Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14.Apr 20, 2026
- Medium5.5A weakness has been identified in modelscope agentscope up to 1.0.18.Apr 20, 2026
- Medium5.5A security flaw has been discovered in modelscope agentscope up to 1.0.18.Apr 20, 2026
- Medium5.5A vulnerability was identified in modelscope agentscope up to 1.0.18.Apr 20, 2026
- Low2.1A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3.Apr 20, 2026
- Low2.1A vulnerability was detected in PHPEMS 11.0.Apr 19, 2026
- High7.7Movary is a self hosted web app to track and rate a user's watched movies.Apr 18, 2026
- Medium6.4NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Apr 18, 2026
- High7.8OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search tools that allows attackers to access private an…Apr 17, 2026
- Low2.1A vulnerability was determined in prasathmani TinyFileManager up to 2.6.Apr 17, 2026
- High7.5Craftql v1.3.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the vendor/markhuot/craftql/src/Li…Apr 17, 2026
- Medium6.9GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly.Apr 17, 2026
- High8.6Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges.Apr 17, 2026
- Medium4.1Weblate is a web based localization tool.Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Apr 15, 2026
- High8.6Jellyfin is an open source self hosted media server.Apr 14, 2026
- High8.6Chamilo LMS is an open-source learning management system.Apr 14, 2026
- High7.2Chamilo LMS is an open-source learning management system.Apr 14, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoEPSS 0.4%Apr 14, 2026
- High8.5A Server-Side Request Forgery (SSRF) in the /settings/webhooks/create component of Webkul Krayin CRM v2.2.x allows attackers to scan internal resources via supplying a…Apr 14, 2026
- Medium4.3A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 t…EPSS 0.2%Apr 14, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Apr 14, 2026
- High7.4MaxKB is an open-source AI assistant for enterprise.Apr 14, 2026
- Low2.0A vulnerability was identified in HummerRisk up to 1.5.0.Apr 13, 2026