DEV Community

# cve

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-1778: The Global Unverify: How One Line of Python Broke SageMaker TLS

CVE-2026-1778: The Global Unverify: How One Line of Python Broke SageMaker TLS

Comments
2 min read
CVE-2026-24771: Hono ErrorBoundary: When the Safety Net is the Trap

CVE-2026-24771: Hono ErrorBoundary: When the Safety Net is the Trap

Comments
2 min read
CVE-2026-24739: The Equalizer: How a Single Character Deleted Your Drive

CVE-2026-24739: The Equalizer: How a Single Character Deleted Your Drive

Comments
2 min read
GHSA-GPX9-96J6-PP87: The Call Is Coming From Inside The Container: TaskWeaver's Docker Escape

GHSA-GPX9-96J6-PP87: The Call Is Coming From Inside The Container: TaskWeaver's Docker Escape

Comments
2 min read
CVE-2024-4990: Magic Methods, Tragic Endings: RCE in Yii2 via Unsafe Reflection

CVE-2024-4990: Magic Methods, Tragic Endings: RCE in Yii2 via Unsafe Reflection

Comments
2 min read
CVE-2025-54997: The Janitor's Key: Turning OpenBao Audit Logs into RCE

CVE-2025-54997: The Janitor's Key: Turning OpenBao Audit Logs into RCE

Comments
2 min read
CVE-2026-22785: Orval Overload: From OpenAPI Spec to Remote Code Execution

CVE-2026-22785: Orval Overload: From OpenAPI Spec to Remote Code Execution

Comments
2 min read
CVE-2026-22817: Identity Theft on the Edge: Exploiting JWT Algorithm Confusion in Hono

CVE-2026-22817: Identity Theft on the Edge: Exploiting JWT Algorithm Confusion in Hono

Comments
2 min read
CVE-2026-23996: The Tell-Tale Delay: Timing Side-Channels in fastapi-api-key

CVE-2026-23996: The Tell-Tale Delay: Timing Side-Channels in fastapi-api-key

Comments
2 min read
GHSA-F2MF-Q878-GH58: Parsl Tongue: SQL Injection in High-Performance Computing Visualization

GHSA-F2MF-Q878-GH58: Parsl Tongue: SQL Injection in High-Performance Computing Visualization

Comments
2 min read
GHSA-VX9W-5CX4-9796: Crawl4AI: When Web Scrapers Become File Servers

GHSA-VX9W-5CX4-9796: Crawl4AI: When Web Scrapers Become File Servers

Comments
2 min read
CVE-2026-22708: Trust Issues: Bypassing Cursor AI's 'Safe Mode' via Shell Built-ins

CVE-2026-22708: Trust Issues: Bypassing Cursor AI's 'Safe Mode' via Shell Built-ins

Comments
2 min read
CVE-2026-22200: Paper Cuts to Pwnage: Turning osTicket PDF Exports into RCE

CVE-2026-22200: Paper Cuts to Pwnage: Turning osTicket PDF Exports into RCE

Comments
2 min read
CVE-2025-32444: Pickle Rick-Roll: Critical RCE in vLLM's Mooncake Integration

CVE-2025-32444: Pickle Rick-Roll: Critical RCE in vLLM's Mooncake Integration

Comments
2 min read
GHSA-RHFX-M35P-FF5J: Borrow Checker's Revenge: Stacked Borrows Violation in Rust's `lru` Crate

GHSA-RHFX-M35P-FF5J: Borrow Checker's Revenge: Stacked Borrows Violation in Rust's `lru` Crate

Comments
2 min read
CVE-2026-21441: The Invisible Avalanche: urllib3 Decompression Bomb

CVE-2026-21441: The Invisible Avalanche: urllib3 Decompression Bomb

Comments
2 min read
CVE-2026-23498: Shopware 6: Mapping Your Way to RCE via Twig Type Juggling

CVE-2026-23498: Shopware 6: Mapping Your Way to RCE via Twig Type Juggling

Comments
2 min read
CVE-2025-61984: Bash a Newline: The SSH ProxyCommand RCE You Didn't Know You Had

CVE-2025-61984: Bash a Newline: The SSH ProxyCommand RCE You Didn't Know You Had

Comments
2 min read
CVE-2025-66648: Vega's Visual Betrayal: Leaking the Window via Internal Functions

CVE-2025-66648: Vega's Visual Betrayal: Leaking the Window via Internal Functions

Comments
2 min read
CVE-2026-24785: The Sound of Silence: Breaking Clatter's Post-Quantum Promises (CVE-2026-24785)

CVE-2026-24785: The Sound of Silence: Breaking Clatter's Post-Quantum Promises (CVE-2026-24785)

Comments
2 min read
CVE-2025-69202: The Shared Hallucination: Authorization Bypass in axios-cache-interceptor

CVE-2025-69202: The Shared Hallucination: Authorization Bypass in axios-cache-interceptor

Comments
2 min read
CVE-2025-69256: Serverless Command Injection: When 'Experimental' Means 'Remote Shell'

CVE-2025-69256: Serverless Command Injection: When 'Experimental' Means 'Remote Shell'

Comments
2 min read
CVE-2026-21446: Bagisto's Open House: How an AJAX Header Stole the Admin Panel

CVE-2026-21446: Bagisto's Open House: How an AJAX Header Stole the Admin Panel

Comments
2 min read
CVE-2017-5638: The Billion Dollar Header: Inside the Apache Struts 2 'Equifax' RCE

CVE-2017-5638: The Billion Dollar Header: Inside the Apache Struts 2 'Equifax' RCE

Comments
2 min read
CVE-2025-69224: Absolute Zero Security: Smuggling Requests into aiohttp with the Kelvin Sign

CVE-2025-69224: Absolute Zero Security: Smuggling Requests into aiohttp with the Kelvin Sign

Comments
2 min read
loading...