Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing atta…Mar 11, 2026
- Medium4.7Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.2%Mar 11, 2026
- High7.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.6%Mar 11, 2026
- Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.4%Mar 11, 2026
- Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.3%Mar 11, 2026
- High7.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.6%Mar 11, 2026
- Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.3%Mar 11, 2026
- Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…EPSS 0.3%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain condition…EPSS 0.3%Mar 11, 2026
- Medium6.9Istio is an open platform to connect, manage, and secure microservices.Mar 10, 2026
- High7.7zot is ancontainer image/artifact registry based on the Open Container Initiative Distribution Specification.Mar 10, 2026
- Critical9.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 10, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 10, 2026
- High8.2Envoy is a high-performance edge/middle/service proxy.Mar 10, 2026
- High7.1StudioCMS is a server-side-rendered, Astro native, headless content management system.Mar 10, 2026
- High8.8StudioCMS is a server-side-rendered, Astro native, headless content management system.Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Mar 10, 2026
- High7.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services.Mar 10, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 7, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 7, 2026
- High8.7Netmaker makes networks with WireGuard.Mar 7, 2026
- Medium6.9Netmaker makes networks with WireGuard.Mar 7, 2026
- High8.6Netmaker makes networks with WireGuard.Mar 7, 2026
- High8.7Flowise is a drag & drop user interface to build a customized large language model flow.Mar 7, 2026