Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A vulnerability was found in vanna-ai vanna up to 2.0.2.Mar 16, 2026
- Low2.1A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01.Mar 16, 2026
- Medium5.5A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393.Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.EPSS 0.3%Mar 16, 2026
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Gift Up! Gift Up Gift Cards for WordPress and WooCommerce gift-up allows Server Side Request Forgery.This issue aff…Mar 13, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Katsushi Kawamori Simple Blog Card simple-blog-card allows Server Side Request Forgery.This issue affects Simple Bl…Mar 13, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in MailerPress Team MailerPress mailerpress allows Server Side Request Forgery.This issue affects MailerPress: from n/…Mar 13, 2026
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer allows Server Side Request Forgery.This issue affects Embed PDF Viewe…Mar 13, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Mar 13, 2026
- Low1.7Backstage is an open framework for building developer portals.Mar 12, 2026
- High7.7OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.EPSS 0.2%Mar 12, 2026
- Low2.1A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107.Mar 12, 2026
- Low2.1A vulnerability was determined in zyddnys manga-image-translator up to beta-0.3.Mar 11, 2026
- Low2.1A vulnerability has been found in Woahai321 ListSync up to 0.6.6.Mar 11, 2026
- High7.82FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.Mar 11, 2026
- Medium5.3ha-mcp is a Home Assistant MCP Server.Mar 11, 2026
- High8.3SiYuan is a personal knowledge management system.Mar 11, 2026
- High8.6Plunk is an open-source email platform built on top of AWS SES.Mar 11, 2026
- Medium4.3OpenProject is an open-source, web-based project management software.Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Mar 11, 2026
- Medium5.0Frappe is a full-stack web application framework.Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.EPSS 0.3%Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…EPSS 0.2%Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…EPSS 0.2%Mar 11, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Mar 10, 2026