Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()Oct 14, 2026
- Medium6.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- High8.7Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob IngestionOct 14, 2026
- High8.1Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models.Oct 14, 2026
- Medium6.5Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.Oct 14, 2026
- High7.0Windows Backup Engine Elevation of Privilege VulnerabilityEPSS 0.3%Oct 13, 2026
- High8.5Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.EPSS 0.2%Oct 13, 2026
- Medium6.7Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-…EPSS 0.1%Oct 12, 2026
- Medium5.7phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting lexical-on…EPSS 0.2%Oct 10, 2026
- High7.8Microsoft Windows Link Following VulnerabilityKEVEPSS 0.4%Sep 8, 2026
- High8.6NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root.EPSS 0.2%Aug 22, 2026
- Medium6.5Runtipi is a personal homeserver orchestrator.EPSS 0.6%Aug 21, 2026
- Medium5.9Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD.EPSS 0.5%Aug 21, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionEPSS 0.4%Jul 8, 2026
- High7.5Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control th…EPSS 0.4%May 27, 2026
- High7.8Microsoft Defender Link Following VulnerabilityKEVEPSS 0.4%May 20, 2026
- Medium5.5Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.EPSS 0.4%Apr 14, 2026
- Medium4.4A path traversal vulnerability has been reported to affect several product versions.EPSS 0.1%Jan 2, 2026
- High8.8A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges.EPSS 0.2%Dec 10, 2025
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.EPSS 0.7%Dec 9, 2025
- Medium5.5Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.EPSS 0.4%Dec 9, 2025
- High7.8Microsoft Windows Link Following VulnerabilityKEVEPSS 4.6%Nov 11, 2025
- High8.0Git Link Following VulnerabilityKEVEPSS 4.4%Jul 8, 2025
- High7.1Microsoft Windows Storage Link Following VulnerabilityKEVEPSS 2.3%Feb 11, 2025
48 records · page 1 of 2
PreviousNext