Skip to content
← All tracked CVEs

Updated 08:00

Medium severity

Medium45d SLA

We fix a medium vulnerability within 45 days of publication, under our service-level agreement (SLA). We track 889 CVEs here: in progress, or fixed in the last 30 days.

Status
CVEStatusSummaryDistributionFixed
FixedChrome <155.0.8059.39 WebAuthn missing authorization enables UI spoofing via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome GetUserMedia cleanup bug allows UI spoofing via crafted page from compromised renderer pre-155.0.8059.39secure-packages-26.05Oct 9, 2026
FixedChrome DevTools auth flaw pre-155.0.8059.39 enables cross-origin data leak via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome Android <155.0.8059.39 info leak via co-installed app enables local attacker access to sensitive datasecure-packages-26.05Oct 9, 2026
FixedChrome Extensions auth bug before 155.0.8059.39 lets remote attacker access cross-origin datasecure-packages-26.05Oct 9, 2026
FixedChrome Chromoting UI misrepresentation enables remote UI spoofing via crafted traffic on macOS pre-155.0.8059.39secure-packages-26.05Oct 9, 2026
FixedMissing Actor authorization in Chrome <155.0.8059.39 enables crafted HTML social engineering bypass of system restrictionssecure-packages-26.05Oct 9, 2026
FixedIncorrect authorization enables address bar spoofing via crafted HTML in Chrome <155.0.8059.39secure-packages-26.05Oct 9, 2026
FixedANGLE uninitialized resource in Chrome <155.0.8059.39 enables remote cross-origin data exfiltration via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome prior to 155.0.8059.39 Permissions authorization flaw enables remote system access bypass via crafted trafficsecure-packages-26.05Oct 9, 2026
FixedChrome <155.0.8059.39 Proxy Auth cleanup bug exposes data to adjacent attackersecure-packages-26.05Oct 9, 2026
FixedAndroid Chrome Omnibox info leak pre-155.0.8059.39 via crafted traffic, social engineeringsecure-packages-26.05Oct 9, 2026
FixedChromoting UI spoofing in Chrome on Windows <155.0.8059.39 via social engineering and crafted trafficsecure-packages-26.05Oct 9, 2026
FixedChrome <155.0.8059.39 allows crafted HTML page to spoof browser UI elements via social engineeringsecure-packages-26.05Oct 9, 2026
FixedUninitialized resource in Dawn on Chrome Mac enables remote sandbox memory disclosure via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome Android pre-155.0.8059.39 Offline reference resolution flaw allows info leak via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome pre-155.0.8059.39 FileSystem UI misrepresentation enables remote system access restriction bypass via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome <155.0.8059.39 Compositing input validation bug allows address bar spoofing via compromised renderersecure-packages-26.05Oct 9, 2026
FixedAndroid Chrome GPU uninitialized resource enables remote out-of-sandbox memory read via crafted pagesecure-packages-26.05Oct 9, 2026
FixedGoogle Chrome Sync authorization flaw pre-155.0.8059.39 allows remote data disclosure via crafted trafficsecure-packages-26.05Oct 9, 2026
FixedChrome <155.0.8059.39: Google Lens missing auth enables cross-origin data leak via renderersecure-packages-26.05Oct 9, 2026
FixedANGLE uninitialized resource in Chrome <155.0.8059.39 enables remote sandbox memory read on Windowssecure-packages-26.05Oct 9, 2026
FixedHigh-severity Chrome Windows proxy info leak pre-155.0.8059.39 via crafted traffic by adjacent attackersecure-packages-26.05Oct 9, 2026
FixedSkia integer overflow in Chrome before 154.0.8037.97 leaks cross-origin data via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome <154.0.8037.97 SVG sensitive information leak via crafted HTML pagesecure-packages-26.05Oct 9, 2026
