Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High8.2Ash Framework is a declarative, extensible framework for building Elixir applications.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- Low2.1A vulnerability was identified in Nothings stb up to 1.22.Apr 2, 2026
- Medium6.9AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.EPSS 0.4%Apr 1, 2026
- High8.6Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Apr 1, 2026
- Medium6.9Nuxt OG Image generates OG Images with Vue templates in Nuxt.Mar 31, 2026
- High7.5Serialize JavaScript to a superset of JSON that includes regular expressions and functions.Mar 31, 2026
- High7.5The brace-expansion library generates arbitrary strings containing a common prefix and suffix.Mar 27, 2026
- Medium6.5A testdata data-source can be used to trigger out-of-memory crashes in Grafana.Mar 27, 2026
- Medium6.5A resample query can be used to trigger out-of-memory crashes in Grafana.Mar 27, 2026
- Medium5.3A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU.Mar 27, 2026
- High7.5Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.Mar 27, 2026
- High7.5Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.Mar 27, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium6.5TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Mar 26, 2026
- Medium6.5The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memo…Mar 26, 2026
- High7.5Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as .Mar 26, 2026
- Medium4.9Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disru…Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Mar 26, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote att…Mar 25, 2026