Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3e107 is a content management system (CMS).May 26, 2026
- Medium6.5Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator.May 26, 2026
- High7.6Karakeep is a elf-hostable bookmark-everything app.May 26, 2026
- Medium5.1With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro.May 25, 2026
- High7.2Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to…May 25, 2026
- Low2.0A vulnerability has been found in YunaiV yudao-cloud 2026.03.May 25, 2026
- Medium6.9Interpretation Conflict vulnerability in benoitc hackney allows Server Side Request Forgery.May 25, 2026
- Medium5.5A flaw has been found in ItzCrazyKns Vane up to 1.12.1.May 24, 2026
- Low1.3A security flaw has been discovered in calcom cal.diy up to 4.9.4.May 23, 2026
- High7.7TypeBot is a chatbot builder tool.May 22, 2026
- High7.6TypeBot is a chatbot builder tool.May 22, 2026
- Critical10.0Typebot is a chatbot builder tool.May 22, 2026
- High7.1Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material asso…May 22, 2026
- Medium5.4The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side…May 22, 2026
- Low2.1In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation enabling redirect-to-int…May 21, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…May 20, 2026
- Medium6.5Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode.May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{ia…May 19, 2026
- High8.7Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{…May 19, 2026
- Critical9.8scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint.May 19, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.EPSS 0.6%May 19, 2026
- Medium5.0AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.May 19, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…EPSS 0.4%May 18, 2026