Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Critical9.0FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- High8.7Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged field…Apr 20, 2026
- Medium4.3Kimai is an open-source time tracking application.Apr 17, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Apr 15, 2026
- Medium4.8Axios is a promise based HTTP client for the browser and Node.js.Apr 10, 2026
- Critical9.1In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests t…Apr 9, 2026
- High8.7Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow a…Apr 6, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Apr 6, 2026
- High8.6Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Apr 1, 2026
- Low2.1A vulnerability has been found in gougucms 4.08.18.Apr 1, 2026
- Critical9.4APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security organizations.Mar 31, 2026
- High8.9flatted is a circular JSON parser.Mar 20, 2026
- Critical9.8ormar is a async mini ORM for Python.Mar 19, 2026
- Medium4.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 18, 2026
- High7.0Kanboard is project management software focused on Kanban methodology.Mar 18, 2026
- High8.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.EPSS 0.2%Mar 17, 2026
- High8.7SimpleEval is a library for adding evaluatable expressions into python projects.Mar 16, 2026
- Critical9.9Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.Mar 11, 2026
- Medium5.3Unicorn adds modern reactive component functionality to your Django templates.Mar 10, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Mar 7, 2026
- High8.7Immutable.js provides many Persistent Immutable data structures.Mar 6, 2026
- High8.7Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment.EPSS 0.5%Mar 6, 2026
- High7.1Craft is a content management system (CMS).Mar 4, 2026