Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- High7.8Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- Critical9.6Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the…Apr 14, 2026
- High7.2The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…Apr 14, 2026
- Critical9.3Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting malicious serialized objects into cache files.Apr 13, 2026
- High8.8Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Apr 13, 2026
- High7.8A vulnerability in the class of the package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of models, even when .EPSS 0.4%Apr 13, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Storm.Apr 13, 2026
- High7.5Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.Apr 13, 2026
- Medium4.1When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation.Apr 9, 2026
- Critical9.4A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permis…Apr 8, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Apr 8, 2026
- High7.5A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-se…Apr 8, 2026
- High8.8A flaw was found in Red Hat Quay's handling of resumable container image layer uploads.Apr 8, 2026
- Critical9.8The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from fo…Apr 8, 2026
- High8.8IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting whic…Apr 8, 2026
- Critical9.3Open Access Management (OpenAM) is an access management solution.Apr 7, 2026
- Critical9.3Rack::Session is a session management implementation for Rack.Apr 7, 2026
- High7.3NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data.Apr 7, 2026
- High7.5pyLoad is a free and open-source download manager written in Python.Apr 7, 2026
- High7.8A vulnerability in the HuggingFace Transformers library, specifically in the class, allows for arbitrary code execution.EPSS 0.4%Apr 7, 2026
- Critical9.8Kedro is a toolbox for production-ready data science.Apr 6, 2026
- Low2.1A vulnerability was found in pytries datrie up to 0.8.3.Apr 6, 2026
- Medium6.9A weakness has been identified in FedML-AI FedML up to 0.8.9.Apr 5, 2026
- Low1.1A vulnerability has been found in NASA cFS up to 7.0.0.Apr 3, 2026