Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 t…EPSS 0.2%Apr 14, 2026
- Medium6.3Axios is a promise based HTTP client for the browser and Node.js.EPSS 1.2%Apr 9, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Mar 13, 2026
- Low1.7Backstage is an open framework for building developer portals.Mar 12, 2026
- High7.7OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Mar 12, 2026
- Low2.1A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107.Mar 12, 2026
- Low2.1A vulnerability was determined in zyddnys manga-image-translator up to beta-0.3.Mar 11, 2026
- Low2.1A vulnerability has been found in Woahai321 ListSync up to 0.6.6.Mar 11, 2026
- High7.82FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.Mar 11, 2026
- Medium5.3ha-mcp is a Home Assistant MCP Server.Mar 11, 2026
- High8.3SiYuan is a personal knowledge management system.Mar 11, 2026
- High8.6Plunk is an open-source email platform built on top of AWS SES.Mar 11, 2026
- Medium4.3OpenProject is an open-source, web-based project management software.Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Mar 11, 2026
- Medium5.0Frappe is a full-stack web application framework.Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Mar 11, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Mar 10, 2026
- Medium6.5LinkAce is a self-hosted archive to collect website links.Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Mar 10, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/UR…Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.Mar 10, 2026
- Medium6.4SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints.Mar 10, 2026