Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7CryptPad 2025.3.1 allows unbounded WebSocket frame flood.EPSS 0.6%Apr 30, 2026
- High7.5pgjdbc is an open source postgresql JDBC Driver.Apr 29, 2026
- Medium5.3OpenClaw before 2026.4.8 contains improper input validation in base64 decode paths that allocate memory before enforcing decoded-size limits.Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations.Apr 28, 2026
- Medium6.9OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation.Apr 28, 2026
- High8.7OpenClaw before 2026.3.28 accepts unbounded concurrent unauthenticated WebSocket upgrades without pre-authentication budget allocation.Apr 28, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.Apr 27, 2026
- Medium6.9Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- High7.5Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.EPSS 0.6%Apr 24, 2026
- High7.5basic-ftp is an FTP client for Node.js.Apr 24, 2026
- High8.2Open Source Social Network (OSSN) is open-source social networking software developed in PHP.Apr 24, 2026
- Medium5.9The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray.Apr 23, 2026
- Medium5.9OpenTelemetry dotnet is a dotnet telemetry framework.Apr 23, 2026
- Medium5.3nimiq-libp2p is a Nimiq network implementation based on libp2p.Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly rel…Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buff…Apr 22, 2026
- High7.5An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service.Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Apr 22, 2026
- High7.5By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches.Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Apr 22, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain condit…EPSS 0.4%Apr 22, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticateEPSS 0.4%Apr 22, 2026