Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Mesop is a Python-based UI framework that allows users to build web applications.Apr 3, 2026
- Medium5.9LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI.Apr 3, 2026
- High8.7Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by…Apr 3, 2026
- High7.5Budibase is an open-source low-code platform.Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrar…Apr 3, 2026
- Medium4.3An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php fileApr 3, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High8.2Ash Framework is a declarative, extensible framework for building Elixir applications.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.Apr 2, 2026
- Low2.1A vulnerability was identified in Nothings stb up to 1.22.Apr 2, 2026
- Medium6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a…EPSS 0.3%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Medium6.9AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.EPSS 0.4%Apr 1, 2026
- Medium5.0go-git is an extensible git implementation library written in pure Go.Mar 31, 2026
- High7.5A flaw in Node.js HTTP request handling causes an uncaught when a request is received with a header named and the application accesses .EPSS 25.0%Mar 30, 2026
- High8.7OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated atta…Mar 29, 2026
- High8.7Netty is an asynchronous, event-driven network application framework.Mar 27, 2026
- High8.7Fleet is open source device management software.Mar 27, 2026
- High7.5The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.Mar 27, 2026
- High7.5Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.Mar 27, 2026