Known Vulnerabilities for Forge by Digitalbazaar
Listed below are 9 of the newest known vulnerabilities associated with "Forge" by "Digitalbazaar".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56265 json | Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docke... | Not Provided | 2026-06-21 | 2026-06-22 |
| CVE-2026-53871 json | Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts... | Not Provided | 2026-06-17 | 2026-06-18 |
| CVE-2026-53832 json | OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trus... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-53816 json | OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows pai... | Not Provided | 2026-06-11 | 2026-06-12 |
| CVE-2026-50226 json | Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IME... | Not Provided | 2026-06-04 | 2026-06-04 |
| CVE-2026-49001 json | Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cross-si... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48781 json | Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-... | Not Provided | 2026-06-17 | 2026-06-18 |
| CVE-2026-48772 json | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 2.0.0 through 3.0.8, the ProxySQL MySQL front... | Not Provided | 2026-06-19 | 2026-06-22 |
| CVE-2026-48522 json | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient passes its uri argument directly to urllib.r... | Not Provided | 2026-05-28 | 2026-06-02 |
| CVE-2026-48147 json | Budibase is an open-source low-code platform. Prior to 3.35.4, the buildMatcherRegex() / matches() functions in packages/back... | Not Provided | 2026-05-27 | 2026-05-27 |