cve.li

Recent

CVE-2026-47762CWE-79

TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

Published 2026-05-28 by GitHub_M

CVE-2026-47761CWE-79

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

Published 2026-05-28 by GitHub_M

CVE-2026-47759CWE-79

TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

Published 2026-05-28 by GitHub_M

CVE-2026-47760CWE-79

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

Published 2026-05-28 by GitHub_M

CVE-2026-48525CWE-400

PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS

Published 2026-05-28 by GitHub_M

CVE-2026-48523CWE-347

PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keys

Published 2026-05-28 by GitHub_M

CVE-2026-48526CWE-287CWE-347

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

Published 2026-05-28 by GitHub_M

CVE-2026-48524CWE-460CWE-755

PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)

Published 2026-05-28 by GitHub_M

CVE-2026-48522CWE-441CWE-918

PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes

Published 2026-05-28 by GitHub_M

CVE-2026-48155CWE-400

pypdf: Possible large memory usage for large offsets for layout mode text

Published 2026-05-28 by GitHub_M

Load more ↓