Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 79 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-16130 |
4.8 (4.0)
4.4 (3.1)
4.4 (3.0)
|
nearai ironclaw write_file path_utils.rs validate_path… |
nearai |
ironclaw |
2026-07-18T17:15:10.968Z | 2026-07-18T17:15:10.968Z |
| CVE-2026-16129 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
princezuda SafestClaw Built-in Web shell.py ShellActio… |
princezuda |
SafestClaw |
2026-07-18T17:00:09.200Z | 2026-07-18T17:00:09.200Z |
| CVE-2026-16128 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw http_request swarm.c receiver_thread se… |
zevorn |
rt-claw |
2026-07-18T16:30:08.241Z | 2026-07-18T16:30:08.241Z |
| CVE-2026-16127 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw http_request tool_net.c claw_net_post s… |
zevorn |
rt-claw |
2026-07-18T16:00:08.864Z | 2026-07-18T16:00:08.864Z |
| CVE-2026-16126 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw Swarm RPC Receiver swarm.c handle_rpc_r… |
zevorn |
rt-claw |
2026-07-18T15:45:08.996Z | 2026-07-18T15:45:08.996Z |
| CVE-2025-3194 |
7.5 (3.1)
|
Versions of the package bigint-buffer from 0.0.0 … |
n/a |
bigint-buffer |
2025-04-04T05:00:05.529Z | 2026-07-18T15:25:27.001Z |
| CVE-2026-8657 |
8.2 (3.1)
|
Versions of the package jsondiffpatch before 0.7.… |
n/a |
jsondiffpatch |
2026-05-16T05:00:09.867Z | 2026-07-18T15:25:24.165Z |
| CVE-2026-16125 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
zevorn rt-claw http_request net.c claw_net_post server… |
zevorn |
rt-claw |
2026-07-18T15:15:08.064Z | 2026-07-18T15:15:08.064Z |
| CVE-2026-53226 |
N/A
|
gpio: rockchip: fix generic IRQ chip leak on remove |
Linux |
Linux |
2026-06-25T08:39:26.567Z | 2026-07-18T15:00:47.412Z |
| CVE-2026-53027 |
N/A
|
fs/ntfs3: fix missing run load for vcn0 in attr_data_g… |
Linux |
Linux |
2026-06-24T16:29:35.740Z | 2026-07-18T15:00:46.371Z |
| CVE-2026-46093 |
7.8 (3.1)
|
mm/vmalloc: take vmap_purge_lock in shrinker |
Linux |
Linux |
2026-05-27T12:58:43.458Z | 2026-07-18T15:00:45.339Z |
| CVE-2026-45945 |
8.8 (3.1)
|
iommu/vt-d: Fix race condition during PASID entry repl… |
Linux |
Linux |
2026-05-27T12:18:01.345Z | 2026-07-18T15:00:44.285Z |
| CVE-2025-21817 |
N/A
|
block: mark GFP_NOIO around sysfs ->store() |
Linux |
Linux |
2025-02-27T20:04:15.988Z | 2026-07-18T15:00:43.247Z |
| CVE-2025-21807 |
N/A
|
block: fix queue freeze vs limits lock order in sysfs … |
Linux |
Linux |
2025-02-27T20:00:59.560Z | 2026-07-18T15:00:42.201Z |
| CVE-2026-16124 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw web_fetch web_shared.go isPriv… |
nextlevelbuilder |
GoClaw |
2026-07-18T15:00:11.635Z | 2026-07-18T15:00:11.635Z |
| CVE-2026-16123 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw Invoke Endpoint tools_invoke.g… |
nextlevelbuilder |
GoClaw |
2026-07-18T14:45:08.338Z | 2026-07-18T14:45:08.338Z |
| CVE-2026-16122 |
4.8 (4.0)
4.3 (3.1)
4.3 (3.0)
|
nextlevelbuilder GoClaw exec_approval.go matchesAllowl… |
nextlevelbuilder |
GoClaw |
2026-07-18T14:30:09.020Z | 2026-07-18T14:30:09.020Z |
| CVE-2026-16121 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw exec_approval.go isSafeBin imp… |
nextlevelbuilder |
GoClaw |
2026-07-18T14:15:09.776Z | 2026-07-18T14:15:09.776Z |
| CVE-2026-9323 |
9.2 (4.0)
8.1 (3.1)
|
Insecure PRNG and Information Exposure in urwid Web Di… |
urwid |
urwid |
2026-07-18T13:51:06.021Z | 2026-07-18T13:51:06.021Z |
| CVE-2026-11826 |
8.7 (4.0)
8.8 (3.1)
|
OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master… |
openplcproject |
OpenPLC_v3 |
2026-07-18T13:35:35.639Z | 2026-07-18T13:35:35.639Z |
| CVE-2026-59173 |
N/A
|
Apache Traffic Server: DoS vulnerability in HTTP/2 via… |
Apache Software Foundation |
Apache Traffic Server |
2026-07-18T12:52:18.923Z | 2026-07-18T13:33:30.084Z |
| CVE-2026-16120 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
nextlevelbuilder GoClaw exec_approval.go extractBin na… |
nextlevelbuilder |
GoClaw |
2026-07-18T13:30:10.481Z | 2026-07-18T13:30:10.481Z |
| CVE-2025-71398 |
5.8 (4.0)
|
SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass |
surrealdb |
surrealdb |
2026-07-18T13:10:15.797Z | 2026-07-18T13:10:15.797Z |
| CVE-2025-71397 |
7.1 (4.0)
|
SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops |
surrealdb |
surrealdb |
2026-07-18T13:10:15.129Z | 2026-07-18T13:10:15.129Z |
| CVE-2025-71396 |
2.3 (4.0)
|
SurrealDB before 2.2.2 Denial of Service via JavaScrip… |
surrealdb |
surrealdb |
2026-07-18T13:10:14.441Z | 2026-07-18T13:10:14.441Z |
| CVE-2025-71395 |
7.1 (4.0)
|
SurrealDB before 2.2.2 Memory Exhaustion via string::replace |
surrealdb |
surrealdb |
2026-07-18T13:10:13.744Z | 2026-07-18T13:10:13.744Z |
| CVE-2025-71394 |
2.3 (4.0)
|
SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER |
surrealdb |
surrealdb |
2026-07-18T13:10:13.041Z | 2026-07-18T13:10:13.041Z |
| CVE-2025-71393 |
6 (4.0)
|
SurrealDB before 2.2.2 Memory Exhaustion via Nested Fu… |
surrealdb |
surrealdb |
2026-07-18T13:10:12.360Z | 2026-07-18T13:10:12.360Z |
| CVE-2025-71392 |
9.4 (4.0)
|
SurrealDB before 2.2.2 SurrealQL Injection via export |
surrealdb |
surrealdb |
2026-07-18T13:10:11.661Z | 2026-07-18T13:10:11.661Z |
| CVE-2025-71391 |
7.1 (4.0)
|
SurrealDB before 2.2.2 Denial of Service via /sql endpoint |
surrealdb |
surrealdb |
2026-07-18T13:10:10.977Z | 2026-07-18T13:10:10.977Z |