Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownSecurity update for google-osconfig-agentOct 9, 2026
- Medium4.4Indico: Cross-Site-Scripting in minutes editorEPSS 0.2%Oct 8, 2026
- High8.1MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)EPSS 0.4%Oct 8, 2026
- UnknownMalicious code in kiyoramarkets (npm)Oct 8, 2026
- UnknownMalicious code in @ikyyjee/ikkysingle (npm)Oct 7, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresEPSS 0.3%Oct 5, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- UnknownImproper parsing of fractional NumericDate from JWT exp claimsSep 29, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesSep 25, 2026
- UnknownMalicious code in gemini-computer-use (npm)Sep 21, 2026
- UnknownMalicious code in @modss/baileys (npm)Sep 3, 2026
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.EPSS 0.6%Aug 24, 2026
- High7.1Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents.EPSS 0.4%Aug 21, 2026
- Unknown[20260806] - Core - XSS through schema.org outputsEPSS 0.3%Aug 17, 2026
- Unknown[20260805] - Core - Improper ACL checks for category webservice endpointsEPSS 0.3%Aug 17, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionKEVEPSS 2.0%Jul 8, 2026
- High7.8Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesJun 24, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowEPSS 0.5%Jun 19, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolEPSS 0.3%Jun 19, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationEPSS 0.8%Jun 10, 2026
- Medium5.1A vulnerability was found in macrozheng mall up to 1.0.3.EPSS 0.2%May 29, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.May 29, 2026
- High8.2Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects.EPSS 0.3%May 28, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.EPSS 0.1%May 27, 2026
- Critical9.9Vowpal Wabbit is a machine learning system.EPSS 0.6%May 26, 2026