CVE-2026-6608 - lm-sys fastchat Arena Side-by-Side View add_text control flow
CVE ID :CVE-2026-6608 Published : April 20, 2026, 6:16 a.m. | 1 hour, 31 minutes ago Description :A…
CVE
Updates on the latest vulnerabilities detected.
20K articles
CVE-2026-6607 - lm-sys fastchat Worker API Endpoint api_generate resource consumption
CVE ID :CVE-2026-6607 Published : April 20, 2026, 5:16 a.m. | 2 hours, 31 minutes ago Description :…
CVE-2026-6603 - modelscope agentscope _python.py execute_shell_command code injection
CVE ID :CVE-2026-6603 Published : April 20, 2026, 5:16 a.m. | 2 hours, 31 minutes ago Description :…
CVE-2026-6604 - modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery
CVE ID :CVE-2026-6604 Published : April 20, 2026, 5:16 a.m. | 2 hours, 31 minutes ago Description :…
CVE-2026-6605 - modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery
CVE ID :CVE-2026-6605 Published : April 20, 2026, 5:16 a.m. | 2 hours, 31 minutes ago Description :…
CVE-2026-6606 - modelscope agentscope _agent_base.py _process_audio_block server-side request forgery
CVE ID :CVE-2026-6606 Published : April 20, 2026, 5:16 a.m. | 2 hours, 31 minutes ago Description :…
CVE-2026-6602 - rickxy Hospital Management System his_admin_account.php unrestricted upload
CVE ID :CVE-2026-6602 Published : April 20, 2026, 4:16 a.m. | 3 hours, 30 minutes ago Description :…
CVE-2026-6601 - Lagom WHMCS Template Datatables resource consumption
CVE ID :CVE-2026-6601 Published : April 20, 2026, 4:16 a.m. | 3 hours, 30 minutes ago Description :…
CVE-2026-6600 - langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting
CVE ID :CVE-2026-6600 Published : April 20, 2026, 4:16 a.m. | 3 hours, 30 minutes ago Description :…
CVE-2026-6597 - langflow-ai langflow Flow Using API core.py has_api_terms credentials storage
CVE ID :CVE-2026-6597 Published : April 20, 2026, 3:16 a.m. | 31 minutes ago Description :A weaknes…
CVE-2026-6595 - ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection
CVE ID :CVE-2026-6595 Published : April 20, 2026, 3:16 a.m. | 31 minutes ago Description :A vulnera…