Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84372 | critical | 9.8 | No | Predis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until version 3.3.0, pipeline handling on... | 2026-09-09 |
| CVE-2026-75604 | critical | 9.0 | No | Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Page... | 2026-09-09 |
| CVE-2026-84371 | medium | 5.4 | No | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From... | 2026-09-09 |
| CVE-2026-84370 | high | 8.2 | No | SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions... | 2026-09-09 |
| CVE-2026-84369 | medium | 6.1 | No | SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions... | 2026-09-09 |
| CVE-2026-84368 | low | 3.7 | No | joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through... | 2026-09-09 |
| CVE-2026-84367 | low | 3.7 | No | joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.5 and 18.2.4, joi's lib/types/keys.js intern... | 2026-09-09 |
| CVE-2026-84366 | high | 7.4 | No | Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S... | 2026-09-09 |
| CVE-2026-84365 | medium | 6.5 | No | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.12 until 4.13.5, the fix released for CVE-20... | 2026-09-09 |
| CVE-2026-84364 | medium | 5.3 | No | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, when parseBody() expands dot-separate... | 2026-09-09 |
| CVE-2026-84363 | medium | 5.9 | No | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.5, Hono's query helpers treat a question... | 2026-09-09 |
| CVE-2026-84361 | not reported | — | No | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Compos... | 2026-09-09 |
| CVE-2026-63435 | medium | 5.3 | No | Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.q_value_deco... | 2026-09-09 |
| CVE-2026-84308 | medium | 6.3 | No | phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeFi... | 2026-09-09 |
| CVE-2026-84307 | low | 3.7 | No | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.5 and 5.7.5, packages/panels/sr... | 2026-09-09 |
| CVE-2026-84306 | medium | 6.5 | No | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/sr... | 2026-09-09 |
| CVE-2026-84305 | not reported | — | No | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.format(sql, reindent=True) and sqlformat --reindent rout... | 2026-09-09 |
| CVE-2026-84304 | not reported | — | No | gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame... | 2026-09-09 |
| CVE-2026-84303 | not reported | — | No | gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does no... | 2026-09-09 |
| CVE-2026-84382 | high | 7.5 | No | HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_decoders.py fully inf... | 2026-09-09 |