Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,318All CVEsplus 19,142 rejected
- 285Last 24 hours3,325 in the last 7 days
- 16,941Last 30 days1,542 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 7 | 1 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-94194 | Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediariesPublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-92103 | Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_sizePublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-91043 | HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memoryelixir-mint · mint | High8.2 |
| CVE-2026-82672 | Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connectionsPublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-82728 | Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoSPublic exploitelixir-mint · mint | High8.2 |
| CVE-2026-82729 | Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoSPublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-59249 | Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connectionsPublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-59246 | Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memoryPublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-58229 | Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoSPublic exploitelixir-mint · mint | High8.2 |
| CVE-2026-56810 | mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5Public exploitelixir-mint · mint | High8.7 |
| CVE-2026-58226 | Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpaxPublic exploitelixir-mint · hpax | High8.7 |
| CVE-2026-49753 | HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsingPublic exploitelixir-mint · mint | Medium6.3 |
| CVE-2026-49754 | HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulationPublic exploitelixir-mint · mint | High8.2 |
| CVE-2026-48862 | Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrencyPublic exploitelixir-mint · mint | High8.2 |
| CVE-2026-48861 | CRLF injection in HTTP/1 request line via unvalidated method in MintPublic exploitelixir-mint · mint | Low2.1 |