Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

85 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

ImageMagick: Memory Leak when providing invalid options to the cli

Wasmtime has a leak in WASIp1 `fd_renumber` implementation

sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks

sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity

ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified

ImageMagick: Memory Leak in ICON decoder when allocation fails

ImageMagick: Memory leak in VIFF encoder when allocation fails

ImageMagick: Memory Leak in MIFF encoder when allocaton fails

ImageMagick: Memory Leak in YUV decoder when opening of blob fails

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

ImageMagick: Memory Leak in hough lines operation when an operation fails

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

ImageMagick: Information Disclosure when printing profiles with debug enabled

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

ImageMagick: Use-After-Free when freetype initialization fails

ImageMagick: Policy Bypass in script operation due to missing checks

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

ImageMagick: Policy Bypass possible with matrix-backed operations

Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons

Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

ImageMagick: Division by Zero in binomial kernel

Turbo: Unexpected local code execution during Yarn Berry detection

Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability

net-imap has quadratic complexity when reading response literals

rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length

ImageMagick has a memory leak in PNG encoder when writing a MNG image

ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts

ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value

ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing

ImageMagick has a heap-buffer-overflow in FTXT encoder

Wasmtime has host data leakage with 64-bit tables and Winch

ImageMagick: META reader memory leak in the APP1JPEG input path

ImageMagick has possible memory leak in ASHLAR coder when action fails

Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests

Rails has a possible XSS vulnerability in its Action View tag helpers

Rails has a possible XSS vulnerability in its Action Pack debug exceptions

GHSA-46fp-8f5p-pf2m

Improper detection of disallowed URIs by Loofah `allowed_uri?`

ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Scan your dependencies for these CVEs