Known Vulnerabilities for Json-c by Json-c
Listed below are 3 of the newest known vulnerabilities associated with "Json-c" by "Json-c".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-60092 json | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerabi... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59854 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacke... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-59853 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /api/storage/getCriteria endpoint returns ... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-59832 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepath route handler serveSni... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-59712 json | Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to retri... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-58579 json | RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the... | Not Provided | 2026-07-02 | 2026-07-06 |
| CVE-2026-58459 json | gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attac... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-58447 json | Invidious through 2.20260626.0, fixed in commit 77ad416, contains a broken object level authorization vulnerability that allo... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58371 json | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/java... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-58171 json | Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base ... | Not Provided | 2026-06-30 | 2026-06-30 |