CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,212 CVEs published, 240 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,212
Show in the list
Critical, last 7 days
240
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product redhat:trusted_profile_analyzer. Show all products

32 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-42784High 7.4Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion
Assigned by redhat
Sep 16, 2026
CVE-2026-12143High 7.5form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
Assigned by harborist
Jun 12, 2026
CVE-2026-44486High 7.5Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-44487High 8.2Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-44488High 7.5Axios: Allocation of Resources Without Limits or Throttling in axios
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-44496High 7.5Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-44495High 7.0Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-44494High 8.7Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-44492High 8.6Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
Assigned by GitHub_M
Jun 11, 2026
CVE-2026-42264High 7.4Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking
Assigned by GitHub_M
May 7, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.