Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,293All CVEsplus 19,140 rejected
- 450Last 24 hours2,724 in the last 7 days
- 16,915Last 30 days1,557 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 7 | 7 | 1 | 0 | 15 | 15 |
| Title | ||
|---|---|---|
| CVE-2026-94194 | Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediarieselixir-mint · mint | Medium6.3 |
| CVE-2026-92103 | Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max_frame_sizeelixir-mint · mint | Medium6.3 |
| CVE-2026-91043 | HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memoryelixir-mint · mint | High8.2 |
| CVE-2026-82672 | Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connectionselixir-mint · mint | Medium6.3 |
| CVE-2026-82728 | Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoSelixir-mint · mint | High8.2 |
| CVE-2026-82729 | Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoSelixir-mint · mint | Medium6.3 |
| CVE-2026-59249 | Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connectionselixir-mint · mint | Medium6.3 |
| CVE-2026-59246 | Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memoryelixir-mint · mint | Medium6.3 |
| CVE-2026-58229 | Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoSelixir-mint · mint | High8.2 |
| CVE-2026-56810 | mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5elixir-mint · mint | High8.7 |
| CVE-2026-58226 | Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpaxelixir-mint · hpax | High8.7 |
| CVE-2026-49753 | HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsingelixir-mint · mint | Medium6.3 |
| CVE-2026-49754 | HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulationelixir-mint · mint | High8.2 |
| CVE-2026-48862 | Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrencyelixir-mint · mint | High8.2 |
| CVE-2026-48861 | CRLF injection in HTTP/1 request line via unvalidated method in Mintelixir-mint · mint | Low2.1 |