In Centrifugo versions prior to 6.8.4 a high severity vulnerability CVE-2026-62963 was detected. This vulnerability allows unauthenticated attackers to trigger large memory and CPU consumption. To address this issue, users should upgrade Centrifugo to version 6.8.4. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62963.
Read more Developer Tools
In PyMdown Extensions component for Python versions from 10.0.1 until 10.21.3 a medium severity vulnerability CVE-2026-46338 was detected. This vulnerability allows attackers to read files from sibling paths that share the same base path prefix. To address this issue, users should upgrade PyMdown Extensions to version 10.21.3 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-46338.
Read more Application Development
In Argo Workflows versions prior to 3.7.15 and 4.0.6 a critical severity vulnerability CVE-2026-54526 was detected. This vulnerability allows an attacker to escalate privileges by injecting a malicious patch into a pod. To address this issue, users should upgrade Argo Workflows to version 3.7.15 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-54526.
Read more Application Development
In Centrifugo versions prior to 6.8.1 a high severity vulnerability CVE-2026-49998 was detected. This vulnerability allows an attacker to bypass authentication by reusing a key from one allowed issuer to verify a token for a different issuer. To address this issue, users should upgrade Centrifugo to version 6.8.1. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-49998.
Read more Developer Tools
In Gravity Forms component for WordPress versions 2.10.4 and earlier a high severity vulnerability CVE-2026-12997 was detected. This vulnerability allows unauthenticated attackers to read the contents of arbitrary files on the server. To address this issue, users should upgrade Gravity Forms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12997.
Read more CMS
In Argo CD versions before 3.2.12, 3.3.10, and 3.4.2 a medium severity vulnerability CVE-2026-45737 was detected. This vulnerability allows attackers to view sensitive Kubernetes Secret values in UI or CLI diffs. To address this issue, users should upgrade Argo CD to version 3.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-45737.
Read more Developer Tools
In Argo CD versions prior to 3.2.12, 3.3.10, and 3.4.2 a high severity vulnerability CVE-2026-45738 was detected. This vulnerability allows attackers to execute arbitrary javascript in a victim’s browser session. To address this issue, users should upgrade Argo CD to version 3.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-45738.
Read more Developer Tools
In the MCP Python SDK component for Python versions prior to 1.27.2 a high severity vulnerability CVE-2026-52869 was detected. This vulnerability allows an authenticated attacker to inject JSON-RPC messages into another user’s session. To address this issue, users should upgrade the MCP Python SDK to version 1.27.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-52869.
Read more Application Development
In mcp component for Python versions from 1.23.0 until 1.27.2 a high severity vulnerability CVE-2026-52870 was detected. This vulnerability allows any connected client to enumerate, read results from, or cancel other clients’ tasks. To address this issue, users should upgrade mcp to version 1.27.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-52870.
Read more Application Development