Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.EPSS 0.3%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.EPSS 0.3%Oct 13, 2026
- Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.EPSS 0.2%Oct 13, 2026
- Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toEPSS 0.2%Oct 13, 2026
- High8.3Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandboxEPSS 0.3%Oct 13, 2026
- High8.3Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex…EPSS 0.3%Oct 13, 2026
- High8.3Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outsid…EPSS 0.3%Oct 13, 2026
- High8.3Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code o…EPSS 0.3%Oct 13, 2026
- Medium5.3Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-contro…EPSS 0.3%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist unneutralized markup by subm…EPSS 0.3%Oct 13, 2026
- Medium6.9A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0.EPSS 0.7%Oct 13, 2026
- Critical9.4Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.EPSS 0.4%Oct 13, 2026
- MediumThe GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in versions up to, a…EPSS 0.2%Oct 13, 2026
- MediumThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all versions up to, and incl…EPSS 0.2%Oct 13, 2026
- MediumThe User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable…EPSS 0.2%Oct 13, 2026
- HighA repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references…EPSS 0.4%Oct 13, 2026
- HighThe WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.…EPSS 0.3%Oct 13, 2026
- HighAn issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.cEPSS 0.3%Oct 13, 2026
- High8.5Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages.EPSS 0.2%Oct 12, 2026
- Medium5.3Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public portal form that accepts unauthenticated submis…EPSS 0.2%Oct 12, 2026
- Medium5.1Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit rights to inject script through a record name rende…EPSS 0.2%Oct 12, 2026
- High8.7Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated…EPSS 0.3%Oct 12, 2026
- High8.5Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route.EPSS 0.3%Oct 12, 2026
- Medium5.1Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks…EPSS 0.2%Oct 12, 2026
- Medium6.3ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used.EPSS 0.3%Oct 12, 2026