Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

797 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS

Trix has a Stored XSS vulnerability through serialized attributes

ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation

ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage

ImageMagick has Heap Buffer Over-Read in BilateralBlurImage

ImageMagick has heap-based buffer overflow in UHDR encoder

ImageMagick has stack write buffer overflow in MNG encoder

ImageMagick has heap use-after-free in the MSL encoder

ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder

ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer

ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder

ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.

ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

ImageMagick: MSL - Stack overflow in ProcessMSLScript

ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption

Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering

Parse Server vulnerable to stored XSS via file upload of HTML-renderable file types

Umbraco Backoffice API Allows Unauthorized Modification of Domain Data

Sylius has an Open Redirect via Referer Header

SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS

SiYuan has a SVG Sanitizer Bypass via `<animate>` Element — Unauthenticated XSS

ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder

ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

ImageMagick has a Path Policy TOCTOU symlink race bypass

Camaleon CMS vulnerable to Path Traversal through AWS S3 uploader implementation

MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery

@perfood/couch-auth has a host header injection vulnerability

Vaultwarden has 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement

In OpenClaw, manually adding sort to tools.exec.safeBins could bypass allowlist approval via --compress-program

OpenClaw's config env vars allowed startup env injection into service runtime

OpenClaw's dispatch-wrapper depth-cap mismatch can bypass shell-wrapper approval gating in system.run allowlist mode

OpenClaw has a sandbox network isolation bypass via docker.network=container:<id>

uv has ZIP payload obfuscation through parsing differentials

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

ImageMagick: Memory Leak in multiple coders that write raw pixel data

Wasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance

Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future

ImageMagick: Invalid MSL <map> can result in a use after free

ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

ImageMagick has a heap buffer over-read in its MAP image decoder

ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

Image Magick has a Memory Leak in coders/ashlar.c

ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

Scan your dependencies for these CVEs