Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all n…Check if you run itEPSS 0.28%Apr 23, 2026
- Medium5.3OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients.Check if you run itEPSS 0.28%Apr 23, 2026
- Medium4.3OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses.Check if you run itEPSS 0.09%Apr 23, 2026
- Medium6.3OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin befor…Check if you run itEPSS 0.23%Apr 23, 2026
- Medium6.9OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers.Check if you run itEPSS 0.30%Apr 23, 2026
- High7.1OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips.Check if you run itEPSS 0.32%Apr 23, 2026
- Medium6.3OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fak…Check if you run itEPSS 0.39%Apr 23, 2026
- Medium5.8OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist.Check if you run itEPSS 0.10%Apr 23, 2026
- Critical9.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.51%Apr 23, 2026
- Medium5.3A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic.Check if you run itEPSS 0.32%Apr 23, 2026
- Critical9.3KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket…Check if you run itEPSS 0.70%Apr 23, 2026
- Critical9.3radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the comman…Check if you run itEPSS 1.92%Apr 23, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured projec…Check if you run itEPSS 0.22%Apr 23, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying…Check if you run itEPSS 0.22%Apr 23, 2026
- High8.7A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or…Check if you run itEPSS 0.50%Apr 23, 2026
- High8.7A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without any access controls.Check if you run itEPSS 0.31%Apr 23, 2026
- High8.2SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of…Check if you run itEPSS 0.32%Apr 23, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.26%Apr 23, 2026
- High8.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.42%Apr 23, 2026
- High7.6Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 3.11%Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 6.87%Apr 23, 2026
- High7.5Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.18%Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.31%Apr 23, 2026
- High7.1Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.26%Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.23%Apr 23, 2026
Sort