Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title).Check if you run itEPSS 2.21%Mar 31, 2026
- Medium6.1Slippers is a UI component framework for Django.Check if you run itEPSS 0.24%Mar 31, 2026
- High8.2libp2p-rust is the official rust language Implementation of the libp2p networking stack.Check if you run itEPSS 0.58%Mar 31, 2026
- Medium6.3ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.20%Mar 31, 2026
- Critical9.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.28%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetc…Check if you run itEPSS 0.23%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked.Check if you run itEPSS 0.34%Mar 31, 2026
- Medium6.0mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.51%Mar 31, 2026
- High7.5mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.37%Mar 31, 2026
- Critical9.2ZEBRA is a Zcash node written entirely in Rust.Check if you run itEPSS 0.79%Mar 31, 2026
- High7.7Giskard is an open-source Python library for testing and evaluating agentic systems.Check if you run itEPSS 0.64%Mar 31, 2026
- Medium5.0go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.15%Mar 31, 2026
- High7.7FastGPT is an AI Agent building platform.Check if you run itEPSS 0.29%Mar 31, 2026
- Critical10.0FastGPT is an AI Agent building platform.Check if you run itEPSS 0.42%Mar 31, 2026
- Low2.8go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.16%Mar 31, 2026
- High7.1OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl…Check if you run itEPSS 0.58%Mar 31, 2026
- Medium6.3OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets.Check if you run itEPSS 0.37%Mar 31, 2026
- Critical9.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check.Check if you run itEPSS 0.84%Mar 31, 2026
- Medium5.3OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently…Check if you run itEPSS 0.30%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve node…Check if you run itEPSS 0.39%Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.25%Mar 31, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.72%Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.72%Mar 31, 2026
- High7.8InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective.Check if you run itEPSS 0.31%Mar 31, 2026
- High7.6A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpoint_dir parameter in OfflineACE.run.Check if you run itEPSS 0.60%Mar 31, 2026
Sort