Hive est un acteur de la menace suivi par FactualRisk. Cette page recense les 84 vulnérabilités associées à son activité, triées par priorité de remédiation.
| CVE | Produit | CVSS | Prio | KEV |
| CVE-2026-48752 | go github.com/lxc/incus/v7/cmd/incusd | 9.9 | P0 | |
| CVE-2026-42601 | pip archivebox | 9.8 | P0 | |
| CVE-2026-42027 | maven org.apache.opennlp:opennlp-tools | 9.8 | P0 | |
| CVE-2026-64825 | pip homeassistant | 9.3 | P0 | |
| CVE-2026-53486 | npm @xhmikosr/decompress | 9.1 | P0 | |
| CVE-2026-35044 | pip bentoml | 8.8 | P0 | |
| CVE-2026-46612 | go github.com/fission/fission | 8.8 | P0 | |
| CVE-2026-71476 | npm nx | 8.7 | P0 | |
| CVE-2026-54727 | pip proot-distro | 8.2 | P0 | |
| CVE-2026-54574 | pip proot-distro | 8.2 | P0 | |
| CVE-2026-47740 | composer shopper/framework | 8.1 | P0 | |
| CVE-2026-49286 | composer pontedilana/php-weasyprint | 8.1 | P0 | |
| CVE-2026-11816 | pip keras | 8.1 | P0 | |
| CVE-2026-56876 | npm extract-zip | 8.1 | P0 | |
| CVE-2026-53932 | composer wnx/laravel-backup-restore | 8.0 | P0 | |
| CVE-2026-23879 | pip py7zr | 8.0 | P0 | |
| CVE-2026-50567 | go github.com/fission/fission | 7.7 | P0 | |
| CVE-2026-44017 | pip docling | 7.5 | P0 | |
| CVE-2026-43891 | pip changedetection.io | 7.5 | P0 | |
| CVE-2025-10156 | pip picklescan | 7.5 | P0 | |
| CVE-2026-20213 | Ubuntu | 7.5 | P0 | |
| CVE-2026-20214 | Ubuntu | 7.5 | P0 | |
| CVE-2026-59874 | npm tar | 7.5 | P0 | |
| CVE-2026-14164 | Ubuntu | 7.5 | P0 | |
| CVE-2025-9906 | pip keras | 7.3 | P0 | |
| CVE-2026-41567 | go github.com/moby/moby/v2 | 7.2 | P0 | |
| CVE-2026-17106 | go github.com/moby/go-archive | 7.1 | P0 | |
| CVE-2026-55885 | composer getgrav/grav | 6.8 | P2 | |
| CVE-2026-62843 | go github.com/filebrowser/filebrowser/v2 | 6.8 | P2 | |
| CVE-2026-59820 | pip litellm | 6.5 | P2 | |
| CVE-2026-39904 | go github.com/gophish/gophish | 6.5 | P2 | |
| CVE-2023-45815 | pip archivebox | 6.4 | P2 | |
| CVE-2026-10732 | npm decompress | 6.4 | P2 | |
| CVE-2026-44517 | go github.com/containers/buildah | 6.3 | P2 | |
| CVE-2026-58441 | go code.gitea.io/gitea | 6.3 | P2 | |
| CVE-2026-52773 | composer yeswiki/yeswiki | 6.1 | P2 | |
| CVE-2026-47121 | swift github.com/sparkle-project/Sparkle | 6.1 | P2 | |
| CVE-2026-54314 | npm n8n | 5.9 | P2 | |
| CVE-2026-44788 | nuget SharpCompress | 5.9 | P2 | |
| CVE-2026-50558 | pip penelope-shell-handler | 5.9 | P2 | |
| CVE-2026-55761 | go github.com/portainer/portainer | 5.9 | P2 | |
| CVE-2026-54250 | go github.com/k3s-io/k3s | 5.8 | P2 | |
| CVE-2026-44018 | pip docling | 5.5 | P2 | |
| CVE-2018-1002206 | nuget sharpcompress | 5.5 | P2 | |
| CVE-2026-12480 | pip keras | 5.5 | P2 | |
| CVE-2026-39243 | npm decompress | 5.5 | P2 | |
| CVE-2026-55779 | composer silverstripe/versioned | 5.4 | P2 | |
| CVE-2026-35592 | pip pyload-ng | 5.3 | P2 | |
| CVE-2026-12565 | pip bbot | 5.3 | P2 | |
| CVE-2026-4635 | go github.com/mattermost/mattermost-server | 5.3 | P2 | |
| CVE-2026-59871 | npm tar | 5.3 | P2 | |
| CVE-2026-59732 | go github.com/rclone/rclone | 5.0 | P2 | |
| CVE-2026-70589 | npm ghost | 4.8 | P2 | |
| CVE-2026-58196 | go github.com/stacklok/toolhive | 4.7 | P2 | |
| CVE-2026-66484 | Ubuntu | 4.6 | P2 | |
| CVE-2026-6340 | go github.com/mattermost/mattermost/server | 4.3 | P2 | |
| CVE-2026-50105 | go code.gitea.io/gitea | 4.3 | P2 | |
| CVE-2026-58444 | go code.gitea.io/gitea | 4.3 | P2 | |
| CVE-2026-27761 | go code.gitea.io/gitea | 4.3 | P2 | |
| CVE-2026-55548 | maven org.yamcs:yamcs-core | 4.3 | P2 | |
| CVE-2026-15028 | Ubuntu | 3.9 | P3 | |
| CVE-2026-12482 | pip keras | 3.1 | P3 | |
| CVE-2024-12905 | Ubuntu | 0.0 | P3 | |
| CVE-2025-48387 | Ubuntu | 0.0 | P3 | |
| CVE-2026-7860 | maven com.vaadin:flow-plugins | 0.0 | P3 | |
| CVE-2026-47669 | npm dbgate | 0.0 | P3 | |
| CVE-2025-1550 | pip keras | 0.0 | P3 | |
| CVE-2026-0897 | pip keras | 0.0 | P3 | |
| CVE-2026-43961 | Ubuntu | 0.0 | P3 | |
| CVE-2026-46483 | Ubuntu | 0.0 | P3 | |
| CVE-2026-54093 | go github.com/filebrowser/filebrowser/v2 | 0.0 | P3 | |
| CVE-2026-20706 | go code.gitea.io/gitea | 0.0 | P3 | |
| CVE-2026-55206 | pip py7zr | 0.0 | P3 | |
| CVE-2026-55195 | pip py7zr | 0.0 | P3 | |
| CVE-2026-55828 | go go.qbee.io/transport | 0.0 | P3 | |
| CVE-2026-42496 | Ubuntu | 0.0 | P3 | |
| CVE-2026-8376 | Ubuntu | 0.0 | P3 | |
| CVE-2026-33026 | go github.com/0xJacky/Nginx-UI | 0.0 | P3 | |
| CVE-2026-53600 | rust async-tar | 0.0 | P3 | |
| CVE-2026-54448 | go github.com/aquasecurity/trivy | 0.0 | P3 | |
| CVE-2026-54450 | go github.com/stacklok/toolhive | 0.0 | P3 | |
| CVE-2026-14266 | 0.0 | P3 | ||
| CVE-2026-49755 | erlang req | 0.0 | P3 | |
| CVE-2026-66485 | Ubuntu | 0.0 | P3 |
La donnée est gratuite. Pour un avis sur l'impact réel sur votre parc et un plan de remédiation, on en parle.
Nous contacter →