Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8Distribution: Client does not verify returned content against requested digestOct 15, 2026
- High7.8Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user choos…Oct 8, 2026
- High7.8Checksum bypass for golang.org/fips140 in cmd/goEPSS 0.1%Oct 8, 2026
- Medium6.4Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticate…May 14, 2026
- High8.9Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums.Apr 30, 2026
- High8.9SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture.Apr 18, 2026
- Critical9.3xrdp is an open source RDP server.Apr 17, 2026
- High7.6In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails to verify the authe…Apr 10, 2026
- Medium6.3A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext.Apr 9, 2026
- High8.7SzafirHost downloads necessary files in the context of the initiating web page.Apr 2, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Mar 30, 2026
- Medium5.9Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud.Mar 20, 2026
- Medium5.9Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud.Mar 20, 2026
- Medium5.9Cryptomator encrypts data being stored on cloud infrastructure.Mar 20, 2026
- High8.2Authlib is a Python library which builds OAuth and OpenID Connect servers.Mar 16, 2026
- High8.2xml-security is a library that implements XML signatures and encryption.Mar 16, 2026
- High8.2xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Mar 16, 2026
- High7.5Striae is a firearms examiner's comparison companion.Mar 11, 2026
- High7.1nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Feb 27, 2026
- Critical9.0RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challen…EPSS 14.9%Jul 9, 2024
- Medium5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such tha…EPSS 93.5%Dec 18, 2023
21 records · page 1 of 1
PreviousNext