Known Vulnerabilities for Vm Access Proxy by Snowsoftware
Listed below are 1 of the newest known vulnerabilities associated with "Vm Access Proxy" by "Snowsoftware".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63306 json | stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoi... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-63175 json | PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instanc... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-62386 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query para... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-59821 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custo... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59820 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills ... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-58656 json | Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and responds with Access-Control-A... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56676 json | 9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, bu... | Not Provided | 2026-07-10 | 2026-07-13 |
| CVE-2026-56675 json | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access wi... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-56233 json | Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticated users wit... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-55436 json | Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior t... | Not Provided | 2026-07-08 | 2026-07-08 |