Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.7Plane is an an open-source project management tool.Apr 9, 2026
- High7.0Axios is a promise based HTTP client for the browser and Node.js.EPSS 1.2%Apr 9, 2026
- Critical9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.EPSS 0.3%Apr 9, 2026
- Medium5.5A weakness has been identified in atototo api-lab-mcp up to 0.2.1.Apr 9, 2026
- Low2.1A security flaw has been discovered in bigsk1 openai-realtime-ui up to 188ccde27fdf3d8fab8da81f3893468f53b2797c.Apr 8, 2026
- High7.5FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP).Apr 8, 2026
- Medium5.3InvenTree is an Open Source Inventory Management System.Apr 8, 2026
- High8.3Zammad is a web based open source helpdesk/customer support system.Apr 8, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure.Apr 8, 2026
- Medium5.5A flaw was found in Red Hat Quay's Proxy Cache configuration feature.Apr 8, 2026
- Critical9.1A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML i…Apr 8, 2026
- Medium6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.Apr 8, 2026
- Critical9.1QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted requestEPSS 0.2%Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in podigee Podigee podigee allows Server Side Request Forgery.This issue affects Podigee: from n/a through <= 1.4.0.Apr 8, 2026
- Medium6.0Server-Side Request Forgery (SSRF) vulnerability in Brecht Visual Link Preview visual-link-preview allows Server Side Request Forgery.This issue affects Visual Link Pr…Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Server Side Request…Apr 8, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Global Payments GlobalPayments WooCommerce global-payments-woocommerce allows Server Side Request Forgery.This issu…Apr 8, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a…Apr 8, 2026
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: fro…Apr 8, 2026
- Medium5.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request…Apr 8, 2026
- High7.2IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…EPSS 0.2%Apr 8, 2026
- High7.1WWBN AVideo is an open source video platform.Apr 7, 2026
- Medium6.5WWBN AVideo is an open source video platform.Apr 7, 2026
- High7.7OpenObserve is a cloud-native observability platform.Apr 7, 2026
- High7.0ChurchCRM is an open-source church management system.Apr 7, 2026