Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 unt

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals reg

CVSS 10.0

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send

CVSS 9.8

Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packag

Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:

CVSS 9.8

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JS

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, lea

CVSS 9.6

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where A

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQuerie

CVSS 9.3

CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TL

CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attacker

CVSS 9.1