{"items":[{"id":"CVE-2026-104026","published":"2026-10-02T14:06:02.380Z","updated":"2026-10-02T14:30:01.530Z","title":"In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if…","severity":"HIGH","score":7.8,"vendor":"Meta Platforms, Inc","product":"Sapling SCM","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2026-92172","published":"2026-09-30T20:26:49.629Z","updated":"2026-10-01T16:14:11.016Z","title":"Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity…","severity":"HIGH","score":8.8,"vendor":"Meta Platforms, Inc","product":"Meta Horizon OS","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-92173","published":"2026-09-30T20:26:33.293Z","updated":"2026-10-01T18:56:04.855Z","title":"Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell…","severity":"CRITICAL","score":9.1,"vendor":"Meta Platforms, Inc","product":"Meta Horizon OS","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-91096","published":"2026-09-28T20:44:57.363Z","updated":"2026-09-30T19:47:55.479Z","title":"In proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before v2025.08.18.00)…","severity":"HIGH","score":7.5,"vendor":"Facebook","product":"proxygen","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-91095","published":"2026-09-28T20:44:45.928Z","updated":"2026-09-30T19:49:15.429Z","title":"In proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs could…","severity":"MEDIUM","score":5.3,"vendor":"Facebook","product":"proxygen","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-84895","published":"2026-09-28T20:44:34.886Z","updated":"2026-10-01T14:02:23.724Z","title":"In proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base…","severity":"HIGH","score":7.3,"vendor":"Facebook","product":"proxygen","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-84894","published":"2026-09-28T18:40:55.707Z","updated":"2026-09-30T15:05:50.817Z","title":"In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under…","severity":"HIGH","score":7.5,"vendor":"Meta Platforms, Inc","product":"moxygen","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-44909","published":"2026-07-23T16:27:01.658Z","updated":"2026-07-23T19:07:28.874Z","title":"Proxygen lacked a generalized slow-consumer detection mechanism in its core HTTP session layer. A remote, unauthenticated attacker could exploit HTTP/2…","severity":"HIGH","score":7.5,"vendor":"Facebook","product":"proxygen","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2026-44907","published":"2026-07-21T16:03:32.256Z","updated":"2026-07-21T17:22:34.411Z","title":"A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU…","severity":"HIGH","score":7.5,"vendor":"Meta","product":"react-server-dom-turbopack","kev":false,"epss":0.006,"kevAdded":null},{"id":"CVE-2026-23870","published":"2026-05-06T16:24:55.620Z","updated":"2026-05-06T19:06:00.435Z","title":"A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server…","severity":"HIGH","score":7.5,"vendor":"Meta","product":"react-server-dom-turbopack","kev":false,"epss":0.01533,"kevAdded":null},{"id":"CVE-2026-23866","published":"2026-05-01T16:02:03.304Z","updated":"2026-05-01T17:42:09.286Z","title":"Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to…","severity":"MEDIUM","score":4.3,"vendor":"Facebook","product":"WhatsApp for Android","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2026-23863","published":"2026-05-01T16:01:39.565Z","updated":"2026-05-01T17:41:14.681Z","title":"An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL…","severity":"MEDIUM","score":6.5,"vendor":"Facebook","product":"WhatsApp Desktop for Windows","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2026-23869","published":"2026-04-08T19:11:08.418Z","updated":"2026-07-15T01:17:57.169Z","title":"A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and…","severity":"HIGH","score":7.5,"vendor":"Meta","product":"react-server-dom-turbopack","kev":false,"epss":0.01575,"kevAdded":null},{"id":"CVE-2026-23868","published":"2026-03-10T18:53:25.606Z","updated":"2026-07-15T02:49:19.402Z","title":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to…","severity":"MEDIUM","score":5.1,"vendor":"giflib","product":"giflib","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2026-23865","published":"2026-03-02T16:09:42.079Z","updated":"2026-03-04T00:16:54.590Z","title":"An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read…","severity":"MEDIUM","score":5.3,"vendor":"FreeType","product":"FreeType","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2026-23864","published":"2026-01-26T19:16:38.250Z","updated":"2026-07-15T01:18:01.838Z","title":"Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-dom-parcel,…","severity":"HIGH","score":7.5,"vendor":"Meta","product":"react-server-dom-webpack","kev":false,"epss":0.02581,"kevAdded":null},{"id":"CVE-2025-67779","published":"2025-12-11T23:36:20.699Z","updated":"2025-12-12T18:40:45.863Z","title":"It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific…","severity":"HIGH","score":7.5,"vendor":"Meta","product":"react-server-dom-parcel","kev":false,"epss":0.19986,"kevAdded":null},{"id":"CVE-2025-55184","published":"2025-12-11T20:05:01.328Z","updated":"2025-12-15T16:37:06.708Z","title":"A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1,…","severity":"HIGH","score":7.5,"vendor":"Meta","product":"react-server-dom-webpack","kev":false,"epss":0.66615,"kevAdded":null},{"id":"CVE-2025-55183","published":"2025-12-11T20:04:48.655Z","updated":"2026-01-07T16:26:47.826Z","title":"An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and…","severity":"MEDIUM","score":5.3,"vendor":"Meta","product":"react-server-dom-webpack","kev":false,"epss":0.64233,"kevAdded":null},{"id":"CVE-2025-55182","published":"2025-12-03T15:40:56.894Z","updated":"2026-10-07T17:58:00.859Z","title":"A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following…","severity":"CRITICAL","score":10,"vendor":"Meta","product":"react-server-dom-webpack","kev":true,"epss":0.99731,"kevAdded":"2025-12-05"},{"id":"CVE-2025-55181","published":"2025-12-02T22:13:31.101Z","updated":"2025-12-03T00:33:57.022Z","title":"Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing…","severity":"MEDIUM","score":5.3,"vendor":"Facebook","product":"proxygen","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2025-55179","published":"2025-11-18T13:56:31.598Z","updated":"2025-11-18T14:25:08.232Z","title":"Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac…","severity":"MEDIUM","score":5.4,"vendor":"Facebook","product":"WhatsApp Business for iOS","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2025-55178","published":"2025-09-24T18:31:28.309Z","updated":"2025-09-24T18:50:01.680Z","title":"Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.","severity":"MEDIUM","score":5.3,"vendor":"Meta Platforms, Inc","product":"Llama Stack","kev":false,"epss":0.00504,"kevAdded":null}]}