Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.May 14, 2026
- Medium6.3Distribution is a toolkit to pack, ship, store, and deliver container content.May 14, 2026
- High8.8Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.EPSS 0.2%May 14, 2026
- Medium4.3Backstage is an open framework for building developer portals.May 14, 2026
- High7.1Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner account.May 13, 2026
- High8.6MISP is an open source threat intelligence and sharing platform.May 13, 2026
- Medium6.7CKAN is an open-source DMS (data management system) for powering data hubs and data portals.May 13, 2026
- Critical9.9vm2 is an open source vm/sandbox for Node.js.May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.May 13, 2026
- Critical9.9Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to rea…May 13, 2026
- Medium6.0Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a seconda…May 13, 2026
- High7.6Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by referencing v…May 12, 2026
- High8.1efw4.X is an Enterprise Framework for Web.May 12, 2026
- Critical9.9wger is a free, open-source workout and fitness manager.May 12, 2026
- High7.0PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups.May 12, 2026
- Medium6.9PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.May 12, 2026
- High8.4PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricte…May 12, 2026
- Critical9.0ArcadeDB is a Multi-Model DBMS.May 12, 2026
- Critical9.1Relay adds real-time collaboration to Obsidian.May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that coul…May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that coul…May 12, 2026
- Critical9.3Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…May 12, 2026
- High8.8Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd.May 12, 2026
- High8.1Vaultwarden is a Bitwarden-compatible server written in Rust.May 11, 2026
- Medium6.5Outline is a service that allows for collaborative documentation.May 11, 2026