Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Check if you run itEPSS 0.46%Apr 7, 2026
- High8.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.46%Apr 7, 2026
- Critical9.1Emissary is a P2P based data-driven workflow engine.Check if you run itEPSS 0.69%Apr 7, 2026
- Critical9.8Memory-safety vulnerability in github.com/jackc/pgx/v5.Check if you run itEPSS 0.86%Apr 7, 2026
- Critical9.8Memory-safety vulnerability in github.com/jackc/pgx/v5.Check if you run itEPSS 0.86%Apr 7, 2026
- High7.1kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file writeCheck if you run itEPSS 0.39%Apr 6, 2026
- High8.2FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.30%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write()…Check if you run itEPSS 0.12%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller reported a bug…Check if you run itEPSS 0.12%Apr 3, 2026
- High7.7Tinyauth is an authentication and authorization server.Check if you run itEPSS 0.33%Apr 2, 2026
- Critical9.8Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go.Check if you run itEPSS 0.69%Apr 1, 2026
- Medium6.1Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet.Check if you run itEPSS 0.33%Mar 31, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesCheck if you run itEPSS 2.62%Mar 31, 2026
- Critical9.8wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title).Check if you run itEPSS 2.78%Mar 31, 2026
- High7.5JOSE is a Javascript Object Signing and Encryption (JOSE) library.Check if you run itEPSS 0.19%Mar 31, 2026
- High8.2act is a project which allows for local running of github actions.Check if you run itEPSS 0.58%Mar 31, 2026
- High7.7act is a project which allows for local running of github actions.Check if you run itEPSS 0.74%Mar 31, 2026
- High8.2A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19).Check if you run itEPSS 0.37%Mar 30, 2026
- Medium5.8A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges tha…Check if you run itEPSS 0.10%Mar 30, 2026
- Critical9.9Hackage package metadata stored XSS vulnerabilityCheck if you run itEPSS 0.43%Mar 28, 2026
- Critical9.6Hackage CSRF vulnerabilityCheck if you run itEPSS 0.18%Mar 28, 2026
- High7.7LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.35%Mar 27, 2026
- High8.3Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts.Check if you run itEPSS 0.39%Mar 27, 2026
- Medium5.9Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS.Check if you run itEPSS 0.37%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.52%Mar 26, 2026