Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications.Mar 20, 2026
- Medium5.7Sliver is a command and control framework that uses a custom Wireguard netstack.Mar 20, 2026
- High8.7OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before perf…Mar 19, 2026
- High8.7OpenClaw versions prior to 2026.3.1 contain an unbounded memory growth vulnerability in the Zalo webhook endpoint that allows unauthenticated attackers to trigger in-m…Mar 19, 2026
- High7.5DiceBear is an avatar library for designers and developers.Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Mar 18, 2026
- High7.5IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.EPSS 0.5%Mar 17, 2026
- High7.5Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly handle very long passwords, which allows an attacker to overload the serve…Mar 16, 2026
- Medium4.3Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Mar 13, 2026
- High8.7wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the ch…EPSS 0.5%Mar 13, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Mar 12, 2026
- High7.5The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.EPSS 1.2%Mar 12, 2026
- High7.5flatted is a circular JSON parser.Mar 12, 2026
- Medium4.8Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.Mar 12, 2026
- Medium5.5Quill provides simple mac binary signing and notarization from any platform.Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Mar 11, 2026
- Medium6.7InputMapper 1.6.10 contains a buffer overflow vulnerability in the username field that allows local attackers to crash the application by entering an excessively long string.EPSS 0.2%Mar 11, 2026
- High7.5flagd is a feature flag daemon with a Unix philosophy.Mar 11, 2026
- High8.7OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream…Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an un…EPSS 0.5%Mar 11, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an a…EPSS 0.4%Mar 11, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.3 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that under certain conditions…EPSS 0.4%Mar 11, 2026
- Medium6.8pypdf is a free and open-source pure-python PDF library.Mar 10, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 10, 2026
- High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.Mar 10, 2026