Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.5Junrar is an open source Java RAR archive library.CVE-2026-97370 · junrar · junrar · CVE.org · GitHub Advisory Database · GitLab Advisory Database · MavenOct 15, 2026
Medium5.3MessagePack: Nested arrays can blow past buffer length limitsCVE-2026-92707 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · NuGetOct 15, 2026
MediumTerragrunt catalog predictable temp symlink clobberCVE-2026-64672 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · GoOct 15, 2026
LowGitHub CLI allows attestation verification bypass through unescaped regex metacharactersCVE-2026-64655 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · GoOct 15, 2026
LowGitHub CLI allows path traversal through unescaped request URL componentsCVE-2026-64653 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · GoOct 15, 2026
Low3.3GitHub CLI partially discloses authentication tokens in outputCVE-2026-64652 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · GoOct 15, 2026
Medium6.5Python Social Auth is a social authentication/registration mechanism.CVE-2026-62322 · python-social-auth · social-core · CVE.org · GitHub Advisory Database · GitLab Advisory Database · Debian, Debian 12Oct 15, 2026
Unknownborg extract might modify out-of-tree files when extracting maliciously crafted archivesCVE-2026-62268 · CVE.org · GitHub Advisory Database · GitLab Advisory Database · PyPIOct 15, 2026
High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.CVE-2026-104827 · CVE.org · FIRST EPSS · GitHub Advisory Database · PackagistEPSS 0.4%Oct 15, 2026
Medium6.5tinytag is a Python library for reading audio file metadata.CVE-2026-104266 · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPI, PythonEPSS 0.3%Oct 15, 2026
High8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.CVE-2026-104150 · CVE.org · FIRST EPSS · GitHub Advisory Database · npmEPSS 0.4%Oct 15, 2026
Medium6.9Nuxt OG Image generates OG Images with Vue templates in Nuxt.CVE-2026-102527 · CVE.org · FIRST EPSS · GitHub Advisory Database · npmEPSS 0.2%Oct 15, 2026
High7.5OpenNext Cloudflare is an open Next.js adapter for Cloudflare.CVE-2026-100409 · CVE.org · FIRST EPSS · GitHub Advisory Database · npmEPSS 0.3%Oct 15, 2026
High7.5kin-openapi is a Go project for handling OpenAPI files.CVE-2026-100352 · CVE.org · FIRST EPSS · GitHub Advisory Database · GoEPSS 0.4%Oct 15, 2026
Medium5.3kin-openapi is a Go project for handling OpenAPI files.CVE-2026-100350 · CVE.org · FIRST EPSS · GitHub Advisory Database · GoEPSS 0.5%Oct 15, 2026
Medium5.3kin-openapi is a Go project for handling OpenAPI files.CVE-2026-100348 · CVE.org · FIRST EPSS · GitHub Advisory Database · Debian, Debian 12EPSS 0.4%Oct 15, 2026
Medium5.3kin-openapi is a Go project for handling OpenAPI files.CVE-2026-100347 · CVE.org · FIRST EPSS · GitHub Advisory Database · Debian, Debian 12EPSS 0.5%Oct 15, 2026
UnknownModerate: wireshark security updateALSA-2026:83657 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 8Oct 15, 2026
UnknownImportant: libsoup3 security updateALSA-2026:83618 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 10Oct 15, 2026
UnknownImportant: rpcbind security updateALSA-2026:83563 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 8Oct 15, 2026
UnknownImportant: rpcbind security updateALSA-2026:83562 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 9Oct 15, 2026
UnknownImportant: rpcbind security updateALSA-2026:83561 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 10Oct 15, 2026
UnknownImportant: ghostscript security updateALSA-2026:83553 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 9Oct 15, 2026
UnknownImportant: ghostscript security updateALSA-2026:83552 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 8Oct 15, 2026
UnknownImportant: ghostscript security updateALSA-2026:83551 · OpenSSF OSV / OSV Scanner · AlmaLinux, AlmaLinux 10Oct 15, 2026