Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Nest is a framework for building scalable Node.js server-side applications.Apr 21, 2026
- Medium6.5OpenBao is an open source identity-based secrets management system.Apr 21, 2026
- Critical9.1Hot Chocolate is an open-source GraphQL server.Apr 18, 2026
- Medium5.5jq is a command-line JSON processor.Apr 13, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Apr 13, 2026
- High7.5FastFeedParser is a high performance RSS, Atom and RDF parser.Apr 7, 2026
- Medium6.9SandboxJS is a JavaScript sandboxing library.Apr 6, 2026
- Medium5.5The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF.Apr 1, 2026
- Medium5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.Mar 31, 2026
- Medium4.3is a YAML parser and serialiser for JavaScript.Mar 26, 2026
- Low1.9A weakness has been identified in Orc discount up to 3.0.1.2.Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in __configfs_open_file() In flush_write_buffer, &p->frag_sem i…EPSS 0.1%Mar 25, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 24, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 24, 2026
- Medium6.2Dasel is a command-line tool and library for querying, modifying, and transforming data structures.Mar 24, 2026
- High7.5cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.Mar 23, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: add xmit recursion limit to tunnel xmit functions Tunnel xmit functions (iptunnel_xmit, ip6tun…EPSS 0.1%Mar 20, 2026
- High7.5AutoMapper is a convention-based object-object mapper in .NET.Mar 20, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 18, 2026
- High7.5pyasn1 is a generic ASN.1 library for Python.Mar 18, 2026
- Medium6.0When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.Mar 16, 2026
- High7.5CairoSVG is an SVG converter based on Cairo, a 2D graphics library.Mar 13, 2026
- High7.5flatted is a circular JSON parser.Mar 12, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of serv…EPSS 0.4%Mar 11, 2026