Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- MediumRabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of ServiceOct 1, 2026
- MediumRabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular ExpressionOct 1, 2026
- HighRabbitMQ: Incomplete fix for CVE-2026-44838: does not escape , leaving room for an MQTT topic permission bypassOct 1, 2026
- MediumRabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_statusOct 1, 2026
- MediumRabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float expOct 1, 2026
- MediumRabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission checkOct 1, 2026
- HighRabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UIEPSS 0.2%Oct 1, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- UnknownA vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.EPSS 0.3%Sep 30, 2026
- UnknownCVE-2026-103111 affecting package rust for versions less than 1.75.0-30Sep 30, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateSep 30, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)EPSS 0.4%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationEPSS 0.3%Sep 29, 2026
- Medium5.9libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.EPSS 0.3%Sep 29, 2026
- Unknownurllib3 is an HTTP client library for Python.Sep 29, 2026
- UnknownImproper parsing of fractional NumericDate from JWT exp claimsSep 29, 2026
- UnknownCVE-2026-100419 affecting package rust for versions less than 1.75.0-30Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit iEPSS 0.2%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom ppp_receive_nonmp_frame() prepends a two-bytEPSS 0.2%Sep 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan nvme_scan_ns_list() drops the stale namespaces in each gEPSS 0.6%Sep 25, 2026
- Unknownperf/x86/intel/pt: Fix stop/start with no updateEPSS 0.2%Sep 24, 2026
- Critical9.6Red Hat Security Advisory: webkit2gtk3 security updateSep 22, 2026
- UnknownMalicious code in gemini-computer-use (npm)Sep 21, 2026
- UnknownExpat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted.Sep 19, 2026
- UnknownCGA-jcqq-656c-2cm2Sep 18, 2026