Vulnerabilities
Summary — last 7 days
New vulnerabilities5,349▲ 1,791 vs. last week
Critical / high2,679▲ 959 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)755▲ 546 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Received | Medium (6.9) | — | — | Diffsk ConfigobjAI | 10/19/2026 | 10/19/2026 | A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed of the problem… | |
| Modified | Medium (5.9) | 1.3% | — | Configobj Project Configobj | 4/3/2023 | 6/17/2026 | All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file. |