Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Unknownfetchmail-6.6.8-1.1 on GA mediaOct 13, 2026
- Unknownalloy-1.20.1-1.1 on GA mediaOct 13, 2026
- UnknownMalicious code in monkey-tags-ip (npm)Oct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Oct 13, 2026
- UnknownMalicious code in @newspage/libx-amount (npm)Oct 13, 2026
- UnknownMalicious code in @newspage/lib-ng-async-routes-ui (npm)Oct 13, 2026
- UnknownMalicious code in @mntv-analysis/workspaces-components (npm)Oct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Oct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui (npm)Oct 13, 2026
- MediumGitea private repository access retained after rejected transferEPSS 0.2%Oct 13, 2026
- MediumGitea migration SSRF to reserved addresses through ALLOWED_DOMAINSEPSS 0.2%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityEPSS 0.8%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityEPSS 0.7%Oct 13, 2026
- UnknownImportant: libreoffice security updateOct 13, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.EPSS 0.2%Oct 12, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Oct 12, 2026
- High8.3Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextOct 12, 2026
- Medium6.3Nginx UI: Auto backup name allows path traversal outside validated storage pathOct 12, 2026
- UnknownMalicious code in npp-ml (PyPI)Oct 12, 2026
- Medium4.3Backstage: Improper access control in backend action invocationEPSS 0.2%Oct 12, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesOct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextOct 12, 2026
- Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)EPSS 0.3%Oct 12, 2026
- Medium5.9Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memorEPSS 0.2%Oct 12, 2026
- Low2.1hex_core decompresses registry and Erlang term API responses without size limitsEPSS 0.4%Oct 12, 2026