Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

797 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

Nokogiri XSLT transform has a memory leak

Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands

OpAMP client reads unbounded HTTP response bodies

gix-transport: HTTP credentials leaked to redirected host in curl backend

net-imap vulnerable to command Injection via "raw" arguments to multiple commands

net-imap vulnerable to command Injection via unvalidated Symbol inputs

net-imap vulnerable to denial of service via high iteration count for `SCRAM-*` authentication

OpenClaw validates Zalo outbound photo URLs through the SSRF guard

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL

n8n has SQL Injection in Oracle Database Node via Limit Field

OneCollector exporter reads unbounded HTTP response bodies

OpenTelemetry.Resources.Azure has an unbounded HTTP response body read

OpenTelemetry's Zipkin remote endpoint cache could grow without bounds and increase memory pressure

ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width

Grid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior

Lemmy has SSRF in /api/v3/post via Webmention dispatch

Lemmy has SSRF and internal image disclosure in post link metadata via unvalidated og:image

OpenTelemetry.Sampler.AWS & OpenTelemetry.Resources.AWS have unbounded HTTP response body reads

OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers

OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling

OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies

Kirby has XML injection in its XML creator toolkit

OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames

OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle

nimiq-transaction: UpdateValidator transactions allows voting key change without proof-of-knowledge

uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

Zebra Vulnerable to Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients

MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

yard: Possible arbitrary path traversal and file access via yard server

OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

OpenClaw: Heartbeat owner downgrade missed untrusted webhook wake events

Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

GHSA-98cp-rj9f-6v5g

ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete

XWiki's REST APIs can list all pages/spaces, leading to unavailability

ImageMagick has an off-by-one error in MSL decoder could result in crash

ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.

ImageMagick has a heap out-of-bounds write in JP2 encoder

ImageMagick has a heap buffer overflow when encoding JXL image with a 16-bit float

ImageMagick has a heap buffer overflow (WRITE) in the YAML and JSON encoders.

ImageMagick has an out-of-bounds read in sample operation

ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.

ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds

Scan your dependencies for these CVEs