@cvereports
CVE Reports
Nothing here yet.
Nothing here yet.
11h ago · 2 min read · CVE-2026-34605: Reflected Cross-Site Scripting via SVG Namespace Bypass in SiYuan Vulnerability ID: CVE-2026-34605 CVSS Score: 8.6 Published: 2026-04-01 SiYuan personal knowledge management system versions 3.6.0 through 3.6.1 contain a high-severit...
Join discussion11h ago · 2 min read · CVE-2026-33578: Sender Policy Bypass via Incorrect Authorization in OpenClaw Extensions Vulnerability ID: CVE-2026-33578 CVSS Score: 4.3 Published: 2026-04-01 OpenClaw versions prior to 2026.3.28 contain a vulnerability in the googlechat and zalous...
Join discussion12h ago · 2 min read · CVE-2026-32734: DOM-Based Cross-Site Scripting in baserCMS Tag Creation Vulnerability ID: CVE-2026-32734 CVSS Score: 7.1 Published: 2026-03-31 baserCMS versions prior to 5.2.3 contain a DOM-based Cross-Site Scripting (XSS) vulnerability within the ...
Join discussion13h ago · 2 min read · CVE-2026-21861: Authenticated OS Command Injection in baserCMS Core Update Feature Vulnerability ID: CVE-2026-21861 CVSS Score: 9.1 Published: 2026-03-31 baserCMS versions prior to 5.2.3 are vulnerable to an authenticated OS Command Injection flaw ...
Join discussion14h ago · 2 min read · GHSA-39MP-545Q-W789: Improper Authorization in OpenClaw /send Command Vulnerability ID: GHSA-39MP-545Q-W789 CVSS Score: 5.4 Published: 2026-03-30 An authorization bypass vulnerability in the OpenClaw personal AI assistant ecosystem allows non-owner...
Join discussion