Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Low3.5Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in…CVE-2026-60008 · CVE.org · NIST NVDOct 14, 2026
Medium5.4Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.CVE-2026-106356 · Google · Chrome · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · chromeEPSS 0.2%Oct 6, 2026