Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.9Vowpal Wabbit is a machine learning system.EPSS 0.6%May 26, 2026
- Low2.1A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub.May 26, 2026
- Medium5.4Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an au…EPSS 0.2%May 22, 2026
- Medium6.3Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys.May 21, 2026
- High7.5Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the corresponding do_update() method in concre…May 21, 2026
- High7.5Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepare_remote_upgrade/ .May 21, 2026
- High7.5Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/single_page/dashboard/extend/install.php.May 21, 2026
- High7.5Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_update/ .May 21, 2026
- High7.5Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/download/ .May 21, 2026
- High8.9Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure deserialization occurring in the ExpressEntryList block controller.May 21, 2026
- Low1.3A vulnerability has been found in vercel ai up to 3.0.97.EPSS 7.0%May 17, 2026
- Medium5.4Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity.EPSS 0.2%May 15, 2026
- Medium5.3Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity.EPSS 0.2%May 15, 2026
- Low3.5is GitHub’s official command line tool.EPSS 0.3%May 15, 2026
- Low2.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.EPSS 0.3%May 14, 2026
- Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.EPSS 0.2%May 14, 2026
- Medium5.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.EPSS 0.2%May 14, 2026
- High8.5GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.EPSS 0.4%May 13, 2026
- High7.2nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset.EPSS 0.3%May 12, 2026
- High8.8Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker…EPSS 0.9%May 12, 2026
- Medium6.4WWBN AVideo is an open source video platform.EPSS 0.3%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityKEVEPSS 1.1%May 11, 2026
- High8.0Zen is a firefox-based browser.EPSS 0.3%May 11, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.EPSS 0.5%May 11, 2026
- Medium6.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.6%May 9, 2026