CVE ID :CVE-2026-93445 Published : Oct. 7, 2026, 12:01 a.m. | 1 hour, 27 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due…
CVE-2026-93675 – Langflow OSS is affected by multiple vulnerabilities
CVE ID :CVE-2026-93675 Published : Oct. 7, 2026, 12:01 a.m. | 1 hour, 27 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to…
CVE-2026-106503 – Backstage: Scaffolder action input authorization bypass
CVE ID :CVE-2026-106503 Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 11 minutes ago Description :Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the…
CVE-2026-106501 – Backstage: Sensitive information exposure in Scaffolder
CVE ID :CVE-2026-106501 Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 11 minutes ago Description :Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the…
CVE-2026-106500 – Backstage: Improper task state validation in Scaffolder backend
CVE ID :CVE-2026-106500 Published : Oct. 6, 2026, 10:17 p.m. | 1 hour, 11 minutes ago Description :Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the…
CVE-2026-106547 – HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata
CVE ID :CVE-2026-106547 Published : Oct. 6, 2026, 9:17 p.m. | 2 hours, 11 minutes ago Description :A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause…
CVE-2026-106488 – Backstage: Improper authentication in the OIDC provider
CVE ID :CVE-2026-106488 Published : Oct. 6, 2026, 9:17 p.m. | 2 hours, 11 minutes ago Description :Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected…
CVE-2026-105786 – Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier
CVE ID :CVE-2026-105786 Published : Oct. 6, 2026, 12:16 a.m. | 1 hour, 11 minutes ago Description :Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior…
CVE-2026-105783 – Joplin Web Clipper pairing allows cross-origin theft of a permanent API token
CVE ID :CVE-2026-105783 Published : Oct. 6, 2026, 12:16 a.m. | 1 hour, 11 minutes ago Description :Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior…
CVE-2026-105763 – Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL
CVE ID :CVE-2026-105763 Published : Oct. 6, 2026, 12:16 a.m. | 1 hour, 11 minutes ago Description :Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts…