Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.7A flaw was found in evolution-data-server.EPSS 0.4%Oct 14, 2026
- UnknownMalicious code in @xxxfnbs21/hello-demo (npm)Oct 14, 2026
- UnknownThe Entity List module provides a way to create lists of entities without Views.Oct 14, 2026
- UnknownThe Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.Oct 14, 2026
- UnknownThe Drupal core Link module provides a field type that can be used for internal and external URLs.Oct 14, 2026
- UnknownGin is an administration theme that provides a modern, clean, and customizable backend UI for editors and site administrators.Oct 14, 2026
- High8.2A flaw was found in DPDK lib/vhost.EPSS 0.2%Oct 14, 2026
- High7.8A flaw was found in DPDK lib/vhost.EPSS 0.2%Oct 14, 2026
- High7.8A flaw was found in DPDK lib/vhost.EPSS 0.1%Oct 14, 2026
- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.EPSS 0.6%Oct 14, 2026
- High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).EPSS 0.5%Oct 14, 2026
- Medium5.9erl_tar:extract/2 loops forever on a GNU sparse member with a trailing holeEPSS 0.2%Oct 14, 2026
- High8.7HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in BanditEPSS 0.5%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost.EPSS 0.2%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.EPSS 0.5%Oct 14, 2026
- High8.0util-linux is a random collection of Linux utilities.EPSS 0.2%Oct 14, 2026
- UnknownCVE-2026-53615 affecting package util-linux 2.40.2-6Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.EPSS 0.1%Oct 14, 2026
- Low3.6Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).EPSS 0.1%Oct 14, 2026
- Medium6.9Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path viaEPSS 0.5%Oct 14, 2026
- Medium6.8unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet headeEPSS 0.2%Oct 14, 2026