Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.0go-git is an extensible git implementation library written in pure Go.Mar 31, 2026
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerEPSS 25.0%Mar 30, 2026
- High8.7OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-token header, allowing unauthenticated atta…Mar 29, 2026
- High8.7Netty is an asynchronous, event-driven network application framework.Mar 27, 2026
- High8.7Fleet is open source device management software.Mar 27, 2026
- High7.5The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.Mar 27, 2026
- High7.5Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.Mar 27, 2026
- High7.5Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.Mar 27, 2026
- Medium6.5Incus is a system container and virtual machine manager.Mar 26, 2026
- Low2.3Active Storage allows users to attach cloud and local files in Rails applications.Mar 26, 2026
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium6.5TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Mar 26, 2026
- Medium6.5Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.Mar 26, 2026
- Medium5.5A flaw was found in polkit.Mar 26, 2026
- High7.1A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10).Mar 26, 2026
- Medium5.3NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- High7.5If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.EPSS 1.6%Mar 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…EPSS 0.4%Mar 25, 2026
- Medium6.9NiceGUI is a Python-based UI framework.Mar 24, 2026
- High7.5Astro is a web framework.Mar 24, 2026
- High8.7Salvo is a Rust web framework.Mar 24, 2026
- Medium6.6Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Mar 24, 2026
- High7.5WWBN AVideo is an open source video platform.Mar 23, 2026
- High8.7OpenClaw versions prior to 2026.2.22 fail to consistently enforce configured inbound media byte limits before buffering remote media across multiple channel ingestion paths.Mar 21, 2026
- High8.7DeepDiff is a project focused on Deep Difference and search of any Python data.Mar 20, 2026