Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-61594 | critical | 9.1 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the l... | 2026-09-30 |
| CVE-2026-61592 | high | 7.4 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, SSE s... | 2026-09-30 |
| CVE-2026-61591 | high | 8.1 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, for v... | 2026-09-30 |
| CVE-2026-63506 | high | 8.8 | No | Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-con... | 2026-09-30 |
| CVE-2026-62997 | not reported | — | No | Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in ked... | 2026-09-30 |
| CVE-2026-81870 | not reported | — | No | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider... | 2026-09-30 |
| CVE-2026-81176 | medium | 5.3 | No | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2,... | 2026-09-30 |
| CVE-2026-77360 | not reported | — | No | oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS... | 2026-09-30 |
| CVE-2026-84993 | medium | 6.5 | No | MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to 6.6.16 and 7.1.7, the shared... | 2026-09-30 |
| CVE-2026-61595 | high | 7.7 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djus... | 2026-09-30 |
| CVE-2026-61593 | high | 8.1 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the S... | 2026-09-30 |
| CVE-2026-82410 | not reported | — | No | Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, PocketBase's panic-recovery middleware covers regular r... | 2026-09-30 |
| CVE-2026-63128 | high | 7.5 | No | RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp... | 2026-09-30 |
| CVE-2026-63127 | high | 8.2 | No | RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transp... | 2026-09-30 |
| CVE-2026-61598 | not reported | — | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, `djus... | 2026-09-30 |
| CVE-2026-61590 | high | 7.4 | No | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust... | 2026-09-30 |
| CVE-2026-61560 | critical | 9.8 | No | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes a... | 2026-09-30 |
| CVE-2026-88065 | high | 7.5 | No | `tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have... | 2026-09-30 |
| CVE-2026-61568 | critical | 9.6 | No | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint witho... | 2026-09-30 |
| CVE-2026-61559 | critical | 9.6 | No | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the enviro... | 2026-09-30 |