Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84381 | high | 8.1 | No | HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_pro... | 2026-09-09 |
| CVE-2026-84380 | medium | 5.6 | No | HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx2/httpx2/_models.py can add a body-deriv... | 2026-09-09 |
| CVE-2026-84379 | medium | 5.3 | No | HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in src/httpx2/httpx2/_multipart.py directly... | 2026-09-09 |
| CVE-2026-84378 | medium | 5.9 | No | HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/_sse.... | 2026-09-09 |
| CVE-2026-84377 | medium | 6.5 | No | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.2, any authenticated... | 2026-09-09 |
| CVE-2026-49833 | medium | 5.5 | No | DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before... | 2026-09-09 |
| CVE-2026-49832 | high | 8.0 | No | DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before... | 2026-09-09 |
| CVE-2026-49831 | medium | 5.5 | No | DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.... | 2026-09-09 |
| CVE-2026-49830 | medium | 4.4 | No | DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.... | 2026-09-09 |
| CVE-2026-53639 | not reported | — | No | Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET... | 2026-09-09 |
| CVE-2026-53637 | medium | 6.5 | No | Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contai... | 2026-09-09 |
| CVE-2026-49249 | not reported | — | No | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications.... | 2026-09-09 |
| CVE-2026-84376 | not reported | — | No | Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path from request pathnames... | 2026-09-09 |
| CVE-2026-82404 | high | 8.3 | No | TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a __pro... | 2026-09-09 |
| CVE-2026-79756 | not reported | — | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command... | 2026-09-09 |
| CVE-2026-79755 | high | 8.0 | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, t... | 2026-09-09 |
| CVE-2026-79754 | not reported | — | No | Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboar... | 2026-09-09 |
| CVE-2026-55421 | medium | 6.8 | No | Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-sup... | 2026-09-09 |
| CVE-2026-53636 | medium | 4.7 | No | Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has... | 2026-09-09 |
| CVE-2026-53635 | high | 7.6 | No | Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set_course_... | 2026-09-09 |