Known Vulnerabilities for Routes by Routes Project
Listed below are 1 of the newest known vulnerabilities associated with "Routes" by "Routes Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65008 json | Grav 2.0.4 (fixed in 2.0.7) contains a remote code execution vulnerability in Blueprint::dynamicData() (system/src/Grav/Commo... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-64791 json | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Ad... | Not Provided | 2026-07-22 | 2026-07-23 |
| CVE-2026-64622 json | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the configured authorization check (checkAuth/secre... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63735 json | SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated us... | Not Provided | 2026-07-20 | 2026-07-23 |
| CVE-2026-63732 json | 9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default password (123456) that authenticate... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-63685 json | Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement req... | Not Provided | 2026-07-22 | 2026-07-23 |
| CVE-2026-63317 json | Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - ... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-62328 json | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote attackers t... | Not Provided | 2026-07-13 | 2026-07-15 |
| CVE-2026-62312 json | 9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacker to achieve arbitrary co... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-62227 json | OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail ... | Not Provided | 2026-07-17 | 2026-07-17 |