Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.6Notesnook is a note-taking app focused on user privacy & ease of use.May 4, 2026
- Critical10.0vm2 is an open source vm/sandbox for Node.js.May 4, 2026
- Critical9.8vm2 is an open source vm/sandbox for Node.js.May 4, 2026
- Critical9.8vm2 is an open source vm/sandbox for Node.js.May 4, 2026
- Critical9.8vm2 is an open source vm/sandbox for Node.js.May 4, 2026
- High8.1Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-suppl…May 4, 2026
- High7.8An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachin…May 4, 2026
- High7.2Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Co…May 4, 2026
- Medium5.5A flaw has been found in AV Stumpfl Pixera Two Media Server up to 25.2 R2.May 3, 2026
- Low2.1A weakness has been identified in langflow-ai langflow up to 1.10.2.May 3, 2026
- Low2.0A vulnerability was determined in kerwincui FastBee up to 1.2.1.May 3, 2026
- Medium6.3A vulnerability was detected in sgl-project SGLang up to 0.5.9.May 2, 2026
- High8.8The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions…May 2, 2026
- Low2.1A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.May 1, 2026
- Low2.1A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.May 1, 2026
- Low1.9A vulnerability was detected in Exiftool up to 13.53.May 1, 2026
- High8.8Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.May 1, 2026
- Low2.1A vulnerability was found in Bootstrap CMS 0.9.0-alpha.Apr 30, 2026
- High8.8IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow.Apr 30, 2026
- Low2.0A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6.Apr 30, 2026
- High8.1An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email functionApr 30, 2026
- High7.4Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick.EPSS 0.2%Apr 30, 2026
- Low2.1A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.Apr 29, 2026
- High8.7Cockpit CMS contains an authenticated remote code execution vulnerability in the /cockpit/collections/save_collection endpoint that allows authenticated attackers with…Apr 29, 2026
- High7.7AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path…Apr 29, 2026