Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsCVE-2026-21589 · Atlassian · Multiple Products · Canadian Centre for Cyber Security · CISA KEV · CVE.org · Atlassian, ConfluenceKEVEPSS 278.0%Oct 5, 2026
Medium4.3Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.CVE-2026-48924 · jenkins · bitbucket oauth · CVE.org · FIRST EPSS · NIST NVD · Atlassian, JenkinsEPSS 0.3%May 27, 2026
High8.5A vulnerability in the block of the integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the field.CVE-2026-3515 · CVE.org · NIST NVD · Atlassian, GitLabMay 24, 2026
Critical9.3Nhost is an open source Firebase alternative with GraphQL.CVE-2026-41574 · nhost · nhost/auth · CVE.org · NIST NVD · AtlassianMay 8, 2026
Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated useCVE-2026-2845 · gitlab · gitlab · CVE.org · GitLab Security Releases · NIST NVD · Atlassian, GitLabFeb 25, 2026
Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.CVE-2025-61916 · linuxfoundation · spinnaker · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Jan 5, 2026
High8.8Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityCVE-2022-36804 · atlassian · bitbucket · CISA KEV · CVE.org · FIRST EPSS · AtlassianKEVEPSS 99.2%Aug 24, 2022