Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.7LibreChat is a ChatGPT clone with additional features.Mar 27, 2026
- High8.5LibreChat is a ChatGPT clone with additional features.Mar 27, 2026
- Low2.1A security vulnerability has been detected in letta-ai letta 0.16.4.Mar 27, 2026
- Medium5.5A weakness has been identified in mingSoft MCMS up to 5.5.0.Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Mar 27, 2026
- Medium4.8calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Mar 27, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before.Mar 27, 2026
- High8.6Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that in…EPSS 0.4%Mar 27, 2026
- Low2.1A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0.Mar 27, 2026
- Medium6.5Lemmy is a link aggregator and forum for the fediverse.Mar 27, 2026
- Medium4.8Streamlit is a data oriented application development framework for python.Mar 26, 2026
- Medium4.3Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth c…Mar 26, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- Medium5.3Lychee is a free, open-source photo-management tool.Mar 26, 2026
- Medium6.5Roadiz is a polymorphic content management system based on a node system that can handle many types of services.Mar 26, 2026
- High7.8Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy…Mar 26, 2026
- Low3.1A flaw was found in Keycloak.Mar 26, 2026
- Medium6.6Saloon is a PHP library that gives users tools to build API integrations and SDKs.Mar 26, 2026
- Medium5.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF).EPSS 0.3%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).EPSS 0.2%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).EPSS 0.2%Mar 25, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This…Mar 25, 2026
- Medium5.0Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.Mar 25, 2026
- Medium6.3league/commonmark is a PHP Markdown parser.Mar 24, 2026