Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,484All CVEsplus 19,164 rejected
- 614Last 24 hours4,924 in the last 7 days
- 18,768Last 30 days1,594 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 8 | 4 | 0 | 0 | 13 | 14 |
| 2025 | 0 | 1 | 0 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-100353 | kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filterPublic exploitgetkin · kin-openapi | High7.5 |
| CVE-2026-100354 | kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process CrashPublic exploitgetkin · kin-openapi | High7.5 |
| CVE-2026-100352 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation PathPublic exploitgetkin · kin-openapi | High7.5 |
| CVE-2026-100351 | kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusionPublic exploitgetkin · kin-openapi | High7.4 |
| CVE-2026-100349 | kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with contentgetkin · kin-openapi | High8.2 |
| CVE-2026-100350 | kin-openapi deepObject query decoding repeatedly compiles an invariant regular expressionPublic exploitgetkin · kin-openapi | Medium5.3 |
| CVE-2026-100347 | kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static pathPublic exploitgetkin · kin-openapi | Medium5.3 |
| CVE-2026-100348 | kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)getkin · kin-openapi | Medium5.3 |
| CVE-2026-97394 | kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing itemsPublic exploitgetkin · kin-openapi | High7.5 |
| CVE-2026-77354 | kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decodingPublic exploitgetkin · kin-openapi | High8.7 |
| CVE-2026-76905 | kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoSPublic exploitgetkin · kin-openapi | High7.5 |
| CVE-2026-73502 | kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schemaPublic exploitgetkin · kin-openapi | Medium5.3 |
| CVE-2026-73501 | kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc DefaultPublic exploitgetkin · kin-openapi | Critical9.1 |
| CVE-2025-30153 | Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filterPublic exploitgetkin · kin-openapi | High7.5 |