Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29.May 7, 2026
- Medium6.0Wallos is an open-source, self-hostable personal subscription tracker.May 7, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.May 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.May 7, 2026
- Medium5.3Weblate is a web based localization tool.May 7, 2026
- High8.3monetr is a budgeting application for recurring expenses.May 7, 2026
- High7.7Istio is an open platform to connect, manage, and secure microservices.May 7, 2026
- Medium6.8Admidio is an open-source user management solution.May 7, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation.May 6, 2026
- Medium6.9OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs throu…May 6, 2026
- Medium4.9OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted s…May 6, 2026
- High7.2A vulnerability in the web UI of Cisco Unity Connection Web Inbox could allow an unauthenticated, remote attacker to conduct SSRF attacks through an affected device.EPSS 0.3%May 6, 2026
- Medium6.9Gotenberg is an API-based document conversion tool.May 5, 2026
- Medium5.3Incus is an open source container and virtual machine manager.May 5, 2026
- High7.8Gotenberg is an API-based document conversion tool.May 5, 2026
- Critical9.2PhpSpreadsheet is a library for reading and writing spreadsheet files.May 5, 2026
- High8.3Twenty is an open source CRM built with NestJS (Node.js).May 5, 2026
- High8.6In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests.May 5, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes.May 5, 2026
- Medium6.3OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default.May 5, 2026
- High8.3OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content.May 5, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes.May 5, 2026
- Medium6.4The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3…May 5, 2026
- Medium4.4PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes.May 4, 2026
- Low2.1A security flaw has been discovered in pixelsock directus-mcp 1.0.0.May 4, 2026