Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Mar 31, 2026
- Medium6.5WWBN AVideo is an open source video platform.Mar 31, 2026
- High8.7InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Mar 31, 2026
- High8.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Mar 31, 2026
- High8.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Mar 31, 2026
- Medium5.3Discourse is an open-source discussion platform.Mar 31, 2026
- Low2.1A vulnerability was identified in chatwoot up to 4.11.2.Mar 31, 2026
- Medium5.8HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetc…Mar 31, 2026
- High7.7FastGPT is an AI Agent building platform.Mar 31, 2026
- Critical10.0FastGPT is an AI Agent building platform.Mar 31, 2026
- Medium5.8The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacksMar 31, 2026
- Medium5.0OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF).Mar 31, 2026
- Critical9.8Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.Mar 30, 2026
- High7.8Gotenberg is an API for converting document formats.Mar 30, 2026
- Medium5.3Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Mar 30, 2026
- High7.7Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.Mar 30, 2026
- Low2.1A flaw has been found in SourceCodester RSS Feed Parser 1.0.Mar 30, 2026
- High7.6In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources.Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Mar 30, 2026
- High7.5A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the endpoint.EPSS 1.8%Mar 29, 2026
- Medium5.5A vulnerability was identified in elecV2 elecV2P up to 3.8.3.Mar 28, 2026
- High7.2The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.8 via the laborator_calc_route AJAX action.EPSS 0.2%Mar 28, 2026
- Critical9.3pyLoad is a free and open-source download manager written in Python.Mar 27, 2026
- High8.5LinkAce is a self-hosted archive to collect website links.Mar 27, 2026