Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de.Apr 26, 2026
- Low2.9A security flaw has been discovered in Ollama up to 0.20.2.Apr 26, 2026
- High7.1Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to write files outside intended…Apr 24, 2026
- High8.4OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Apr 24, 2026
- High7.1SiYuan is an open-source personal knowledge management system.Apr 24, 2026
- High7.64ga Boards is a boards system for realtime project management.Apr 24, 2026
- Low0.6Poetry is a dependency manager for Python.Apr 24, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Apr 24, 2026
- High8.9Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Apr 24, 2026
- Low3.3melange allows users to build apk packages using declarative pipelines.Apr 24, 2026
- Medium6.1melange allows users to build apk packages using declarative pipelines.Apr 24, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured projec…Apr 23, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying…Apr 23, 2026
- High7.7Mako is a template library written in Python.Apr 23, 2026
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Apr 23, 2026
- High8.4Vite+ is a unified toolchain and entry point for web development.Apr 23, 2026
- High7.5PsiTransfer is an open source, self-hosted file sharing solution.Apr 23, 2026
- Medium4.9IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system.Apr 23, 2026
- High8.7A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier.Apr 23, 2026
- Critical9.1EspoCRM is an open source customer relationship management application.Apr 22, 2026
- High7.1Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.ph…Apr 22, 2026
- Medium5.6A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the current directory.Apr 22, 2026
- High7.3A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism.Apr 22, 2026
- Critical9.1DDEV is an open-source tool for running local web development environments for PHP and Node.js.Apr 22, 2026
- High7.1A flaw was found in InstructLab.Apr 22, 2026