Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownCGA-v537-737c-hqqgOct 15, 2026
- UnknownCGA-x434-5fwq-9wf8Oct 15, 2026
- UnknownCGA-vwmf-hvxq-9vpgOct 15, 2026
- UnknownCGA-xvrr-jgwc-3f6jOct 15, 2026
- UnknownCGA-ww3c-8r83-x26pOct 15, 2026
- UnknownCGA-w4q7-r6x9-wc6hOct 15, 2026
- UnknownCGA-v9fx-mcv6-5xgrOct 15, 2026
- UnknownCGA-v823-7248-h9xrOct 15, 2026
- UnknownCGA-wmq6-pp5q-vwh8Oct 15, 2026
- UnknownCGA-vpm8-6rrj-fqw4Oct 15, 2026
- UnknownCGA-w9pg-c5vc-f43pOct 15, 2026
- UnknownCGA-xgrm-9jrm-hwfqOct 15, 2026
- UnknownCGA-rgvm-mxr3-4qm5Oct 15, 2026
- UnknownCGA-x3w3-635p-5jh6Oct 15, 2026
- Medium6.5Moderate: curl security updateOct 15, 2026
- UnknownCGA-xwjc-9mmj-4vggOct 15, 2026
- High8.3Important: python36:3.6 security updateOct 15, 2026
- Low2.8A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.EPSS 0.1%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Oct 15, 2026
- High7.5Junrar is an open source Java RAR archive library.Oct 15, 2026
- Medium5.3MessagePack: Nested arrays can blow past buffer length limitsOct 15, 2026
- MediumTerragrunt catalog predictable temp symlink clobberOct 15, 2026
- LowGitHub CLI allows attestation verification bypass through unescaped regex metacharactersOct 15, 2026
- LowGitHub CLI allows path traversal through unescaped request URL componentsOct 15, 2026
- Low3.3GitHub CLI partially discloses authentication tokens in outputOct 15, 2026