Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5A memory exhaustion vulnerability exists in ZIP archive processing.Apr 9, 2026
- High7.5A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with .Apr 9, 2026
- Medium6.5Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory e…Apr 9, 2026
- Medium6.5Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory e…EPSS 0.3%Apr 9, 2026
- High8.7Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attackers to cause denial of service.Apr 8, 2026
- High7.1MinIO is a high-performance object storage system.Apr 8, 2026
- High7.5A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-se…Apr 8, 2026
- High7.5Saleor is an e-commerce platform.Apr 8, 2026
- High7.5Saleor is an e-commerce platform.Apr 8, 2026
- Medium5.5tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sp…Apr 8, 2026
- High7.5If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.Apr 8, 2026
- High7.5During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermedia…Apr 8, 2026
- Critical9.1Podman Desktop is a graphical tool for developing on containers and Kubernetes.Apr 7, 2026
- High7.5OpenTelemetry-Go is the Go implementation of OpenTelemetry.Apr 7, 2026
- Medium5.3Allocation of resources without limits or throttling vulnerability in Wikimedia Foundation MediaWiki - ReportIncident Extension allows HTTP DoS.Apr 7, 2026
- High7.5Strawberry GraphQL is a library for creating GraphQL APIs.Apr 7, 2026
- Medium6.2go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and…Apr 7, 2026
- High8.2libp2p-rust is the official rust language Implementation of the libp2p networking stack.Apr 7, 2026
- High7.5libp2p-rust is the official rust language Implementation of the libp2p networking stack.Apr 7, 2026
- High7.5An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Apr 7, 2026
- Medium6.5In Modem, there is a possible system crash due to a logic error.EPSS 0.3%Apr 7, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Apr 6, 2026
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Apr 6, 2026
- High7.5Fedify is a TypeScript library for building federated server apps powered by ActivityPub.Apr 6, 2026