FixedChrome <154.0.8037.97 Compositing integer overflow leaks cross-origin data via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedChrome WebGPU uninitialized resource leaks cross-origin data pre-154.0.8037.92 via crafted HTMLsecure-packages-26.05Oct 9, 2026
FixedPYSEC-2026-3809: AsyncSSH 2.23.0: CVE-2026-45309 bypass via ~/${ENV} in %u AuthorizedKeysFile expansionsecure-packages-26.05Oct 7, 2026
FixedGHSA-qr67-gv47-xwwh: AsyncSSH 2.23.0: CVE-2026-45309 fix bypass via ~/${ENV} expansion in AuthorizedKeysFile %usecure-packages-26.05Oct 7, 2026
FixedAsyncSSH 2.23.0 incomplete CVE-2026-45309 fix allows AuthorizedKeysFile escape via ~ and ${ENV}secure-packages-26.05Oct 7, 2026
FixedGHSA-q6j5-fjx5-2mc3: pnpm integrity bypass: missing lockfile integrity lets tampered packages install with --frozen-lockfilesecure-packages-26.05Oct 7, 2026
FixedGHSA-4gxm-v5v7-fqc4: Reserved manifest bin names cause pnpm global remove/update to delete outside global bin directorysecure-packages-26.05Oct 7, 2026
FixedGHSA-3qhv-2rgh-x77r: Repo .npmrc and workspace.yaml env expansion leaks secrets via registry URLs/auth in pnpm/pacquetsecure-packages-26.05Oct 7, 2026
FixedNokogiri <1.19.1 canonicalize ignores xmlC14NExecute failures, enabling SAML signature validation bypasssecure-packages-26.05Oct 7, 2026
FixedNokogiri <1.19.3: XSLT transform memory leak on null-byte strings enables DoSsecure-packages-26.05Oct 7, 2026
FixedNokogiri <1.19.4 XInclude use-after-free: Ruby objects reference freed nodes/namespacessecure-packages-26.05Oct 7, 2026
FixedNokogiri <1.19.4 XPathContext use-after-free may segfault when document is garbage-collectedsecure-packages-26.05Oct 7, 2026
FixedNokogiri <1.19.4 DTD root allowed causes GC heap use-after-free/segfaultsecure-packages-26.05Oct 7, 2026
Fixedpnpm vulnerability: malicious '.'/'..' bin names can remove global bin or parent pre-10.34.2/11.5.3secure-packages-26.05Oct 7, 2026
Fixedpnpm/pacquet expand repo .npmrc/pnpm-workspace.yaml env vars, leaking secrets to attacker-selected registriessecure-packages-26.05Oct 7, 2026
FixedStarlette <1.3.0 URL reconstruction lets attacker-controlled path spoof request.url hostnamesecure-packages-26.05Oct 7, 2026
Fixedpython-multipart <0.0.30 decodes RFC2231 parameters, enabling multipart filename*/name* smugglingsecure-packages-26.05Oct 7, 2026
FixedHugo default code fence renderer fails to escape attribute values, enabling XSSsecure-packages-26.05Oct 7, 2026
FixedDoS vulnerability in REXML <3.3.6 parsing deep XML with same local-name attributessecure-packages-26.05Oct 7, 2026
FixedREXML <3.3.1 DoS vulnerability when parsing XML with many '<', '0', '%>' characterssecure-packages-26.05Oct 7, 2026
FixedREXML denial-of-service via many '<' in attribute values of untrusted XMLsecure-packages-26.05Oct 7, 2026
FixedstrongSwan libcharon 5.9.7–6.0.7 mishandles IKEv2 CREATE_CHILD_SA, enabling authentication bypasssecure-packages-rollingOct 4, 2026
FixedInfinite loop vulnerability in strongSwan PKCS#5 decryption (versions 4.6.2–6.0.7)secure-packages-rollingOct 4, 2026
FixedNULL pointer dereference vulnerability in strongSwan eap-aka plugin (4.1.10–6.0.7)secure-packages-rollingOct 4, 2026
FixedstrongSwan openssl plugin PKCS#7 parsing expired pointer dereference vulnerability (5.0.2–6.0.7)secure-packages-rollingOct 4, 2026

Contact sales

Provide us with some basic details and we'll follow up with you about , usually within one business day.

We'll only use this to get back to you. See our privacy policy (opens in a new tab). This site is protected by reCAPTCHA and the Google Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) apply.