Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.May 14, 2026
- High8.6Aegra is a drop-in replacement for LangSmith Deployments.May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.EPSS 0.3%May 14, 2026
- Medium6.8Authorization bypass through User-Controlled key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd.May 14, 2026
- High7.1Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter.May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc.EPSS 0.2%May 14, 2026
- Critical9.8Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software Technologies Ltd.May 14, 2026
- Medium5.3The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_property_from_querystring() fun…May 14, 2026
- High8.2The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in al…May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditio…May 14, 2026
- High8.2The Fluent Forms plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 6.1.21.May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…EPSS 0.2%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed a…EPSS 0.2%May 14, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versio…May 14, 2026
- Medium6.5ShellHub is a centralized SSH gateway.May 13, 2026
- Medium6.5ShellHub is a centralized SSH gateway.May 13, 2026
- Medium6.5ShellHub is a centralized SSH gateway.May 13, 2026
- High8.6SQLBot is an intelligent Text-to-SQL system based on large language models and RAG.May 13, 2026
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9.May 13, 2026
- Medium5.3The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_conte…EPSS 0.3%May 13, 2026
- Medium5.3GoJobs is a REST API for a Job Board platform.May 12, 2026
- Critical9.1Relay adds real-time collaboration to Obsidian.May 12, 2026
- Critical9.1Insufficient ownership check in allows an authenticated client area user to submit requests using another user’s without any ownership validation leading to unauthoriz…May 12, 2026