Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation.EPSS 0.7%Apr 21, 2026
- Medium5.3An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scan…EPSS 0.5%Apr 21, 2026
- Critical9.1goshs is a SimpleHTTPServer written in Go.EPSS 0.4%Apr 21, 2026
- Low2.0A vulnerability was determined in Bagisto up to 2.3.15.EPSS 0.3%Apr 21, 2026
- Low2.1A vulnerability was found in Bagisto up to 2.3.15.EPSS 0.3%Apr 21, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.EPSS 0.4%Apr 21, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.EPSS 0.3%Apr 17, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.EPSS 0.6%Apr 15, 2026
- Medium5.1Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation an…EPSS 0.3%Apr 15, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoEPSS 0.4%Apr 14, 2026
- Medium6.5Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose…EPSS 0.7%Apr 14, 2026
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.EPSS 1.0%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.EPSS 0.5%Apr 14, 2026
- Medium6.9Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters…EPSS 1.2%Apr 10, 2026
- Medium6.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.5%Apr 8, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.5%Apr 8, 2026
- High8.2LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.5%Apr 8, 2026
- Medium5.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.6%Apr 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].EPSS 0.2%Apr 8, 2026
- Critical9.3dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.EPSS 0.5%Apr 7, 2026
- High8.1PraisonAI is a multi-agent teams system.EPSS 0.5%Apr 7, 2026
- Critical9.1Emissary is a P2P based data-driven workflow engine.EPSS 0.7%Apr 7, 2026
- Critical9.8Memory-safety vulnerability in github.com/jackc/pgx/v5.EPSS 0.9%Apr 7, 2026
- Critical9.8Memory-safety vulnerability in github.com/jackc/pgx/v5.EPSS 0.9%Apr 7, 2026
- High7.1kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file writeEPSS 0.4%Apr 6, 2026