Known Vulnerabilities for Config Lib by Config Lib Project
Listed below are 1 of the newest known vulnerabilities associated with "Config Lib" by "Config Lib Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64049 json | In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix userspace-triggered crash on a2xx-a4... | Not Provided | 2026-07-19 | 2026-07-19 |
| CVE-2026-63801 json | In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_... | Not Provided | 2026-07-19 | 2026-07-20 |
| CVE-2026-62392 json | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A b... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-61450 json | Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author (any admin.pages user, or anyone able to write to ... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-61106 json | Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supported versions that are affected are 23.4-23.... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-60089 json | PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.tom... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-59891 json | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() re... | Not Provided | 2026-07-14 | 2026-07-21 |
| CVE-2026-59854 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacke... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-59733 json | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4... | Not Provided | 2026-07-14 | 2026-07-16 |
| CVE-2026-59706 json | mem0 contains unauthenticated config API endpoints that expose LLM API keys in plaintext and allow server-side request forger... | Not Provided | 2026-07-07 | 2026-07-08 |