Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveEPSS 0.7%Mar 13, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterEPSS 0.9%Mar 12, 2026
- High7.5ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.EPSS 0.5%Mar 12, 2026
- High7.5The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.EPSS 1.2%Mar 12, 2026
- Critical9.8Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length).EPSS 0.5%Mar 12, 2026
- High8.2Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.EPSS 1.3%Mar 12, 2026
- High7.5flatted is a circular JSON parser.EPSS 1.0%Mar 12, 2026
- Critical9.8Backstage is an open framework for building developer portals.EPSS 0.9%Mar 7, 2026
- High7.5crypto/x509: Incorrect enforcement of email constraints in crypto/x509EPSS 0.6%Mar 6, 2026
- High7.5Incorrect parsing of IPv6 host literals in net/urlEPSS 0.8%Mar 6, 2026
- High8.8Immutable.js provides many Persistent Immutable data structures.EPSS 1.6%Mar 6, 2026
- High7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.EPSS 1.0%Mar 6, 2026
- High8.2python-markdown: denial of service via malformed HTML-like sequencesEPSS 0.6%Mar 5, 2026
- High7.8kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.EPSS 0.2%Mar 4, 2026
- High7.8kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()EPSS 0.8%Mar 4, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.EPSS 1.0%Mar 3, 2026
- High7.8Vim is an open source, command line text editor.EPSS 0.2%Feb 27, 2026
- High7.8Vim is an open source, command line text editor.EPSS 1.5%Feb 27, 2026
- High8.8A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite.EPSS 0.8%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component.EPSS 0.2%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.EPSS 0.2%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.EPSS 0.2%Feb 27, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.EPSS 0.5%Feb 26, 2026
- Medium6.5A security flaw was identified in the Orchestrator Plugin of Red Hat Developer Hub (Backstage).EPSS 0.6%Feb 25, 2026
- High8.7minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.EPSS 0.5%Feb 20, 2026