Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Oct 11, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyEPSS 0.8%Jun 22, 2026
- High8.6phonenumber: panic on parsing crafted phonenumber inputsEPSS 0.7%Jul 7, 2024
- Low3.1sudo-rs: Path Traversal vulnerabilityEPSS 0.6%Nov 1, 2023
- High8.6blurhash: panic on parsing crafted blurhash inputsEPSS 0.6%Sep 19, 2023
- High8.6phonenumber: panic on parsing crafted RF3966 phonenumber inputsEPSS 0.9%Sep 19, 2023
- UnknownXSS in ammonia via SVG , , and/or tagsOct 10, 2021
8 records · page 1 of 1
PreviousNext