CWE-212

CVEs per yearBy the year they were published

1. 20051
2. 20121
3. 20183
4. 20181
5. 20204
6. 202115
7. 202224
8. 202212
9. 202412
10. 20246
11. 202521
12. 202637

Newest CVEs

• CVE-2026-118996

  CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig

  CallBackery

  Not scored
• CVE-2026-115363

  OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

  openbao · openbao

  Low2.1
• CVE-2026-111756

  follow-redirects array-form headers bypass cross-origin credential stripping

  follow-redirects · follow-redirects

  High8.2
• CVE-2026-111387

  Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

  nezhahq · nezha

  High7.1
• CVE-2026-107293

  Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

  pydantic · pydantic-ai

  Low2.3
• CVE-2026-107291

  Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

  pydantic · pydantic-ai

  Low2.3
• CVE-2026-96879

  "Checked by" label in page history should not be shown if the underlying review log entry is suppressed"

  The Wikimedia Foundation · Mediawiki - FlaggedRevs extension

  Medium6.9
• CVE-2026-17511

  This Power System update is being released to address

  IBM · PowerVM Hypervisor

  Low3.4
• CVE-2026-90860

  The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor…

  Canva · Canva

  High7.1
• CVE-2026-67071

  HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

  HCLSoftware · HCL DevOps Deploy / HCL Launch

  Medium6.5

Vendors it comes up for most

1. Red Hat5
2. IBM4
3. AMD3
4. GitLab3
5. Microsoft3
6. argoproj3
7. follow-redirects3
8. guzzle3
9. nextcloud3
10. Apache Software Foundation2