Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8goshs is a SimpleHTTPServer written in Go.Apr 6, 2026
- Critical9.8goshs is a SimpleHTTPServer written in Go.Apr 6, 2026
- High7.1Vim is an open source, command line text editor.Apr 6, 2026
- High7.2Chyrp Lite is an ultra-lightweight blogging engine.Apr 6, 2026
- High8.1Kedro is a toolbox for production-ready data science.Apr 6, 2026
- High8.8text-generation-webui is an open-source web interface for running Large Language Models.Apr 6, 2026
- High7.1kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file writeEPSS 0.4%Apr 6, 2026
- High8.1Ferret is a declarative system for working with web data.Apr 6, 2026
- Medium5.5A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1.Apr 6, 2026
- Low2.1A flaw has been found in griptape-ai griptape 0.19.4.Apr 5, 2026
- Critical9.3Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by ex…EPSS 1.4%Apr 5, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…EPSS 0.7%Apr 5, 2026
- Low2.1A security vulnerability has been detected in griptape-ai griptape 0.19.4.Apr 5, 2026
- Low2.1A security flaw has been discovered in FedML-AI FedML up to 0.8.9.Apr 5, 2026
- High8.8The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 2.4.16.Apr 4, 2026
- High7.2Emlog is an open source website building system.Apr 3, 2026
- Medium6.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Apr 3, 2026
- Medium6.1Zulip is an open-source team collaboration tool.Apr 3, 2026
- High8.6prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the client system…EPSS 0.4%Apr 3, 2026
- Critical9.6The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property.Apr 3, 2026
- High8.7Budibase is an open-source low-code platform.Apr 3, 2026
- High8.3An issue was discovered in Biztalk360 before 11.5.EPSS 0.7%Apr 3, 2026
- Medium6.8An issue was discovered in Biztalk360 through 11.5.EPSS 0.9%Apr 3, 2026
- High8.1The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1.Apr 3, 2026
- Critical9.1Fireshare facilitates self-hosted media and link sharing.Apr 2, 2026