Kodem's Vulnerability Database

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-H3RM-78G3-J7CPHigh@better-auth/stripe: @better-auth/stripe: cross-organization billing tampering in organization subscription actions GHSA-RJG6-39JM-RGG4Critical@better-auth/scim: @better-auth/scim: account takeover and stale access via SCIM provider-id collision CVE-2026-66004Mediumblender-mcp: BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes CVE-2026-66007Mediumdatasets: Hugging Face Datasets folder-based builders allow path traversal through file_name metadata GHSA-76Q6-2P6H-XJQRLowMagick.NET-Q16-AnyCPU: ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title CVE-2026-59860HighMicrosoft.OpenApi.Kiota: Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection CVE-2026-59939Highhttplib2: httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling GHSA-H5R4-W88W-7CCRLowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified GHSA-H58X-R7F7-RH84LowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in ICON decoder when allocation fails GHSA-M596-67P7-69WHLowMagick.NET-Q16-AnyCPU: ImageMagick: Memory leak in VIFF encoder when allocation fails GHSA-R628-69V2-2F9CLowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in MIFF encoder when allocaton fails GHSA-H7F2-F9CC-H2GVLowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in YUV decoder when opening of blob fails GHSA-JFQ9-Q63X-RC63LowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in TIFF encoder when an allocation fails GHSA-99W9-HV66-RFV7LowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in JNG encoder when a blob could not be opened GHSA-J8RH-V2R8-V94XLowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in hough lines operation when an operation fails GHSA-7C7M-FPJW-GWCQLowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in color transformation to log colorspace when operation fails GHSA-6VXP-GFWF-HCR9LowMagick.NET-Q16-AnyCPU: ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.GHSA-HWF3-R46V-5GGXLowMagick.NET-Q16-AnyCPU: ImageMagick: Information Disclosure when printing profiles with debug enabled GHSA-QVXH-PRVR-85W2LowMagick.NET-Q16-AnyCPU: ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails GHSA-6JWG-7Q3P-5FQMLowMagick.NET-Q16-AnyCPU: ImageMagick: Use-After-Free when freetype initialization fails GHSA-VGHG-5JRG-2398LowMagick.NET-Q16-AnyCPU: ImageMagick: Policy Bypass in script operation due to missing checks GHSA-V3J6-27VC-7PW2LowMagick.NET-Q16-AnyCPU: ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check GHSA-QH5G-Q395-CX4JLowMagick.NET-Q16-AnyCPU: ImageMagick: Heap-use-after-free via XMP profile could result in a crash GHSA-HC76-7MPC-QJQHMediumMagick.NET-Q16-AnyCPU: ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 GHSA-56M6-8Q75-F2RWMediumMagick.NET-Q16-AnyCPU: ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo