CWE-358 Improperly Implemented Security Check for Standard

Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability

Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

Ella Core has a UE Security Capability bypass on NGAP PathSwitchRequest

Ella Core has handover failures during concurrent Security Mode Command

Ella Core Vulnerable to UE Downlink Redirection via Forged PDUSessionResourceSetupResponse

Free5GC AMF has Missing Concurrent NAS SMC Validation During NGAP Handover

Free5GC AMF Bypasses UE Security Capabilities on NGAP PathSwitchRequest

MantisBT has a Content Security Policy bypass via attachments

Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens

Java: DoS Vulnerability in JSON-JAVA

SpiceDB checks involving relations with caveats can result in no permission when permission is expected

Spring Framework has Improperly Implemented Security Check for Standard

Spring Framework allows applications to expose STOMP over WebSocket endpoints

vantage6-server node accepts non-whitelisted algorithms from malicious server

In marshmallow library the schema "only" option treats an empty list as implying no "only" option

Ansible apt_key module does not properly verify key fingerprint

RPyC's missing security check results in code execution when using numpy.array on the server-side.

Client Spoofing within the Keycloak Device Authorisation Grant

Inconsistent documentation in Apache Tomcat