Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5express-rate-limit is a basic rate-limiting middleware for Express.Mar 7, 2026
- High7.5stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR.Mar 6, 2026
- High7.5CoreDNS is a DNS server that chains plugins.Mar 6, 2026
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Mar 6, 2026
- Medium6.8OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers before enforcing decoded-size budget limits, allowing attackers to trigger large me…Mar 5, 2026
- High8.7OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before…Mar 5, 2026
- High8.7OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook handlers that buffer request bodies without strict byte or time limits.Mar 5, 2026
- Medium6.7OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the extractArchive function within src/infra/archive.ts that allows attackers to cons…Mar 5, 2026
- Medium6.9OpenClaw versions prior to 2026.2.15 contain a denial of service vulnerability in the web_fetch tool that allows attackers to crash the Gateway process through memory…Mar 5, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Mar 5, 2026
- Medium4.4Traefik is an HTTP reverse proxy and load balancer.Mar 5, 2026
- High8.6A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD)…EPSS 0.4%Mar 4, 2026
- High8.7Multer is a node.js middleware for handling .Mar 4, 2026
- High7.5joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.Mar 3, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.Mar 3, 2026
- High7.5An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Mar 3, 2026
- Medium6.9Spin is an open source developer tool for building and running serverless applications powered by WebAssembly.Feb 26, 2026
- High8.7TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Feb 26, 2026
- High8.7TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Feb 26, 2026
- High7.5USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of serviceFeb 25, 2026
- Medium5.3zae-limiter is a rate limiting library using the token bucket algorithm.Feb 25, 2026
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated useFeb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denialEPSS 0.4%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedEPSS 0.4%Feb 25, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have, under certain circumstanceEPSS 0.3%Feb 25, 2026