Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeEPSS 0.4%Oct 15, 2026
- Critical10.0Podman: The command can be instructed to disable almost all sandboxing by image annotationOct 15, 2026
- Medium6.1n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying…EPSS 0.3%Oct 14, 2026
- High7.8ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityOct 13, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextOct 12, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores precise check_map_kptr_access() permits a scalar store into an untrusted…EPSS 0.2%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise check_func_arg() allows bpf_register_is_null() for nullable…EPSS 0.2%Sep 25, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityKEVEPSS 75.9%Sep 22, 2026
- Critical9.8Check Point Multiple Products Improper Certificate Validation VulnerabilityKEVEPSS 50.4%Sep 9, 2026
- High7.8ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.4%Aug 13, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityKEVEPSS 78.0%Jul 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect use of nat_entry flag Data loss can occur when fsync is per…EPSS 0.1%Jun 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipc: limit next_id allocation to the valid ID range The checkpoint/restore sysctl path can request…EPSS 0.2%Jun 24, 2026
- Critical9.3Check Point Security Gateway Improper Authentication VulnerabilityKEVEPSS 85.3%Jun 8, 2026
- Medium4.1When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stor…May 26, 2026
- Medium5.3A Check Point HTTP-based service can incorrectly handle malformed HTTP requests.May 26, 2026
- High8.6Aegra is a drop-in replacement for LangSmith Deployments.May 14, 2026
- High8.8The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class.May 12, 2026
- High7.8PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism.May 12, 2026
- Critical9.8The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserializatio…May 12, 2026
- High7.3The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) i…May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its average_model.py model…May 11, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering relocation at…May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() The xfstests case "gene…May 1, 2026
- High7.8A vulnerability in the HuggingFace Transformers library, specifically in the class, allows for arbitrary code execution.Apr 7, 2026
39 records · page 1 of 2
PreviousNext