Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5apko allows users to build and publish OCI container images built from apk packages.May 9, 2026
- High7.5pygeoapi is a Python server implementation of the OGC API suite of standards.May 8, 2026
- Medium5.1SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM.May 8, 2026
- High8.7SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated…May 8, 2026
- Medium5.3novaGallery is a php image gallery.May 8, 2026
- Medium4.9Flarum is open-source forum software.May 8, 2026
- Critical9.8Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequ…May 8, 2026
- High8.2i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno.May 8, 2026
- Medium6.5i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno.May 8, 2026
- High8.2i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem.May 8, 2026
- High8.618next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno.May 8, 2026
- High8.7PraisonAI is a multi-agent teams system.May 8, 2026
- Critical9.4PraisonAI is a multi-agent teams system.May 8, 2026
- Medium6.9YARD is a Ruby Documentation tool.May 8, 2026
- High8.1Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge.May 8, 2026
- High8.5PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protoco…May 8, 2026
- Medium4.9Kimai is an open-source time tracking application.May 8, 2026
- High8.4electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- High8.7zrok is software for sharing web services, files, and network resources.May 8, 2026
- Low2.1A weakness has been identified in huangjunsen0406 xiaozhi-mcphub up to 1.0.3.May 8, 2026
- Medium5.5A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4.May 7, 2026
- Low2.1A vulnerability was determined in 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f.May 7, 2026
- Critical9.1Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.May 7, 2026
- High7.8GitPython is a python library used to interact with Git repositories.May 7, 2026
- Critical9.6Wish is an SSH server with defaults and a collection of middlewares.May 7, 2026