Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Medium6.3SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via…Apr 23, 2026
- Medium6.3WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protoc…Apr 22, 2026
- Medium5.5Squidex is an open source headless content management system and content management hub.Apr 22, 2026
- High7.3Squidex is an open source headless content management system and content management hub.Apr 22, 2026
- High7.3Squidex is an open source headless content management system and content management hub.Apr 22, 2026
- High7.2Squidex is an open source headless content management system and content management hub.Apr 22, 2026
- High8.5An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0).Apr 22, 2026
- Medium5.5Craft CMS is a content management system (CMS).Apr 22, 2026
- Medium5.5Craft CMS is a content management system (CMS).Apr 22, 2026
- High8.9A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from…Apr 21, 2026
- Medium6.5WWBN AVideo is an open source video platform.Apr 21, 2026
- Medium5.3WWBN AVideo is an open source video platform.Apr 21, 2026
- Low2.1A vulnerability was found in Bagisto up to 2.3.15.Apr 21, 2026
- Medium4.1FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows remote attackers to make ar…Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows attackers to access interna…Apr 21, 2026
- High7.3Glances is an open-source system cross-platform monitoring tool.Apr 21, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Apr 20, 2026
- High8.3Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed dir…Apr 20, 2026
- Medium5.8Vexa is an open-source, self-hostable meeting bot API and meeting transcription API.Apr 20, 2026
- Low2.1A vulnerability was determined in Qibo CMS 1.0.Apr 20, 2026
- Medium5.5A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2.Apr 20, 2026
- Low2.1A flaw has been found in langgenius dify up to 1.13.3.Apr 20, 2026
- Low2.1A vulnerability was detected in langgenius dify up to 0.6.9.Apr 20, 2026