Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownApache Airflow SFTP provider: Async SFTP hook disables host-key verification by defaultOct 15, 2026
- UnknownApache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by defaultOct 15, 2026
- Medium6.0FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers.EPSS 0.2%Oct 8, 2026
- High8.1Apache Airflow providers-google's disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path netw…May 25, 2026
- High7.4The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.May 13, 2026
- Medium5.9Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a device with the motorcycle via Bluetooth.EPSS 0.1%Apr 21, 2026
- High7.0A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to impersonate…EPSS 0.3%Apr 9, 2026
- Medium6.3Cocos AI is a confidential computing system for AI.Mar 27, 2026
8 records · page 1 of 1
PreviousNext