Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownMalicious code in @beloved-lenora/opencode-todo (npm)Oct 16, 2026
- UnknownMalicious code in @beloved-lenora/opencode-goal (npm)Oct 16, 2026
- UnknownMalicious code in @xatancchii/natabaileys (npm)Oct 16, 2026
- UnknownMalicious code in marocolor (PyPI)Oct 16, 2026
- UnknownMalicious code in @developmentyora/baileyss (npm)Oct 16, 2026
- UnknownMalicious code in py-worm (PyPI)Oct 15, 2026
- Medium6.9Nuxt OG Image generates OG Images with Vue templates in Nuxt.EPSS 0.2%Oct 15, 2026
- Medium4.2The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx_frame->length - IEEE802154…EPSS 0.2%Oct 14, 2026
- High8.7Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAutEPSS 0.4%Oct 14, 2026
- High8.3Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the builtEPSS 0.2%Oct 14, 2026
- Medium6.9Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanuEPSS 0.3%Oct 14, 2026
- Medium6.9NGINX ngx_http_v3_module vulnerabilityEPSS 0.2%Oct 14, 2026
- High8.7An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the policy or Ingress external authentication.EPSS 0.4%Oct 14, 2026
- High7.1Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent.EPSS 0.3%Oct 14, 2026
- High8.8Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unEPSS 0.5%Oct 14, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.EPSS 0.4%Oct 14, 2026
- Critical9.2NGINX map directive and regex matching vulnerabilityEPSS 0.6%Oct 14, 2026
- UnknownMalicious code in @kre64/hello-npm-test (npm)Oct 14, 2026
- Low3.1Apprise forwards configured auth headers across cross-origin HTTP redirectsEPSS 0.3%Oct 14, 2026
- UnknownMalicious code in crelic-bqwheel-52f66a3f1d (PyPI)Oct 13, 2026
- Medium6.9A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3.EPSS 0.4%Oct 13, 2026
- High7.1OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser.EPSS 0.1%Oct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Oct 13, 2026
- UnknownMalicious code in npp-ml (PyPI)Oct 12, 2026
- Low2.0A security flaw has been discovered in Zen Cart up to 2.2.2.EPSS 0.3%Oct 12, 2026
336 records · page 1 of 14
PreviousNext