Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.7Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix MatchOct 17, 2026
- UnknownMalicious code in tonemaptts (PyPI)Oct 17, 2026
- UnknownMalicious code in pyrechoasr (PyPI)Oct 17, 2026
- UnknownMalicious code in driftwavets (PyPI)Oct 17, 2026
- UnknownMalicious code in novalithtts (PyPI)Oct 17, 2026
- UnknownMalicious code in voltswannts (PyPI)Oct 17, 2026
- UnknownMalicious code in glassbeakasr (PyPI)Oct 17, 2026
- UnknownMalicious code in emberlytts (PyPI)Oct 17, 2026
- UnknownMalicious code in quasitonnts (PyPI)Oct 17, 2026
- UnknownMalicious code in ukraine69 (PyPI)Oct 17, 2026
- UnknownMalicious code in itsa-react-maskedinput (npm)Oct 16, 2026
- UnknownMalicious code in itsa-react-focuscontainer (npm)Oct 16, 2026
- Medium5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statdEPSS 0.3%Oct 16, 2026
- Medium5.9Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespaceEPSS 0.2%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combineEPSS 0.2%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in printEPSS 0.2%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getlineEPSS 0.2%Oct 16, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.EPSS 1.1%Oct 16, 2026
- Critical9.8LMCache: Remote code execution via unsafe deserialization in multiprocess mode transportEPSS 0.5%Oct 16, 2026
- High7.5lopdf has a stack overflow via deeply nested PDF objectsOct 16, 2026
- High7.2Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' ParameterEPSS 0.3%Oct 16, 2026
- UnknownMalicious code in @beloved-lenora/opencode-todo (npm)Oct 16, 2026
- UnknownMalicious code in @beloved-lenora/opencode-stats (npm)Oct 16, 2026
- UnknownMalicious code in @beloved-lenora/opencode-shell-guard (npm)Oct 16, 2026
- UnknownMalicious code in @beloved-lenora/opencode-shared-rpc (npm)Oct 16, 2026