Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception.May 12, 2026
- Medium6.9ZEBRA is a Zcash node written entirely in Rust.May 8, 2026
- High7.5An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service.May 1, 2026
- Medium5.5A vulnerability has been found in aligungr UERANSIM up to 3.2.7.Apr 27, 2026
- Medium5.5Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately ca…Apr 27, 2026
- Medium5.5The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames.Apr 22, 2026
- Medium4.1Wasmtime is a runtime for WebAssembly.Apr 9, 2026
- Medium5.6Wasmtime is a runtime for WebAssembly.Apr 9, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server.Apr 7, 2026
- High7.5Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Si…Apr 6, 2026
- High8.7Haraka is a Node.js mail server.Apr 2, 2026
- High7.5Handlebars provides the power necessary to let users build semantic templates.Mar 27, 2026
- High7.5SiYuan is a personal knowledge management system.Mar 20, 2026
- High8.7Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Mar 20, 2026
- High7.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 18, 2026
- High8.7Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.Mar 16, 2026
- Medium6.5LibreChat is a ChatGPT clone with additional features.Mar 13, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterMar 12, 2026
- High7.5ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.EPSS 0.5%Mar 12, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Mar 11, 2026
- High8.7Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol.Mar 10, 2026
- Medium5.8Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detec…EPSS 0.4%Mar 4, 2026
- Medium5.3A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…EPSS 0.4%Mar 4, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Mar 2, 2026
- High7.2Vikunja is an open-source self-hosted task management platform.Feb 25, 2026