Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticatEPSS 0.4%Apr 22, 2026
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticatEPSS 0.4%Apr 22, 2026
- Low3.7Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).EPSS 0.3%Apr 21, 2026
- Medium6.3ZEBRA is a Zcash node written entirely in Rust.Apr 21, 2026
- Medium6.1Parsing a malicious font file can cause excessive memory allocation.Apr 21, 2026
- Medium5.5Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams.Apr 21, 2026
- High8.9FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- Medium6.5OpenBao is an open source identity-based secrets management system.Apr 21, 2026
- Medium4.5A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver.Apr 20, 2026
- High7.5Vault is vulnerable to a denial-of-service condition where an unauthenticated attacker can repeatedly initiate or cancel root token generation or rekey operations, occ…Apr 17, 2026
- High8.7mcp-framework is a framework for building Model Context Protocol (MCP) servers.Apr 16, 2026
- High8.7spdystream is a Go library for multiplexing streams over SPDY connections.Apr 16, 2026
- High8.7Pillow is a Python imaging library.Apr 15, 2026
- High8.7Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc.Apr 15, 2026
- Medium6.9XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Apr 15, 2026
- Critical9.8In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.Apr 13, 2026
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Apr 12, 2026
- High8.2SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Apr 10, 2026
- High7.1Vikunja is an open-source self-hosted task management platform.Apr 10, 2026
- High7.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.Apr 10, 2026
- High7.5PraisonAI is a multi-agent teams system.Apr 9, 2026
- High7.5PraisonAI is a multi-agent teams system.Apr 9, 2026
- Medium6.9OpenClaw before 2026.3.22 contains an unbounded memory allocation vulnerability in remote media HTTP error handling that allows attackers to trigger excessive memory consumption.Apr 9, 2026
- High7.1Tmds.DBus provides .NET libraries for working with D-Bus from .NET.Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the header.Apr 9, 2026