Latest vulnerabilities
Newest first, late arrivals on top. Also a feed.
-
6.3
-
8.8CVE-2026-16511 Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memorymaintainer advisory
-
6.5
-
7.5
-
4.3
-
4.3
-
7.2
-
4.2
-
3.1
-
6.5
-
4.1
-
4.3
-
5.0
-
7.4
-
6.5
-
7.5
-
4.3
-
4.3
-
3.7
-
6.5
-
6.5
-
4.3
-
6.4GHSA-hwq2-v29r-p69r better-auth: Email-change links stay valid after the address changes handsnpm unreviewed · maintainers only
-
6.8GHSA-g95c-wqvr-8c3j better-auth: Admin roles with user:update can change another user's phone numbernpm unreviewed · maintainers only
-
7.3
-
5.3GHSA-5crp-j778-fgmr Double-encoded paths bypass middleware via the static-assets incremental cache and the regional cachenpm unreviewed · maintainers only
-
5.9GHSA-3grv-rf6r-fj3x Middleware bypass for public files served by the assets binding at other paths (html_handling aliases, encoding redirects) when run_worker_first is enablednpm unreviewed · maintainers only
-
7.1
-
6.9
-
6.3