Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Oct 15, 2026
- UnknownImportant: ghostscript security updateOct 15, 2026
- UnknownImportant: ghostscript security updateOct 15, 2026
- UnknownImportant: grafana security updateOct 15, 2026
- UnknownImportant: lrzsz security, bug fix, and enhancement updateOct 15, 2026
- UnknownImportant: libsoup security updateOct 15, 2026
- UnknownCGA-mjgh-vcxv-65mrOct 14, 2026
- High8.2FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memoryEPSS 0.3%Oct 14, 2026
- High7.1FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST.EPSS 0.3%Oct 14, 2026
- High7.1Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.EPSS 0.3%Oct 14, 2026
- High8.7Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.3%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- UnknownCGA-xhfj-xr3j-qf92Oct 14, 2026
- UnknownCGA-rvcp-537m-q3rcOct 14, 2026
- UnknownMalicious code in saeka (PyPI)Oct 14, 2026
- Medium5.3CGA-xvw2-xchh-q28xOct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.EPSS 0.2%Oct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.EPSS 0.2%Oct 14, 2026
- High8.8A flaw was found in DPDK lib/vhost vhost-crypto.EPSS 0.1%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.EPSS 0.2%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.EPSS 0.1%Oct 14, 2026
- Medium6.5Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.EPSS 0.6%Oct 14, 2026
- UnknownMalicious code in @xxxfnbs21/hello-demo (npm)Oct 14, 2026
- UnknownThe Entity List module provides a way to create lists of entities without Views.Oct 14, 2026