Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Oct 15, 2026
- Medium5.3Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.May 26, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…May 18, 2026
- High7.3Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections.May 18, 2026
- High8.2Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections.May 17, 2026
- Medium6.5Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.May 16, 2026
- High8.4Tabby (formerly Terminus) is a highly configurable terminal emulator.May 15, 2026
- Low3.5is GitHub’s official command line tool.May 15, 2026
- High7.8In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command.Apr 28, 2026
- Low2.1http.cookies.Morsel.js_output() returns an inline snippet and only escapes " for JavaScript string context.Apr 22, 2026
- Medium4.8MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields.Apr 16, 2026
- Critical9.0Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.Apr 14, 2026
- Medium5.3OpenClaw versions 2026.2.13 through 2026.3.24 contain an ANSI escape sequence injection vulnerability in approval prompts that allows attackers to spoof terminal output.Apr 10, 2026
- High8.8Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands termi…Mar 26, 2026
- Medium5.6An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora.Mar 20, 2026
15 records · page 1 of 1
PreviousNext