Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-55844

Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data_CVE-2026-55844

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores ...

home-assistant core < 2025.5.0 CVE
HIGH 7.7 CVE-2026-55607

Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution_CVE-2026-55607

Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and n...

anthropics claude-code >= 2.1.38, < 2.1.163 CVE
MEDIUM 4.4 CVE-2026-46406

Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write_CVE-2026-46406

Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path (...

anthropics claude-code >= 2.1.59, < 2.1.128 CVE
MEDIUM 5.3 CVE-2026-13579

itsourcecode Hospital Management System patientchangepassword.php sql injection_CVE-2026-13579

A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /pa...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 5.3 CVE-2026-13578

itsourcecode Hospital Management System patientdetail.php sql injection_CVE-2026-13578

A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of t...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 4.8 CVE-2026-13574

llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow_CVE-2026-13574

A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/I...

llvm llvm-project 22.1.0 CVE
MEDIUM 4.8 CVE-2026-13573

llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow_CVE-2026-13573

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTa...

llvm llvm-project 22.1.0 CVE
MEDIUM 5.3 CVE-2026-13572

itsourcecode Hospital Management System insertbillingrecord.php sql injection_CVE-2026-13572

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbilli...

itsourcecode Hospital Management System 1.0 CVE
MEDIUM 6.9 CVE-2026-13571

SourceCodester Simple Food Ordering System cart.php logic error_CVE-2026-13571

A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executi...

SourceCodester Simple Food Ordering System 1.0 CVE
HIGH 7.5 CVE-2026-36478

CVE-2026-36478_CVE-2026-36478

An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a denial of service via the DnsServerApp.exe, DnsServerApp.dl...

n/a n/a n/a CVE