Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.9The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.EPSS 0.4%Feb 24, 2026
- High8.1PJSIP is a free and open source multimedia communication library written in C.Feb 20, 2026
- UnknownXStream XStream Deserialization of Untrusted DataKEVFeb 14, 2026
- Unknowntriliumnotes trilium Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJan 29, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityJan 16, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts…EPSS 0.1%Jan 14, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.EPSS 0.2%Jan 5, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash, which is caused…EPSS 0.2%Dec 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a soft interr…EPSS 0.2%Dec 16, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.EPSS 0.2%Dec 12, 2025
- High7.8Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.EPSS 0.4%Dec 9, 2025
- Medium4.3HedgeDoc is an open source, real-time, collaborative, markdown notes application.EPSS 0.1%Dec 5, 2025
- Unknowngithub github Deserialization of Untrusted DataKEVNov 10, 2025
- Unknownreposilite reposilite Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVOct 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues A hung task can occur during [1] LTP cgroup testi…EPSS 0.2%Oct 4, 2025
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityEPSS 0.7%Jul 25, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsEPSS 56.0%May 14, 2025
- Medium6.2Bullfrog's DNS over TCP bypasses domain filteringEPSS 49.0%May 14, 2025
- Medium6.3The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release.EPSS 43.0%May 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.EPSS 41.0%May 9, 2025
- Low3.1The Discourse Code Review Plugin allows users to review GitHub commits on Discourse.EPSS 34.0%May 7, 2025
- High7.1phpgt/Dom provides access to modern DOM APIs.EPSS 19.0%May 6, 2025
- Medium5.3PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp .EPSS 57.0%May 1, 2025
- Medium6.0The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on theEPSS 32.0%May 1, 2025
- Critical9.0LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrarEPSS 68.0%May 1, 2025