Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesCheck if you run itEPSS 0.21%Apr 24, 2026
- High7.4Skim is a fuzzy finder designed to through files, lines, and commands.Check if you run itEPSS 0.44%Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cgwb_release_workfn() calls css_put(wb-…Check if you run itEPSS 0.18%Apr 24, 2026
- High8.9A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from…Check if you run itEPSS 0.65%Apr 21, 2026
- High7.2An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access priv…Check if you run itEPSS 0.48%Apr 21, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositorie…Check if you run itEPSS 0.50%Apr 21, 2026
- High7.5An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation.Check if you run itEPSS 0.74%Apr 21, 2026
- Medium5.3An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scan…Check if you run itEPSS 0.45%Apr 21, 2026
- Critical9.1goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.43%Apr 21, 2026
- Low2.0A vulnerability was determined in Bagisto up to 2.3.15.Check if you run itEPSS 0.33%Apr 21, 2026
- Low2.1A vulnerability was found in Bagisto up to 2.3.15.Check if you run itEPSS 0.35%Apr 21, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Check if you run itEPSS 0.43%Apr 21, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.26%Apr 17, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.60%Apr 15, 2026
- Medium5.1Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation an…Check if you run itEPSS 0.34%Apr 15, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoCheck if you run itEPSS 0.36%Apr 14, 2026
- Medium6.5Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose…Check if you run itEPSS 0.74%Apr 14, 2026
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.Check if you run itEPSS 0.96%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.51%Apr 14, 2026
- Medium6.9Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters…Check if you run itEPSS 1.19%Apr 10, 2026
- Medium6.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.50%Apr 8, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.47%Apr 8, 2026
- High8.2LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.52%Apr 8, 2026
- Medium5.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.57%Apr 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].Check if you run itEPSS 0.13%Apr 8, 2026