Browse CVEs by Ecosystem and Severity
87 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2026-105848
Payload: Insufficient Access Control in Stripe REST Proxy
MEDIUM
CVE-2026-100723
vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
MEDIUM
CVE-2026-101904
Axios: Header Injection via Inherited headers After Minimal Interceptor
MEDIUM
CVE-2026-101900
Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders
MEDIUM
CVE-2026-101908
Axios: Prototype pollution gadget in fetch adapter can alter outbound requests
MEDIUM
CVE-2026-72925
SWC HTML minifier may allow script element breakout when minifying embedded JSON
MEDIUM
CVE-2026-55663
mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)
MEDIUM
CVE-2026-71437
Mermaid Architecture diagrams are vulnerable to prototype pollution
MEDIUM
CVE-2026-73428
Trix: Stored XSS via HTMLParser attribute injection on paste
MEDIUM
CVE-2026-72750
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
MEDIUM
CVE-2026-72775
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances
MEDIUM
CVE-2026-72764
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
MEDIUM
CVE-2026-65590
n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows
MEDIUM
CVE-2026-59257
n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
MEDIUM
CVE-2026-72768
n8n: SSRF Protection Bypass via MCP Client Node
MEDIUM
CVE-2026-65593
n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
MEDIUM
CVE-2026-53838
OpenClaw: Node pairing reconnection could confuse approval scope state
MEDIUM
CVE-2026-54316
Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
MEDIUM
CVE-2026-54310
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
MEDIUM
CVE-2026-53632
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
MEDIUM
CVE-2026-56348
n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass
MEDIUM
CVE-2026-44116
OpenClaw validates Zalo outbound photo URLs through the SSRF guard
MEDIUM
CVE-2026-42233
n8n has SQL Injection in Oracle Database Node via Limit Field
MEDIUM
CVE-2026-43531
OpenClaw: Workspace .env could inject OpenClaw runtime-control variables
MEDIUM
CVE-2026-43534
OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input
MEDIUM
CVE-2026-43566
OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events
MEDIUM
CVE-2026-42426
OpenClaw `node.pair.approve` placed in `operator.write` scope instead of `operator.pairing` allows unprivileged pairing approval
MEDIUM
CVE-2026-42422
OpenClaw `device.token.rotate` mints tokens for unapproved roles, bypassing device role-upgrade pairing
MEDIUM
CVE-2026-33578
OpenClaw: Google Chat and Zalouser group sender allowlist bypass via policy downgrade
MEDIUM
CVE-2026-33577
OpenClaw: node.pair.approve missing callerScopes validation allows low-privilege operator to approve malicious nodes
MEDIUM
CVE-2026-33576
OpenClaw: Zalo channel downloads media before sender authorization
MEDIUM
CVE-2026-33749
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
MEDIUM
CVE-2026-73426
Trix has a Stored XSS vulnerability through serialized attributes
MEDIUM
CVE-2026-31868
Parse Server vulnerable to stored XSS via file upload of HTML-renderable file types
MEDIUM
CVE-2025-70948
@perfood/couch-auth has a host header injection vulnerability
MEDIUM
CVE-2026-32010
In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program
MEDIUM
CVE-2026-22177
OpenClaw's config env vars allowed startup env injection into service runtime
MEDIUM
CVE-2026-32023
OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode
MEDIUM
CVE-2026-32038
OpenClaw has a sandbox network isolation bypass via docker.network=container:<id>
MEDIUM
CVE-2026-25533
Sandbox escape via infinite recursion and error objects
MEDIUM
CVE-2025-13465EPSS 0.0%
Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions
MEDIUM
CVE-2025-68113
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
MEDIUM
CVE-2025-65944
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
MEDIUM
CVE-2025-11849
Mammoth is vulnerable to Directory Traversal
MEDIUM
CVE-2025-54387
IPX Allows Path Traversal via Prefix Matching Bypass
MEDIUM
CVE-2025-48054
radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
MEDIUM
CVE-2025-24012
XSS/HTML Injection Vulnerability in Umbraco Backoffice Components
MEDIUM
CVE-2024-47529
OpenC3 stores passwords in clear text (`GHSL-2024-129`)
MEDIUM
CVE-2024-43795
OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
MEDIUM
CVE-2024-9148
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting