Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash PinningOct 13, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationJun 10, 2026
- Critical9.6In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.EPSS 0.4%May 19, 2026
- High8.5The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.May 13, 2026
- High7.4The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.May 13, 2026
- High7.7In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.May 5, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: fix fanout UAF in packet_release() via NETDEV_UP race has a race window where can re-register…EPSS 0.1%Apr 22, 2026
- High7.7Claude Code is an agentic coding tool.Apr 21, 2026
- Medium5.4Claude Code is an agentic coding tool.Apr 17, 2026
- High7.7Claude Code is an agentic coding tool.Mar 20, 2026
- High8.7Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.Mar 11, 2026
- High8.8Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.Mar 11, 2026
- High8.7Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.Mar 11, 2026
13 records · page 1 of 1
PreviousNext