Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7Symfony is a PHP framework for web and console applications and a set of reusable PHP components.Oct 15, 2026
- High8.7Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.3%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- Medium6.9BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers…EPSS 0.6%Oct 14, 2026
- High8.7N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs.EPSS 0.4%Oct 12, 2026
- High7.1Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns.Oct 12, 2026
- High8.7Payload is a free and open source headless content management system.EPSS 0.4%Oct 6, 2026
- Medium4.9Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.EPSS 0.6%Aug 21, 2026
- Medium6.5Nautobot is a Network Source of Truth and Network Automation Platform.EPSS 0.6%May 28, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection…Mar 18, 2026
- High7.5multipart is a fast multipart/form-data parser for python.Mar 12, 2026
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Mar 10, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 10, 2026
- High7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Mar 9, 2026
- High7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.Mar 9, 2026
- Medium5.9cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Mar 7, 2026
- High7.5A flaw was found in REXML.Feb 27, 2026
- Low1.9A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1.Feb 27, 2026
- High7.5Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential B…Feb 26, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Feb 26, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedFeb 25, 2026
- High8.7minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Feb 20, 2026
- Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.EPSS 6.5%Jul 19, 2023
- Medium5.3A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x.Jan 5, 2023
24 records · page 1 of 1
PreviousNext