Patch Sonar: Developer, data & AI tools https://patchsonar.com/tech/dev Exploited vulnerabilities in developer, data & ai tools, in plain English. en-us Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability https://patchsonar.com/cve/CVE-2026-21589 https://patchsonar.com/cve/CVE-2026-21589 Thu, 15 Oct 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 15, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Brotli / Node.js: A bug in a common compression library puts Node.js apps at risk https://patchsonar.com/cve/CVE-2026-111497 https://patchsonar.com/cve/CVE-2026-111497 Tue, 27 Oct 2026 12:00:00 GMT Developer, data & AI tools Early signs only. Honeypots have logged a few attempts, apparently from a mass-scanning group. Whether you're exposed depends on how your app handles compressed data. What to do: Upgrade Node.js; there is no workaround. Bun, Envoy, Python, .NET and PHP on Windows have also shipped fixes. Strapi Strapi: Strapi Cleartext Storage of Sensitive Information Vulnerability https://patchsonar.com/cve/CVE-2023-22894 https://patchsonar.com/cve/CVE-2023-22894 Thu, 08 Oct 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Apache Struts: Apache Struts Command Injection Vulnerability https://patchsonar.com/cve/CVE-2016-3081 https://patchsonar.com/cve/CVE-2016-3081 Thu, 08 Oct 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. WSO2 Multiple Products: WSO2 Multiple Products Path Traversal Vulnerability https://patchsonar.com/cve/CVE-2026-5430 https://patchsonar.com/cve/CVE-2026-5430 Thu, 24 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 24, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability https://patchsonar.com/cve/CVE-2026-85706 https://patchsonar.com/cve/CVE-2026-85706 Fri, 11 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 11, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability https://patchsonar.com/cve/CVE-2026-42018 https://patchsonar.com/cve/CVE-2026-42018 Fri, 11 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 11, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability https://patchsonar.com/cve/CVE-2026-42016 https://patchsonar.com/cve/CVE-2026-42016 Fri, 11 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 11, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability https://patchsonar.com/cve/CVE-2026-82329 https://patchsonar.com/cve/CVE-2026-82329 Wed, 02 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability https://patchsonar.com/cve/CVE-2026-59822 https://patchsonar.com/cve/CVE-2026-59822 Wed, 02 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability https://patchsonar.com/cve/CVE-2026-49869 https://patchsonar.com/cve/CVE-2026-49869 Wed, 02 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Kludex Starlette: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://patchsonar.com/cve/CVE-2026-48710 https://patchsonar.com/cve/CVE-2026-48710 Wed, 02 Sep 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 2, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability https://patchsonar.com/cve/CVE-2026-66384 https://patchsonar.com/cve/CVE-2026-66384 Thu, 27 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 27, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Ajax.NET Professional Ajax.NET Professional: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability https://patchsonar.com/cve/CVE-2021-23758 https://patchsonar.com/cve/CVE-2021-23758 Wed, 26 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 26, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Gitea Gitea: Gitea Code Injection Vulnerability https://patchsonar.com/cve/CVE-2026-60004 https://patchsonar.com/cve/CVE-2026-60004 Tue, 25 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 25, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability https://patchsonar.com/cve/CVE-2026-64849 https://patchsonar.com/cve/CVE-2026-64849 Wed, 19 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 19, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability https://patchsonar.com/cve/CVE-2025-62593 https://patchsonar.com/cve/CVE-2025-62593 Mon, 17 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 17, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Metabase Metabase: Metabase SQL Injection Vulnerability https://patchsonar.com/cve/CVE-2026-72898 https://patchsonar.com/cve/CVE-2026-72898 Tue, 11 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 11, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability https://patchsonar.com/cve/CVE-2026-63077 https://patchsonar.com/cve/CVE-2026-63077 Wed, 05 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 5, 2026. CISA says ransomware groups are known to use it. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. IBM Langflow: IBM Langflow Code Injection Vulnerability https://patchsonar.com/cve/CVE-2026-9198 https://patchsonar.com/cve/CVE-2026-9198 Tue, 04 Aug 2026 12:00:00 GMT Developer, data & AI tools Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 4, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.