Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.0Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an au…EPSS 0.1%May 18, 2026
- Medium5.5A vulnerability was found in vercel ai up to 3.0.97.EPSS 0.7%May 17, 2026
- Medium5.5A weakness has been identified in CoreWorxLab CAAL up to 1.6.0.May 17, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium5.3CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files.May 15, 2026
- Low2.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.May 14, 2026
- Medium4.7python-utcp is the python implementation of UTCP.May 14, 2026
- Medium6.3The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.May 14, 2026
- Low3.7Nuxt OG Image generates OG Images with Vue templates in Nuxt.May 14, 2026
- Medium5.7Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships.May 14, 2026
- Low2.3Nextcloud News is an RSS/Atom feed reader.May 14, 2026
- Medium5.9Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Critical9.4Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- High8.6Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- High8.2Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Critical9.2MagicMirror² is an open source modular smart mirror platform.May 14, 2026
- High7.5The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit.May 14, 2026
- Low3.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…May 14, 2026
- Medium4.3ERPNext is a free and open source Enterprise Resource Planning tool.May 13, 2026
- Medium6.6PlaywrightCapture is a simple replacement for splash using playwright.May 13, 2026