Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationSep 29, 2026
- Medium5.5asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterAug 20, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026
- High7.7OpenRemote has Cross-Realm User Information Disclosure in UserResourceImplJul 6, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyEPSS 0.8%Jun 22, 2026
- High8.6phonenumber: panic on parsing crafted phonenumber inputsEPSS 0.7%Jul 7, 2024
- Low3.1sudo-rs: Path Traversal vulnerabilityEPSS 0.6%Nov 1, 2023
- High8.6blurhash: panic on parsing crafted blurhash inputsEPSS 0.6%Sep 19, 2023
- High8.6phonenumber: panic on parsing crafted RF3966 phonenumber inputsEPSS 0.9%Sep 19, 2023
- UnknownXSS in ammonia via SVG , , and/or tagsOct 10, 2021
38 records · page 2 of 2
PreviousNext