Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.Apr 10, 2026
- High8.1The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9.Apr 10, 2026
- Medium5.3PraisonAIAgents is a multi-agent teams system.Apr 9, 2026
- Medium4.8Helm is a package manager for Charts for Kubernetes.Apr 9, 2026
- High7.1flatpak-builder is a tool to build flatpaks from source.Apr 9, 2026
- High8.8AGiXT is a dynamic AI Agent Automation Platform.Apr 9, 2026
- Medium5.5A vulnerability was detected in Tenda CH22 1.0.0.6(468).Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Apr 9, 2026
- High7.5HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL.Apr 9, 2026
- Medium5.5A vulnerability was determined in Tenda i12 1.0.0.11(3862).Apr 9, 2026
- Medium5.5A weakness has been identified in Tenda i3 1.0.0.6(2204).Apr 9, 2026
- High8.4ALEAPP (Android Logs Events And Protobuf Parser) through 3.4.0 contains a path traversal vulnerability in the NQ_Vault.py artifact parser that uses attacker-controlled…Apr 8, 2026
- High8.4The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tsk_recover that allows an attacker to write files to arbitrary locations outside the intended…Apr 8, 2026
- High8.1The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1.Apr 8, 2026
- High7.5NiceGUI is a Python-based UI framework.Apr 8, 2026
- Medium6.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Apr 8, 2026
- Critical9.8Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Pa…Apr 8, 2026
- Medium5.9Hono is a Web application framework that provides support for any JavaScript runtime.Apr 8, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Apr 8, 2026
- Medium5.3@hono/node-server allows running the Hono application on Node.js.Apr 8, 2026
- High8.8The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all…Apr 8, 2026
- High7.5Emmett is a full-stack Python web framework designed with simplicity.Apr 7, 2026
- Medium6.3LibreChat is a ChatGPT clone with additional features.Apr 7, 2026
- High8.7Flatpak is a Linux application sandboxing and distribution framework.Apr 7, 2026
- High7.6WWBN AVideo is an open source video platform.Apr 7, 2026