Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3.Apr 28, 2026
- Medium5.5A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27.Apr 28, 2026
- Medium5.5A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca1747bf.Apr 28, 2026
- Medium5.5A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0.Apr 28, 2026
- Medium5.5A security vulnerability has been detected in Deepractice PromptX up to 2.4.0.Apr 28, 2026
- Medium5.5A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd.Apr 28, 2026
- Medium5.5A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3.Apr 28, 2026
- Medium5.5A vulnerability was detected in ef10007 MLOps_MCP 1.0.0.Apr 28, 2026
- Medium5.5A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4.Apr 28, 2026
- Medium5.5A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598.Apr 28, 2026
- High7.1OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths.Apr 28, 2026
- Medium6.0OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandb…Apr 28, 2026
- Low1.9A security vulnerability has been detected in OSPG binwalk up to 2.4.3.Apr 27, 2026
- Medium5.5A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1.Apr 27, 2026
- Medium6.0If is given a ZIP archive with an absolute Windows path containing a drive ( ) then the archive will be extracted outside the target directory which is different than…Apr 27, 2026
- Medium5.5A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d.Apr 27, 2026
- Medium4.3A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal.Apr 27, 2026
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated a…Apr 27, 2026
- High8.7ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload…Apr 27, 2026
- High7.5A path traversal vulnerability in the UI/static component of leonvanzyl autocoder commit 79d02a allows attackers to read arbitrary files via sending crafted URL path c…Apr 27, 2026
- Medium5.5A vulnerability was found in code-projects Online Lot Reservation System up to 1.0.Apr 27, 2026
- Low2.1A vulnerability was identified in HBAI-Ltd Toonflow-app up to 1.1.1.Apr 27, 2026
- Low1.3A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1.Apr 27, 2026
- Medium5.5A vulnerability was found in 666ghj MiroFish up to 0.1.2.Apr 26, 2026
- Medium5.5A vulnerability was identified in Tenda i9 1.0.0.5(2204).Apr 26, 2026