Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.0LinkAce is a self-hosted archive to collect website links.Apr 7, 2026
- High7.5text-generation-webui is an open-source web interface for running Large Language Models.Apr 7, 2026
- Medium4.3Papra is a minimalistic document management and archiving platform.Apr 7, 2026
- Medium5.4The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated…EPSS 0.1%Apr 7, 2026
- High7.7Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Critical9.3pyLoad is a free and open-source download manager written in Python.Apr 6, 2026
- High7.7pyLoad is a free and open-source download manager written in Python.Apr 6, 2026
- High7.2Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.Apr 6, 2026
- High7.5Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.Apr 6, 2026
- Medium5.8The whisperX API is a tool for enhancing and analyzing audio content.Apr 6, 2026
- Medium5.4vLLM is an inference and serving engine for large language models (LLMs).Apr 6, 2026
- High8.6curl_cffi is the a Python binding for curl.Apr 6, 2026
- High7.5Distribution is a toolkit to pack, ship, store, and deliver container content.Apr 6, 2026
- Medium5.5A vulnerability was determined in assafelovic gpt-researcher up to 3.4.3.Apr 6, 2026
- Low2.1A vulnerability was identified in hcengineering Huly Platform 0.7.382.Apr 6, 2026
- Low2.9A vulnerability was detected in kalcaddle kodbox up to 1.64.Apr 6, 2026
- Low2.1A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0.Apr 6, 2026
- Medium5.3A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1.Apr 5, 2026
- Medium5.3A flaw has been found in Ollama up to 0.18.1.Apr 5, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassEPSS 0.3%Apr 4, 2026
- High8.6PraisonAI is a multi-agent teams system.Apr 3, 2026
- High7.7PraisonAI is a multi-agent teams system.Apr 3, 2026
- High7.1prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to…EPSS 0.3%Apr 3, 2026
- Medium5.3prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform…EPSS 0.2%Apr 3, 2026
- Critical10.0ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Apr 3, 2026