General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-23889 | pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's tarball extraction allows… | Medium (6.5) | 2026-01-26 | General Purpose |
| CVE-2026-23888 | pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's binary fetcher allows mal… | Medium (6.5) | 2026-01-26 | General Purpose |
| CVE-2026-22709 | vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, `Promise.prototype.then` `Promise.prototy… | Critical (9.8) | 2026-01-26 | General Purpose |
| CVE-2026-22696 | dcap-qvl implements the quote verification logic for DCAP (Data Center Attestation Primitives). A vulnerability present… | Unknown | 2026-01-26 | General Purpose |
| CVE-2025-59473 | SQL Injection vulnerability in the Structure for Admin authenticated user | Unknown | 2026-01-26 | General Purpose |