Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Unknownpython313-vllm-0.30.0-2.1 on GA mediaOct 13, 2026
- Unknownpython313-urllib3_1-1.26.20-8.1 on GA mediaOct 13, 2026
- Unknownpython313-sglang-0.5.21-2.1 on GA mediaOct 13, 2026
- Unknownpython313-multidict-7.0.0-1.1 on GA mediaOct 13, 2026
- Unknownfirefox-esr-153.5.0-1.1 on GA mediaOct 13, 2026
- Unknownfetchmail-6.6.8-1.1 on GA mediaOct 13, 2026
- Unknownalloy-1.20.1-1.1 on GA mediaOct 13, 2026
- UnknownMalicious code in monkey-tags-ip (npm)Oct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Oct 13, 2026
- UnknownMalicious code in @newspage/libx-amount (npm)Oct 13, 2026
- UnknownMalicious code in @newspage/lib-ng-async-routes-ui (npm)Oct 13, 2026
- UnknownMalicious code in @mntv-analysis/workspaces-components (npm)Oct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Oct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui (npm)Oct 13, 2026
- MediumGitea private repository access retained after rejected transferEPSS 0.2%Oct 13, 2026
- MediumGitea migration SSRF to reserved addresses through ALLOWED_DOMAINSEPSS 0.2%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityEPSS 0.8%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityEPSS 0.7%Oct 13, 2026
- UnknownImportant: libreoffice security updateOct 13, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.EPSS 0.2%Oct 12, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Oct 12, 2026
- High8.3Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextOct 12, 2026
- Medium6.3Nginx UI: Auto backup name allows path traversal outside validated storage pathOct 12, 2026
- UnknownMalicious code in npp-ml (PyPI)Oct 12, 2026
- Medium4.3Backstage: Improper access control in backend action invocationOct 12, 2026