@cvereports
CVE Reports
Nothing here yet.
Nothing here yet.
12h ago · 2 min read · CVE-2026-40097: Index Out-of-Bounds Panic in Step CA TPM Attestation Vulnerability ID: CVE-2026-40097 CVSS Score: 3.7 Published: 2026-04-10 Step CA versions prior to 0.30.0-rc3 contain a vulnerability (CWE-129) where processing a malformed TPM Atte...
Join discussion12h ago · 2 min read · CVE-2026-40109: Improper Authentication in Flux notification-controller GCR Receiver Vulnerability ID: CVE-2026-40109 CVSS Score: 3.1 Published: 2026-04-10 The Flux notification-controller prior to version 1.8.3 suffers from improper authentication...
Join discussion13h ago · 2 min read · GHSA-6V7Q-WJVX-W8WG: Arbitrary FTP Command Execution via CRLF Injection in basic-ftp Vulnerability ID: GHSA-6V7Q-WJVX-W8WG CVSS Score: 8.1 Published: 2026-04-10 The basic-ftp npm package prior to version 5.2.2 contains a CRLF injection vulnerabilit...
Join discussion13h ago · 2 min read · GHSA-FFQ7-898W-9JC4: Stored Cross-Site Scripting via SVG Upload in DotNetNuke Vulnerability ID: GHSA-FFQ7-898W-9JC4 CVSS Score: 6.1 Published: 2026-04-10 DotNetNuke (DNN) suffers from a high-severity stored Cross-Site Scripting (XSS) vulnerability ...
Join discussion17h ago · 2 min read · CVE-2026-40194: Observable Timing Discrepancy in phpseclib SSH2 HMAC Verification Vulnerability ID: CVE-2026-40194 CVSS Score: 3.7 Published: 2026-04-10 CVE-2026-40194 identifies a timing side-channel vulnerability in the phpseclib library's SSH2 i...
Join discussion