Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- LowGitHub CLI allows attestation verification bypass through unescaped regex metacharactersOct 15, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.EPSS 0.3%May 28, 2026
- High7.5An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation.Apr 21, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Apr 21, 2026
- Medium5.4Istio is an open platform to connect, manage, and secure microservices.Apr 15, 2026
- Medium6.3league/commonmark is a PHP Markdown parser.Mar 24, 2026
- High7.5DiceBear is an avatar library for designers and developers.Mar 24, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Mar 18, 2026
- Medium5.3Fastify incorrectly accepts malformed headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1(https://httpwg.org/specs/rfc9110.…Mar 6, 2026
- Critical9.3fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.Feb 20, 2026
10 records · page 1 of 1
PreviousNext