Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.2FastMCP is the standard framework for building MCP applications.EPSS 0.3%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write()…EPSS 0.1%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller reported a bug…EPSS 0.1%Apr 3, 2026
- High7.7Tinyauth is an authentication and authorization server.EPSS 0.3%Apr 2, 2026
- Critical9.8Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go.EPSS 0.7%Apr 1, 2026
- Medium6.1Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet.EPSS 0.3%Mar 31, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesEPSS 2.6%Mar 31, 2026
- Critical9.8wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title).EPSS 2.8%Mar 31, 2026
- High7.5JOSE is a Javascript Object Signing and Encryption (JOSE) library.EPSS 0.2%Mar 31, 2026
- High8.2act is a project which allows for local running of github actions.EPSS 0.6%Mar 31, 2026
- High7.7act is a project which allows for local running of github actions.EPSS 0.7%Mar 31, 2026
- High8.2A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19).EPSS 0.4%Mar 30, 2026
- Medium5.8A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges tha…EPSS 0.1%Mar 30, 2026
- Critical9.9Hackage package metadata stored XSS vulnerabilityMar 28, 2026
- Critical9.6Hackage CSRF vulnerabilityMar 28, 2026
- High7.7LibreChat is a ChatGPT clone with additional features.EPSS 0.4%Mar 27, 2026
- High8.3Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts.EPSS 0.4%Mar 27, 2026
- Medium5.9Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS.Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.5%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.6%Mar 26, 2026
- High7.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows un…EPSS 0.4%Mar 25, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.EPSS 2.1%Mar 24, 2026
- Critical9.4Aquasecurity Trivy Embedded Malicious Code VulnerabilityKEVEPSS 1.7%Mar 23, 2026
- Medium4.6Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.EPSS 0.5%Mar 20, 2026
- Medium4.6Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.EPSS 0.4%Mar 20, 2026