Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Cilium is a networking, observability, and security solution with an eBPF-based dataplane.Mar 27, 2026
- High7.5Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0.Mar 26, 2026
- High7.5Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 befo…Mar 26, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.Mar 26, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.Mar 26, 2026
- Medium4.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Mar 26, 2026
- Medium4.3Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which a…Mar 26, 2026
- Medium4.3Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Mar 26, 2026
- Medium6.5Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Mar 26, 2026
- Medium5.2EVerest is an EV charging software stack.Mar 26, 2026
- Medium5.2EVerest is an EV charging software stack.Mar 26, 2026
- Medium6.5EVerest is an EV charging software stack.Mar 26, 2026
- Medium6.5etcd is a distributed key-value store for the data of a distributed system.Mar 26, 2026
- Medium5.4Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-level access when processing membership sync from a…Mar 26, 2026
- Medium6.9Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/we…Mar 26, 2026
- Medium6.9Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/ /'.Mar 26, 2026
- Medium4.3NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- Medium6.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- High7.3n8n is an open source workflow automation platform.Mar 25, 2026
- Medium6.3n8n is an open source workflow automation platform.Mar 25, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal Material Icons allows Forceful Browsing.This issue affects Material Icons: from 0.0.0 before 2.0.4.Mar 25, 2026
- Low3.3This issue was addressed with improved permissions checking.Mar 25, 2026
- Low3.7GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions…Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Mar 25, 2026
- High7.1FileRise is a self-hosted web file manager / WebDAV server.Mar 24, 2026