Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 CVE-2026-13031

CVE-2026-13031_CVE-2026-13031

Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...

Google Chrome 149.0.7827.197 CVE
HIGH 7.5 CVE-2026-13029

CVE-2026-13029_CVE-2026-13029

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious exten...

Google Chrome 149.0.7827.197 CVE
HIGH 8.8 CVE-2026-13027

CVE-2026-13027_CVE-2026-13027

Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corruption via a crafte...

Google Chrome 149.0.7827.197 CVE
HIGH 8.8 CVE-2026-13026

CVE-2026-13026_CVE-2026-13026

Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to potentially exploit heap corrupt...

Google Chrome 149.0.7827.197 CVE
HIGH 8.3 CVE-2026-13025

CVE-2026-13025_CVE-2026-13025

Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to potentially perform...

Google Chrome 149.0.7827.197 CVE
HIGH 7.6 CVE-2026-55583

Twenty: Cross-workspace IDOR in AgentTurnResolver_CVE-2026-55583

Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.9.0, Twenty was vulnerable to a cross-workspace insecure direc...

twentyhq twenty < 2.9.0 CVE
HIGH 8.6 CVE-2026-47389

Mastodon: SSRF protection bypass on older Ruby versions_CVE-2026-47389

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, when using Ruby versions older tha...

mastodon mastodon >= 4.5.0-beta.1, < 4.5.10 CVE
HIGH 8.7 CVE-2026-46348

Mastodon: SSRF Bypass via IPv6 Unspecified Address (::)_CVE-2026-46348

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.5.10, 4.4.17, and 4.3.23, the list of disallowed IP address ...

mastodon mastodon >= 4.5.0-beta.1, < 4.5.10 CVE
HIGH 7.1 CVE-2026-27708

FOSSBilling: IDOR in Servicecustom Client API allows cross-client data access_CVE-2026-27708

FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, the Servicecustom Client API's __call method ...

FOSSBilling FOSSBilling < 0.8.0 CVE
HIGH 8 CVE-2026-23879

py7zr: Arbitrary File Write Vulnerability_CVE-2026-23879

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below...

miurahr py7zr < 1.1.3 CVE