Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Apr 7, 2026
- Medium6.5In Modem, there is a possible system crash due to a logic error.Apr 7, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Apr 6, 2026
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Apr 6, 2026
- High7.5Fedify is a TypeScript library for building federated server apps powered by ActivityPub.Apr 6, 2026
- High7.5Mesop is a Python-based UI framework that allows users to build web applications.Apr 3, 2026
- Medium5.9LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI.Apr 3, 2026
- High8.7Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by…Apr 3, 2026
- High7.5Budibase is an open-source low-code platform.Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrar…Apr 3, 2026
- Medium4.3An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php fileApr 3, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High8.2Ash Framework is a declarative, extensible framework for building Elixir applications.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.Apr 2, 2026
- Low2.1A vulnerability was identified in Nothings stb up to 1.22.Apr 2, 2026
- Medium6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a…Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Medium6.9AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- Medium5.0go-git is an extensible git implementation library written in pure Go.Mar 31, 2026