Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.3OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu extension that allow attackers to fetch attacker-controlled remo…Mar 5, 2026
- Medium5.0Twenty is an open source CRM.Mar 5, 2026
- High7.5An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14.EPSS 0.6%Mar 5, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in SkatDesign Ratatouille ratatouille allows Server Side Request Forgery.This issue affects Ratatouille: from n/a through <= 1.2.6.Mar 5, 2026
- High7.7A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/ima…Mar 4, 2026
- High7.2The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and…EPSS 0.3%Mar 4, 2026
- Medium4.3HomeBox is a home inventory and organization system.Mar 3, 2026
- Medium6.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.EPSS 0.2%Mar 2, 2026
- High7.7Chamilo is a learning management system.EPSS 0.4%Mar 2, 2026
- Medium5.3Chamilo is a learning management system.EPSS 0.3%Mar 2, 2026
- High8.6Statmatic is a Laravel and Git powered content management system (CMS).Feb 27, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability tha…Feb 27, 2026
- High8.6Gradio is an open-source Python package designed for quick prototyping.Feb 27, 2026
- Medium6.5Kiteworks is a private data network (PDN).Feb 27, 2026
- High7.5An XML External Entity (XXE) vulnerability allows malicious user to perform Server-Side Request Forgery (SSRF) via crafted XML input containing malicious external enti…Feb 27, 2026
- Low2.1A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.Feb 27, 2026
- Low2.1A vulnerability has been found in psi-probe PSI Probe up to 5.3.0.Feb 27, 2026
- Medium4.3A flaw was found in the FTP GVfs backend.Feb 26, 2026
- Low2.1ZITADEL is an open source identity management platform.Feb 26, 2026
- High7.2Astro is a web framework.Feb 26, 2026
- High8.7TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers.Feb 26, 2026
- High8.6Mailpit is an email testing tool and API for developers.Feb 26, 2026
- High7.6Kruise provides automated management of large-scale applications on Kubernetes.Feb 25, 2026
- High7.4LangChain is a framework for building LLM-powered applications.Feb 25, 2026
- Critical9.2The Angular SSR is a server-rise rendering tool for Angular applications.Feb 25, 2026