Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs…Mar 16, 2026
- High7.4FastMCP is the standard framework for building MCP applications.EPSS 0.4%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users…Mar 16, 2026
- Low3.5Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker t…EPSS 0.2%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post fi…Mar 16, 2026
- Low2.7AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Mar 16, 2026
- Low3.8AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Mar 16, 2026
- Medium6.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials wh…Mar 16, 2026
- Medium4.8Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application.EPSS 0.1%Mar 16, 2026
- High7.5PyJWT is a JSON Web Token implementation in Python.Mar 13, 2026
- Medium4.1Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Mar 13, 2026
- Medium6.5Tinyauth is an authentication and authorization server.Mar 12, 2026
- Medium5.3A security vulnerability has been detected in projectsend up to r1945.Mar 12, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Mar 11, 2026
- Low2.3Copyparty is a portable file server.Mar 11, 2026
- High7.1OliveTin gives access to predefined shell commands from a web interface.Mar 11, 2026
- Medium6.3StudioCMS is a server-side-rendered, Astro native, headless content management system.Mar 11, 2026
- High8.9Shopware is an open commerce platform.Mar 11, 2026
- High7.1OpenProject is an open-source, web-based project management software.Mar 11, 2026
- Medium4.3OpenProject is an open-source, web-based project management software.Mar 11, 2026
- Low2.1An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a ne…EPSS 0.3%Mar 11, 2026
- Low2.1Excessive caching of authentication context in Neo4j Enterprise edition versions prior to 2026.01.4 leads to authenticated users inheriting the context of the first us…EPSS 0.3%Mar 11, 2026
- High8.9Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Mar 11, 2026
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Mar 11, 2026
- Low2.0Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin…EPSS 0.2%Mar 11, 2026