Veille quotidienne automatisée sur les vulnérabilités CVE ciblant les technologies Spring Boot et Angular. Les données proviennent du NIST NVD 2.0, du catalogue CISA KEV et des scores FIRST EPSS.
Dashboard en ligne : https://florianppn.github.io/CVEille/
Dernière synchronisation :
2026-11-15T13:14:18.450051607Z
| CVE ID | Sévérité | CVSS | EPSS | KEV | Stack | Description |
|---|---|---|---|---|---|---|
| CVE-2026-120338 | CRITICAL |
10.0 | 0.8% | Non | javascript |
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodid... |
| CVE-2026-120306 | CRITICAL |
9.9 | N/A | Non | kubernetes |
Beta9 turns each shell command in a tenant image definition into a Dockerfi... |
| CVE-2026-120307 | CRITICAL |
9.9 | N/A | Non | kubernetes |
The Beta9 worker serves the sandbox file API from outside the container. ge... |
| CVE-2026-97693 | CRITICAL |
9.9 | 0.8% | Non | docker, postgresql |
Yuxi is a large-model-based intelligent knowledge base and knowledge graph ... |
| CVE-2026-122310 | CRITICAL |
9.9 | 0.4% | Non | kubernetes |
Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlP... |
| CVE-2026-17146 | CRITICAL |
9.9 | 0.7% | Non | javascript |
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 co... |
| CVE-2026-123800 | CRITICAL |
9.9 | 0.6% | Non | java |
SuperTokens Core is an open source authentication server. From 6.0.0 until ... |
| CVE-2026-127073 | CRITICAL |
9.9 | 0.5% | Non | kubernetes |
OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerabili... |
Données détaillées historisées chaque jour dans data/ • Alimenté par NVD 2.0, CISA KEV & EPSS
├── backend/ # Service Spring Boot (ingestion NVD/KEV/EPSS, analyse, export JSON)
├── frontend/ # Dashboard statique (HTML, CSS, JS) hébergé sur GitHub Pages
└── data/ # Historique quotidien des vulnérabilités au format JSON (14 fichiers max / 2 semaines)
- Backend : Java, Spring, Spring Boot, Spring Security, Tomcat, Hibernate, Jackson, Log4j, Logback
- Frontend : JavaScript, TypeScript, Angular, RxJS, Node.js, npm
- Infrastructure : Docker, Kubernetes, PostgreSQL, Nginx, Keycloak
Configurable dans backend/src/main/resources/application.yml.
cd backend
# Lancer la synchronisation
mvn spring-boot:run -Dspring-boot.run.arguments="--sync"
# Exécuter les tests unitaires
mvn testpython3 -m http.server 3000 --directory frontend
# Ouvrir http://localhost:3000