Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.Mar 20, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingEPSS 1.1%Mar 19, 2026
- High7.5nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.EPSS 0.9%Mar 18, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveEPSS 0.7%Mar 13, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterMar 12, 2026
- High7.5ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.EPSS 0.5%Mar 12, 2026
- High7.5The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.EPSS 1.2%Mar 12, 2026
- Critical9.8Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length).EPSS 0.5%Mar 12, 2026
- High8.2Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.EPSS 1.3%Mar 12, 2026
- High7.5flatted is a circular JSON parser.Mar 12, 2026
- Critical9.8Backstage is an open framework for building developer portals.Mar 7, 2026
- High7.5crypto/x509: Incorrect enforcement of email constraints in crypto/x509Mar 6, 2026
- High7.5Incorrect parsing of IPv6 host literals in net/urlEPSS 0.8%Mar 6, 2026
- High8.8Immutable.js provides many Persistent Immutable data structures.Mar 6, 2026
- High7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.Mar 6, 2026
- High8.2python-markdown: denial of service via malformed HTML-like sequencesEPSS 0.6%Mar 5, 2026
- High7.8kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.EPSS 0.2%Mar 4, 2026
- High7.8kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()EPSS 0.8%Mar 4, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.Mar 3, 2026
- High7.8Vim is an open source, command line text editor.Feb 27, 2026
- High7.8Vim is an open source, command line text editor.Feb 27, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Feb 26, 2026
- Medium6.5A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage).Feb 25, 2026
- High8.7minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Feb 20, 2026
- High7.3kernel: net/sched: cls_u32: use skb_header_pointer_careful()EPSS 0.1%Feb 14, 2026