Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.6Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.EPSS 0.4%Mar 20, 2026
- Medium6.5PX4 is an open-source autopilot stack for drones and unmanned vehicles.EPSS 0.3%Mar 19, 2026
- High8.3Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.EPSS 0.6%Mar 18, 2026
- High7.9Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.EPSS 0.5%Mar 18, 2026
- Low2.1A security flaw has been discovered in CesiumGS CesiumJS up to 1.137.0.Mar 12, 2026
- Critical9.3xygeni-action is the GitHub Action for Xygeni Scanner.EPSS 0.9%Mar 11, 2026
- High8.7Black is the uncompromising Python code formatter.EPSS 0.7%Mar 11, 2026
- Critical9.8Jellyfin is an open-source media system.EPSS 0.6%Mar 11, 2026
- High8.7liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.6%Mar 10, 2026
- Medium5.3An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token (PAT) lacki…Mar 10, 2026
- High7.4An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content.EPSS 0.2%Mar 10, 2026
- High8.7An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to ac…Mar 10, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project t…EPSS 0.4%Mar 10, 2026
- High8.8Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network.EPSS 0.9%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.EPSS 0.2%Mar 10, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.EPSS 0.5%Mar 6, 2026
- High7.0Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default.EPSS 0.5%Mar 4, 2026
- High8.6An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code i…EPSS 0.4%Mar 3, 2026
- Low2.1A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3.EPSS 0.4%Feb 27, 2026
- Critical9.1hoppscotch is an open source API development ecosystem.EPSS 0.7%Feb 26, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Feb 26, 2026
- Critical9.9OpenLIT is an open source platform for AI engineering.Feb 26, 2026
- High7.7WPGraphQL provides a GraphQL API for WordPress sites.Feb 26, 2026
- High8.8LiveCode is an open-source, client-side code playground.Feb 25, 2026
- Medium6.1Repostat is a React component to fetch and display GitHub repository info.Feb 25, 2026