Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URLCheck if you run itEPSS 1.55%Oct 9, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOpen the advisoryOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationOpen the advisoryOct 9, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 9, 2026
- Medium4.4Indico: Cross-Site-Scripting in minutes editorCheck if you run itEPSS 0.23%Oct 8, 2026
- High8.1MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)Check if you run itEPSS 0.45%Oct 8, 2026
- UnknownMalicious code in kiyoramarkets (npm)Open the advisoryOct 8, 2026
- UnknownMalicious code in @ikyyjee/ikkysingle (npm)Open the advisoryOct 7, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresCheck if you run itEPSS 0.27%Oct 5, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanCheck if you run itEPSS 0.37%Sep 30, 2026
- UnknownImproper parsing of fractional NumericDate from JWT exp claimsOpen the advisorySep 29, 2026
- Unknown[20260908] - Core - XSS in HTML Mail TemplatesCheck if you run itEPSS 0.20%Sep 25, 2026
- UnknownMalicious code in gemini-computer-use (npm)Open the advisorySep 21, 2026
- UnknownMalicious code in @modss/baileys (npm)Open the advisorySep 3, 2026
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.Check if you run itEPSS 0.58%Aug 24, 2026
- High7.1Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents.Check if you run itEPSS 0.40%Aug 21, 2026
- Medium4.8Coder before 2.34.2 Stored HTML Injection via Appearance SettingsOpen the advisoryAug 20, 2026
- Medium6.3Coder before 2.34.2 User Enumeration via Login Placeholder HashOpen the advisoryAug 20, 2026
- Unknown[20260806] - Core - XSS through schema.org outputsCheck if you run itEPSS 0.27%Aug 17, 2026
- Unknown[20260805] - Core - Improper ACL checks for category webservice endpointsCheck if you run itEPSS 0.26%Aug 17, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionPatch nowKEVEPSS 2.05%Jul 8, 2026
- High7.8Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesOpen the advisoryJun 24, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowCheck if you run itEPSS 0.53%Jun 19, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCheck if you run itEPSS 0.30%Jun 19, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationCheck if you run itEPSS 0.77%Jun 10, 2026