HOL analysis
  44. CVE-2026-60125Medium
    importModule function in MISP ignores per-organisation import module restrictions
    CVSS 5.3
    misp/mispgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  45. CVE-2026-56086High
    CISA ADP Vulnrichment
    CVSS 8.8
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026 Fix availableView HOL analysis
  46. CVE-2026-60124Medium
    MISP importModule missing authorization allows read-only users to modify events via misp_standard imports
    CVSS 5.3
    misp/mispgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 9, 2026View HOL analysis
  47. CVE-2026-15034Medium
    flask-dashboard Flask-MonitoringDashboard cross-site request forgery
    CVSS 4.3
    flask-dashboard/Flask-MonitoringDashboardgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
  48. CVE-2026-44840High
    Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
    CVSS 7.5
    dgraph-io/dgraph, github.com/dgraph-io/dgraph +2generic · go
    PublishedJul 8, 2026First seen at HOL Jun 29, 2026Updated Jul 23, 2026 Fix availableView HOL analysis
  49. CVE-2026-41122High
    CISA ADP Vulnrichment
    CVSS 7.1
    Dell/PowerProtect Data Domaingeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026 Fix availableView HOL analysis
  50. CVE-2026-54061Critical
    Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import
    CVSS 9.1
    dgraph-io/dgraphgeneric
    PublishedJul 8, 2026First seen at HOL Jul 8, 2026Updated Jul 8, 2026View HOL analysis
Page 90 of 328
Previous8889909192Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard