Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5protobufjs compiles protobuf definitions into JavaScript (JS) functions.May 13, 2026
- Medium5.5NanaZip is an open source file archive.May 12, 2026
- Medium5.5NanaZip is an open source file archive.May 12, 2026
- Medium6.1Issuing an ICMP ping via the shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue…EPSS 0.1%May 12, 2026
- Medium5.4jq is a command-line JSON processor.May 11, 2026
- Medium5.5jq is a command-line JSON processor.May 11, 2026
- Medium5.4jq is a command-line JSON processor.May 11, 2026
- Medium6.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.May 9, 2026
- High8.7xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) and module.May 7, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct_prepare_negotiation() smb_direct_prepare_negotiation() ca…May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot reported a WARN on my patch series [1].EPSS 0.2%May 6, 2026
- High7.5An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2.May 5, 2026
- High7.5Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters.Apr 30, 2026
- Medium5.5ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceApr 30, 2026
- Medium5.5Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceApr 30, 2026
- Medium5.5BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceApr 30, 2026
- Medium5.5FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceApr 30, 2026
- Medium5.5AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceApr 30, 2026
- Medium5.5ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceApr 30, 2026
- High8.7Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.Apr 28, 2026
- Medium5.3Uncontrolled Recursion vulnerability in Apache Thrift.Apr 28, 2026
- Medium6.9Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion.EPSS 0.1%Apr 26, 2026
- Medium6.9Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- High8.7Marked is a markdown parser and compiler.Apr 24, 2026
- Medium5.5A flaw was found in libefiboot, a component of efivar.Apr 22, 2026