Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 1 CVE-2026-12065

Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme_CVE-2026-12065

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of the component WebVi...

Groww Stock, Mutual Fund, Gold App 20260805 CVE
LOW 2.3 CVE-2026-46342

Nuxt: `__nuxt_island` endpoint does not bind responses to request props, enabling shared-cache poisoning_CVE-2026-46342

Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.1.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/ni...

nuxt nuxt >= 3.1.0, < 3.21.6 CVE
LOW 2.1 CVE-2026-48485

Quest Bot: Stored warn reasons can still trigger bot-powered mass mentions through `/warns`._CVE-2026-48485

Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the latest release suppresses mentions when creating, unbanning, unwarning, kicking...

duck-organization questbot < 1.1.6 CVE
LOW 3.1 CVE-2026-12032

CVE-2026-12032_CVE-2026-12032

Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the ren...

Google Chrome 149.0.7827.115 CVE
LOW 3.1 CVE-2026-12017

CVE-2026-12017_CVE-2026-12017

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer proc...

Google Chrome 149.0.7827.115 CVE
LOW 2.3 CVE-2026-47188

Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions._CVE-2026-47188

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the latest release suppresses me...

duck-organization quest-bot < 1.0.5 CVE
LOW 2.3 CVE-2026-47175

Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings_CVE-2026-47175

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo...

duck-organization quest-bot < 1.0.4 CVE
LOW 3.7 CVE-2026-44489

Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix_CVE-2026-44489

Axios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by utils.merge() (e.g., conf...

axios axios 1.15.2 CVE
LOW 2.6 CVE-2026-9694

Improper Neutralization of Substitution Characters in GitLab_CVE-2026-9694

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that u...

GitLab GitLab 15.9 CVE
LOW 3.7 CVE-2026-6976

Authorization Bypass Through User-Controlled Key in GitLab_CVE-2026-6976

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that u...

GitLab GitLab 15.9 CVE