Skip to content
OpenAdvisories

Archive

5 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /5 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.4
    CVE-2026-44405

    Paramiko rsakey.py allows the SHA-1 algorithm

    In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

    Paramiko Paramiko airflow-3 superset-6.0 Debian Ubuntu Wolfi PyPI
  • Low 2.0
    CVE-2026-34527

    Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword converts a SHA-1 digest to hexadecimal incorrectly. The high nibble of each byte is shifted right by 8 instead of 4, whi…

    sandboxie-plus Sandboxie
  • Low 2.6
    CVE-2026-7847

    chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values

    A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component Uploaded File Handler. Performing a m…

    chatchat-space Langchain-Chatchat langchain-chatchat PyPI
  • Low 2.6
    CVE-2026-7846

    chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou

    A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component OpenAI-Compatible File Upload API. Such manipulatio…

    chatchat-space Langchain-Chatchat langchain-chatchat PyPI
  • Low 2.6
    CVE-2026-7845

    chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash

    A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/dialogue/dialogue.py of the component Vision Chat Paste Image Handler. This manip…

    chatchat-space Langchain-Chatchat langchain-chatchat PyPI
  • Low 2.3
    CVE-2026-35192

    Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

    An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVERY_REQUEST` is `True`. A remote attacker can steal a user's session after that user visits a cached p…

    djangoproject Django python-django django Debian Ubuntu Alpine Wolfi PyPI
  • Low 2.5
    CVE-2026-43529

    OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator

    OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass workspace boundary checks. An attacker with workspace write access can race-condition swap the t…

    OpenClaw OpenClaw openclaw npm