Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.3A flaw was found in the FTP GVfs backend.Feb 26, 2026
- Low2.1ZITADEL is an open source identity management platform.Feb 26, 2026
- High7.2Astro is a web framework.Feb 26, 2026
- High8.7TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers.Feb 26, 2026
- High8.6Mailpit is an email testing tool and API for developers.Feb 26, 2026
- High7.6Kruise provides automated management of large-scale applications on Kubernetes.Feb 25, 2026
- High7.4LangChain is a framework for building LLM-powered applications.Feb 25, 2026
- Critical9.2The Angular SSR is a server-rise rendering tool for Angular applications.Feb 25, 2026
- Low2.3A weakness has been identified in feiyuchuixue sz-boot-parent up to 1.3.2-beta.Feb 25, 2026
- High7.7Plane is an an open-source project management tool.Feb 25, 2026
- High7.5esm.sh is a no-build content delivery network (CDN) for web development.Feb 25, 2026
- High8.7esm.sh is a no-build content delivery network (CDN) for web development.EPSS 0.4%Feb 25, 2026
- Medium5.0The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.1.Feb 25, 2026
- Low2.1A vulnerability has been found in SourceCodester Website Link Extractor 1.0.Feb 25, 2026
- High8.6changedetection.io is a free open source web page change detection tool.Feb 25, 2026
- Medium4.6Mastodon is a free, open-source social network server based on ActivityPub.Feb 24, 2026
- Critical10.0Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe usi…Feb 24, 2026
- High8.6WWBN AVideo is an open source video platform.Feb 24, 2026
- Medium4.8Payload is a free and open source headless content management system.Feb 24, 2026
- Medium5.7Craft is a content management system (CMS).Feb 24, 2026
- Low2.1A vulnerability was found in DataLinkDC dinky up to 1.2.5.Feb 24, 2026
- Medium6.9Astro is a web framework.Feb 24, 2026
- Medium5.5A vulnerability has been found in erzhongxmu JEEWMS 3.7.Feb 23, 2026
- Low2.1A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0.Feb 23, 2026
- Low2.1A weakness has been identified in JeecgBoot 3.9.0.Feb 22, 2026