Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2OmniFaces is a utility library for Faces.Jul 24, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026
- High7.5Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataEPSS 0.4%Jul 21, 2026
- Critical9.6Prowler is a cloud security platform.Jul 10, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionEPSS 0.4%Jul 8, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplEPSS 0.3%Jul 6, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Jul 6, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyEPSS 0.8%Jun 22, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolEPSS 0.3%Jun 19, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoEPSS 0.4%Apr 14, 2026
- High8.6phonenumber: panic on parsing crafted phonenumber inputsEPSS 0.7%Jul 7, 2024
- Low3.1sudo-rs: Path Traversal vulnerabilityEPSS 0.6%Nov 1, 2023
- High8.6blurhash: panic on parsing crafted blurhash inputsEPSS 0.6%Sep 19, 2023
- High8.6phonenumber: panic on parsing crafted RF3966 phonenumber inputsEPSS 0.9%Sep 19, 2023
- UnknownKyverno vulnerable due to usage of insecure cipherEPSS 0.1%May 30, 2023
- Medium6.8git2-rs fails to verify SSH keys by defaultEPSS 0.6%Jan 20, 2023
- UnknownXSS in ammonia via SVG , , and/or tagsOct 10, 2021
67 records · page 3 of 3
PreviousNext