CVE-2026-59731 — CVSS 8.2 (high): Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially decoded pathname after…
CVE-2026-62685 — CVSS 8.1 (high): File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory…
CVE-2025-64500 — CVSS 7.3 (high): Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component…
CVE-2025-9909 — CVSS 6.7 (medium): A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft…
CVE-2026-5222 — CVSS 6.5 (medium): Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting…
CVE-2025-66202 — CVSS 6.5 (medium): Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attacker to bypass…
CVE-2026-8384 — CVSS 5.3 (medium): In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt…
CVE-2026-15970 — CVSS 4.2 (medium): Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are vulnerable to an L7 intention authorization bypass when a service…
CVE-2025-47241 — CVSS 4.0 (medium): In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the…
CVE-2025-43916 — CVSS 3.4 (low): Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing userinfo in the…