Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.1EspoCRM is an open source customer relationship management application.Apr 13, 2026
- Low2.1A weakness has been identified in DbGate up to 7.1.4.Apr 13, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Apr 13, 2026
- High7.1Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Apr 13, 2026
- Low2.1A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1.Apr 12, 2026
- Low2.1A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.Apr 12, 2026
- Medium5.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request F…Apr 11, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.Apr 10, 2026
- Medium4.8Axios is a promise based HTTP client for the browser and Node.js.Apr 10, 2026
- High8.2Postiz is an AI social media scheduling tool.Apr 10, 2026
- Medium5.3GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint…Apr 10, 2026
- Medium5.3GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permiss…Apr 10, 2026
- High7.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Apr 10, 2026
- High7.1PraisonAIAgents is a multi-agent teams system.Apr 10, 2026
- Medium5.3FastGPT is an AI Agent building platform.Apr 10, 2026
- Low2.9A weakness has been identified in OpenClaw up to 2026.1.26.Apr 10, 2026
- Medium6.5PraisonAIAgents is a multi-agent teams system.Apr 9, 2026
- Critical10.0PraisonAI is a multi-agent teams system.Apr 9, 2026
- Medium5.3OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks.Apr 9, 2026
- High8.7SiYuan is a personal knowledge management system.Apr 9, 2026
- Critical9.9Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.Apr 9, 2026
- High7.2web3.py allows you to interact with the Ethereum blockchain using Python.Apr 9, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Apr 9, 2026