NVD disclosure day
CVE-2026-40190
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
The LangSmith Client SDK for Node.js has a vulnerability that allows an attacker controlling data keys to pollute `Object.prototype`, affecting all objects in the Node.js process. This could lead to unintended service behavior and impact application logic. Uncertainty exists regarding whether the `createAnonymizer()` A
CVE-2026-5483
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A flaw in `odh-dashboard` for Red Hat OpenShift AI allows for disclosure of Kubernetes Service Account tokens via a NodeJS endpoint. If reachable, this could enable an attacker with limited privileges to gain unauthorized access to Kubernetes resources. Confirming affected environments and understanding potential impac
CVE-2026-6068
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An external attacker can corrupt data or execute malicious code within NASM by using a specially crafted file. This could lead to unauthorized system access if NASM is used for software development or deployment.
CVE-2026-6057
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A serious flaw in FalkorDB Browser lets attackers take full control of your systems remotely by uploading malicious files, even without a password, because this tool is often connected to the internet.