Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Every public CVE, as it is published

The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.

At a glance

Published CVEs; rejected ones are not counted.

  • 402,131All CVEsplus 19,141 rejected
  • 324Last 24 hours3,294 in the last 7 days
  • 16,925Last 30 days1,559 of them critical
  • 1,769Known exploitedin the CISA KEV catalog

CVEs published per year

All time, by publication date in UTC; follows the filter above.

  • Critical
  • High
  • Medium
  • Low
  • Not scored
The numbers of every bucket are in the table under the chart.
Show the numbers as a table
Matching CVEs per period and severity, newest first
PeriodCriticalHighMediumLowNot scoredTotalCumulative
20264140001818

Latest CVEs

18 CVEs, newest first

CVEs, newest first
Title
CVE-2026-124439
Scriban before 7.5.3 Denial of Service via Uncatchable StackOverflowExceptionscriban · scriban
High8.7
CVE-2026-124438
Scriban before 7.5.2 Delegate Target Exposure via array.map Member Accessscriban · scriban
Critical9.1
CVE-2026-124437
Scriban before 7.5.3 Denial of Service via Unguarded Builtins and Recursionscriban · scriban
High8.7
CVE-2026-74795
Scriban before 6.6.0 Denial of Service via Uncontrolled Recursionscriban · scriban
High8.7
CVE-2026-74794
Scriban before 6.6.0 Denial of Service via Infinite RecursionPublic exploitscriban · scriban
High8.7
CVE-2026-74792
Scriban before 7.0.0 Stack Overflow via nested array initializersPublic exploitscriban · scriban
High8.7
CVE-2026-74791
Scriban before 7.0.0 Authorization Bypass via Stale Include CachePublic exploitscriban · scriban
Critical9.2
CVE-2026-74790
Scriban before 7.0.0 MemberFilter Bypass via TemplateContext CachePublic exploitscriban · scriban
Critical9.3
CVE-2026-74789
Scriban before 7.0.0 LoopLimit Bypass via Built-in Operationsscriban · scriban
High8.7
CVE-2026-74788
Scriban before 7.0.0 Denial of Service via string.pad_left/pad_rightPublic exploitscriban · scriban
High8.7
CVE-2026-74787
Scriban before 7.0.0 Uncontrolled Recursion via object.to_jsonPublic exploitscriban · scriban
High8.7
CVE-2026-74786
Scriban before 7.0.0 Denial of Service via Unbounded Template OutputPublic exploitscriban · scriban
High7.1
CVE-2026-74785
Scriban before 7.0.0 Denial of Service via Unbounded Resource ConsumptionPublic exploitscriban · scriban
High7.1
CVE-2026-74784
Scriban before 7.2.0 Denial of Service via array.insert_atscriban · scriban
High8.7
CVE-2026-74783
Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of ServicePublic exploitscriban · scriban
High8.7
CVE-2026-73062
Scriban 3.0.0 through 7.2.0 Denial of Service via Array MultiplicationPublic exploitscriban · scriban
High8.7
CVE-2026-73061
Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessorPublic exploitscriban · scriban
Critical9.3
CVE-2026-73060
Scriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.MultiplyPublic exploitscriban · scriban
High8.7