Skip to content
OpenAdvisories

Archive

4 August 2026

Vulnerabilities first published on this day (UTC), newest first.

← July 2026 2026 / August /4 September 2026 →
  1. 1157
  2. 250
  3. 3313
  4. 4274
  5. 5429
  6. 6493
  7. 7215
  8. 863
  9. 982
  10. 10671
  11. 11937
  12. 12436
  13. 13606
  14. 14202
  15. 15925
  16. 16111
  17. 17344
  18. 181413
  19. 19680
  20. 20495
  21. 21258
  22. 22239
  23. 2342
  24. 24319
  25. 25770
  26. 26399
  27. 27438
  28. 28497
  29. 2966
  30. 3092
  31. 31358
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-70481 Public exploit

    Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wro…

    open-webui open-webui open-webui PyPI
  • Medium 6.7
    CVE-2026-48121 Public exploit

    @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

    @langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from con…

    langchain-ai langgraphjs @langchain/langgraph-checkpoint-mongodb npm
  • Medium 6.5
    CVE-2026-8508 Public exploit

    An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions throu…

    Zyxel WAX650S firmware Network devices
  • Medium 5.3
    CVE-2026-58041 Public exploit

    A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to con…

    Node.js node nodejs nodejs Debian Ubuntu Alpine Wolfi
  • Medium 6.2
    CVE-2026-58045 Public exploit

    A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:…

    Node.js node nodejs nodejs Debian Ubuntu Alpine Wolfi
  • Medium 5.9
    CVE-2026-58042 Public exploit

    A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Re…

    Node.js node nodejs nodejs Debian Ubuntu Alpine Wolfi