Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1.Apr 27, 2026
- Medium5.5A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6.Apr 27, 2026
- Low2.1A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b.Apr 27, 2026
- Medium5.5A vulnerability was detected in JoeCastrom mcp-chat-studio up to 1.5.0.Apr 27, 2026
- Medium5.5A security vulnerability has been detected in AlejandroArciniegas mcp-data-vis up to de5a51525a69822290eaee569a1ab447b490746d.Apr 27, 2026
- Medium5.5A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78.Apr 27, 2026
- Low2.1A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1.Apr 27, 2026
- Medium5.5A vulnerability has been found in BidingCC BuildingAI up to 26.0.1.Apr 27, 2026
- Medium5.5A vulnerability was found in Typecho up to 1.3.0.Apr 26, 2026
- Low2.0A vulnerability was identified in pagekit up to 1.0.18.Apr 25, 2026
- Low2.1A vulnerability was found in IhateCreatingUserNames2 AiraHub2 up to 3e4b77fd7d48ed811ffe5b8d222068c17c76495e.Apr 25, 2026
- Low2.1A flaw has been found in devlikeapro WAHA up to 2026.3.4.Apr 25, 2026
- Low3.1LangChain is a framework for building agents and LLM-powered applications.Apr 24, 2026
- Medium6.5LangChain is a framework for building agents and LLM-powered applications.Apr 24, 2026
- Critical10.0Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- High7.5Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- Low2.2@astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets.Apr 24, 2026
- Critical9.1Kyverno is a policy engine designed for cloud native platform engineering teams.Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Medium5.1OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges.Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.Apr 23, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Apr 23, 2026
- High7.1Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026