Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.EPSS 0.6%Aug 24, 2026
- High8.2RansomLook contains insufficient resource validation in the analysis PDF generation functionality.EPSS 0.4%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.EPSS 0.2%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.EPSS 0.2%Aug 24, 2026
- Medium6.9BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC…EPSS 0.4%Aug 24, 2026
- Medium6.9NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.EPSS 0.3%Aug 22, 2026
- High7.7TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation.EPSS 0.4%Aug 21, 2026
- High8.7SpecifyJS is a declarative TypeScript user interface framework.EPSS 0.5%Aug 21, 2026
- Medium5.5Unleash is an open-source feature management platform.EPSS 0.4%Aug 21, 2026
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityKEVEPSS 9.8%Aug 17, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataEPSS 0.4%Jul 21, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKEVEPSS 6.8%Jul 14, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityKEVEPSS 2.1%Jun 26, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 88.2%Jun 3, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist.EPSS 0.4%May 28, 2026
- High8.5Nautobot is a Network Source of Truth and Network Automation Platform.EPSS 0.4%May 28, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.EPSS 0.4%May 27, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.EPSS 0.6%May 19, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…EPSS 0.4%May 18, 2026
- Medium5.0Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an au…EPSS 0.1%May 18, 2026
- Medium5.5A vulnerability was found in vercel ai up to 3.0.97.EPSS 0.7%May 17, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoEPSS 0.4%Apr 14, 2026
- Medium4.3A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 t…EPSS 0.2%Apr 14, 2026
- Medium6.3Axios is a promise based HTTP client for the browser and Node.js.EPSS 1.2%Apr 9, 2026