CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,463 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,463
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product midnightbsd:mport. Show all products

13 CVEs, showing 1 to 13
CVESeverityTitlePublished
CVE-2026-54584Medium 5.3mport trusts environment-controlled temporary directories in privileged metadata extraction
Assigned by GitHub_M
Sep 21, 2026
CVE-2026-54579Low 2.3mport mirror-selection ping accepts insufficiently validated ICMP replies
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54576Medium 5.8mport package installation has symlink TOCTOU in chown and chmod handling
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54587Medium 5.8mport directory asset installation is vulnerable to symlink and path traversal races
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54575Medium 5.8mport package fetch and clean paths are vulnerable to TOCTOU filesystem races
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54578Low 2.0mport verify can compare stale checksum data after hashing failures
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54586Medium 6.0mport permits repository and package mirror fetches over insecure transport
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54585Medium 6.0mport sample file handling can write outside the configured root
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54580High 8.3mport index decompression can leave partial or corrupt index data after zstd failures
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54582Medium 6.0mport package installation can overwrite existing unmanaged or differently owned files
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54577Low 2.0mport audit can inspect the wrong package when options are present
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54583High 8.3mport package bundle downloads allow unsafe destination filenames
Assigned by GitHub_M
Sep 17, 2026
CVE-2026-54581High 8.3mport bootstrap index fetch can continue after hash verification failure
Assigned by GitHub_M
Sep 17, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.