JavaScript

React Router Session Path Traversal (CVE-2025-61686) newCVE-2025-61686webCRITICAL 9.1Unverified2026-09-03Node.js Permission Model Symlink Escape (CVE-2025-55130) newCVE-2025-55130binaryCRITICAL 9.1Unverified2026-09-03Firefox SpiderMonkey JIT Type Confusion (CVE-2026-10702) newCVE-2026-10702binaryMEDIUM 4.3Unverified2026-09-03Chrome V8 Type Confusion RCE (CVE-2026-5865) newCVE-2026-5865binaryHIGH 8.8Unverified2026-09-03safe-expr-eval: Mitigation Library for the expr-eval Unsafe eval() RCE (CVE-2025-12735) newCVE-2025-12735miscCRITICAL 9.8Patched2026-07-06WebKit Navigation API Cross-Port canIntercept Bypass (CVE-2026-20643) newCVE-2026-20643webMEDIUMUnverified2026-07-05TanStack Query — Unbounded Recursion Denial of Service in `replaceEqualDeep` (CVE-2026-26903) newCVE-2026-26903webMEDIUMPatched2026-07-05Saleor Stored XSS via Unrestricted File Upload (CVE-2026-23499) newCVE-2026-23499webHIGHPatched2026-07-05Realtime Collaboration Platform — CORS Misconfiguration Leading to Authenticated Data Exposure (CVE-2026-27579) newCVE-2026-27579webHIGH 7.4Unverified2026-07-05oRPC OpenAPI Reference Plugin Stored XSS via Unescaped Spec Embedding (CVE-2026-33331) newCVE-2026-33331webHIGHPatched2026-07-05Node.js protobufjs Dynamic Type Compilation RCE (CVE-2026-41242) newCVE-2026-41242webCRITICALPatched2026-07-05Math.js Expression Parser Sandbox Bypass RCE (CVE-2026-40897) newCVE-2026-40897webCRITICALPatched2026-07-05Next.js unstable_cache Object-Argument Cache-Key Collision newNone assigned as of 2026-07-03webHIGHUnverified2026-07-03Google Chromium V8 Out-of-Bounds Read/Write — Crash PoC (CVE-2026-11645) new KEVCVE-2026-11645webHIGH 8.8Unverified2026-07-01Confluence Post-Auth RCE - CVE-2024-21683 new EPSS 88%CVE-2024-21683webHIGH 8.3Unverified2026-05-17