CVE Program partner
alibaba
Alibaba, Inc.
CVEs, 365 days45 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Alibaba, Inc. |
| Role | CNA |
| Type | Vendor, Open Source |
| Reports to | mitre |
| Scope | Projects listed on its <a href='https://github.com/alibaba' target='_blank'>Alibaba GitHub website</a> only. |
| Advisories | https://security.alibaba.com/announcement.htm |
Latest CVEs · RSS
- CVE-2026-9680 2026-07-28 · CVSS 5.8Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endp
- CVE-2026-16723 2026-07-23 · CVSS 9.0A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configura
- CVE-2026-6328 2026-04-15 · CVSS 8.3Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, p
- CVE-2026-1788 2026-02-03 · CVSS 6.6: Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffe
- CVE-2021-33800 2021-11-03In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal.