Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.54%Feb 26, 2026
- Medium4.3Packistry is a self-hosted Composer repository designed to handle PHP package distribution.Check if you run itEPSS 0.21%Feb 26, 2026
- Critical9.8Langflow is a tool for building and deploying AI-powered agents and workflows.Check this weekEPSS 35.25%Feb 26, 2026
- High8.4Vitess is a database clustering system for horizontal scaling of MySQL.Check if you run itEPSS 0.47%Feb 26, 2026
- High8.8Agenta is an open-source LLMOps platform.Check if you run itEPSS 0.36%Feb 26, 2026
- High7.5Koa is middleware for Node.js using ES2017 async functions.Check if you run itEPSS 0.39%Feb 26, 2026
- Medium4.9Live Helper Chat is an open-source application that enables live support websites.Check if you run itEPSS 0.22%Feb 26, 2026
- Critical9.9Agenta is an open-source LLMOps platform.Check if you run itEPSS 0.56%Feb 26, 2026
- Medium6.1Copyparty is a portable file server.Check if you run itEPSS 0.20%Feb 26, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.30%Feb 26, 2026
- Low2.7fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.Check if you run itEPSS 0.54%Feb 26, 2026
- Critical9.9OpenLIT is an open source platform for AI engineering.Check if you run itEPSS 0.45%Feb 26, 2026
- High7.7WPGraphQL provides a GraphQL API for WordPress sites.Check if you run itEPSS 0.94%Feb 26, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Check if you run itEPSS 0.53%Feb 26, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Check if you run itEPSS 0.58%Feb 26, 2026
- Medium5.3Svelte performance oriented web framework.Check if you run itEPSS 0.27%Feb 26, 2026
- Medium5.3Svelte performance oriented web framework.Check if you run itEPSS 0.26%Feb 26, 2026
- High7.7The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug…Check if you run itEPSS 0.52%Feb 26, 2026
- High8.8WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management.Check if you run itEPSS 0.35%Feb 26, 2026
- Medium6.9Spin is an open source developer tool for building and running serverless applications powered by WebAssembly.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium4.9Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.Check if you run itEPSS 0.41%Feb 26, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.87%Feb 26, 2026
- High8.2ZITADEL is an open source identity management platform.Check if you run itEPSS 0.22%Feb 26, 2026
- Low2.1ZITADEL is an open source identity management platform.Check if you run itEPSS 0.26%Feb 26, 2026
- High7.0The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1.Check if you run itEPSS 0.29%Feb 26, 2026
Sort