كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• متوسطةCVE-2026-86818درجة CVSS 4.815‏/09‏/2026

  fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and bod

  CWE-172CWE-436
• متوسطةCVE-2026-48784درجة CVSS 6.114‏/07‏/2026

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, UrlGenerator::doGenerate() used strtr() dot-segment encoding that skipped every other chained ../ or ./ segment, allo

  CWE-172CWE-601sensiolabs symfony
• متوسطةCVE-2026-42926درجة CVSS 5.813‏/05‏/2026

  When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached En

  CWE-172f5 nginx_gateway_fabricf5 nginx_open_sourcef5 nginx_instance_manager