[ { "cve_id": "CVE-2011-10019", "ecosystem": "RubyGems", "package_name": "spree", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2011-10026", "ecosystem": "RubyGems", "package_name": "spree", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2016-11063", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11066", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11067", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11068", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11069", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11070", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11071", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11072", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11073", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11074", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11075", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11076", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11077", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11078", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11079", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11080", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11081", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11082", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11083", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-11084", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2016-15057", "ecosystem": "Maven", "package_name": "org.apache.continuum:continuum", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2017-14992", "ecosystem": "Go", "package_name": "github.com/vbatts/tar-split", "disclosure_at": null, "advisory_at": "2025-04-24", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18870", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18871", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18872", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-10-30", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18873", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18874", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18875", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18876", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18877", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18878", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18879", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18883", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18884", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18885", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18886", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18887", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18888", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18889", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18890", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18891", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18892", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-23", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18893", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18894", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18895", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18896", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18897", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18898", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18900", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18901", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18902", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-12-08", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18903", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18904", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18905", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-01-13", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18906", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18907", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18908", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18909", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18911", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18912", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18915", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18916", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18917", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-18918", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2026-02-17", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2017-9232", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": null, "advisory_at": "2025-04-24", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2018-21258", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": null, "advisory_at": "2025-11-25", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2018-25110", "ecosystem": "npm", "package_name": "marked", "disclosure_at": "2025-05-23", "advisory_at": "2025-05-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2018-25111", "ecosystem": "PyPI", "package_name": "django-helpdesk", "disclosure_at": "2025-05-31", "advisory_at": "2025-05-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2018-25157", "ecosystem": "Packagist", "package_name": "phraseanet/phraseanet", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2019-11243", "ecosystem": "Go", "package_name": "k8s.io/kubernetes", "disclosure_at": null, "advisory_at": "2025-05-05", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2019-15119", "ecosystem": "Go", "package_name": "github.com/cnlh/nps", "disclosure_at": null, "advisory_at": "2025-04-22", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2019-25225", "ecosystem": "npm", "package_name": "sanitize-html", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2019-25317", "ecosystem": "Packagist", "package_name": "kimai/kimai", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2019-25338", "ecosystem": "PyPI", "package_name": "dokuwiki", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2019-25585", "ecosystem": "PyPI", "package_name": "deluge", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2019-25586", "ecosystem": "PyPI", "package_name": "deluge", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2019-8400", "ecosystem": "Go", "package_name": "github.com/ory/hydra", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2020-25635", "ecosystem": "PyPI", "package_name": "ansible", "disclosure_at": null, "advisory_at": "2025-10-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2020-36846", "ecosystem": "Go", "package_name": "github.com/google/brotli", "disclosure_at": "2025-05-30", "advisory_at": "2025-06-03", "lag_days": 4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2020-36851", "ecosystem": "npm", "package_name": "cors-anywhere", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2020-36947", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2020-36962", "ecosystem": "PyPI", "package_name": "tendenci", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2020-37041", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2020-37044", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2021-21411", "ecosystem": "Go", "package_name": "github.com/oauth2-proxy/oauth2-proxy/v7", "disclosure_at": null, "advisory_at": "2025-07-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2021-25320", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2021-36783", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2021-4472", "ecosystem": "PyPI", "package_name": "python-mistralclient", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2021-47763", "ecosystem": "Packagist", "package_name": "aimeos/aimeos-laravel", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2021-47776", "ecosystem": "NuGet", "package_name": "UmbracoCms", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2021-47853", "ecosystem": "Packagist", "package_name": "phppgadmin/phppgadmin", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2022-21951", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2022-31247", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2022-50807", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2023-1289", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-03-12", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2023-22648", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-27591", "ecosystem": "Go", "package_name": "miniflux.app/v2", "disclosure_at": null, "advisory_at": "2025-04-02", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-27592", "ecosystem": "Go", "package_name": "miniflux.app/v2", "disclosure_at": null, "advisory_at": "2025-04-02", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-32198", "ecosystem": "Go", "package_name": "github.com/rancher/steve", "disclosure_at": null, "advisory_at": "2025-04-25", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-32199", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-24", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2023-41471", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2023-42818", "ecosystem": "Go", "package_name": "github.com/jumpserver/koko", "disclosure_at": null, "advisory_at": "2025-06-12", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43630", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43631", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43632", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43633", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43634", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43635", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43636", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve/pkg/grub", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-43637", "ecosystem": "Go", "package_name": "github.com/lf-edge/eve", "disclosure_at": null, "advisory_at": "2026-02-04", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-44273", "ecosystem": "Go", "package_name": "github.com/consensys/gnark-crypto", "disclosure_at": null, "advisory_at": "2025-10-15", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-47639", "ecosystem": "Packagist", "package_name": "api-platform/core", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2023-51232", "ecosystem": "PyPI", "package_name": "dagster", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2023-51651", "ecosystem": "Go", "package_name": "github.com/beam-cloud/beta9", "disclosure_at": null, "advisory_at": "2026-01-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2023-53929", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2023-53957", "ecosystem": "Packagist", "package_name": "kimai/kimai", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2023-7333", "ecosystem": "PyPI", "package_name": "records-mover", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-08", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-10029", "ecosystem": "Maven", "package_name": "org.glassfish.main.admingui:console-common", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2024-10031", "ecosystem": "Maven", "package_name": "org.glassfish.main.admingui:console-common", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2024-10032", "ecosystem": "Maven", "package_name": "org.glassfish.main.admingui:console-cluster-plugin", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2024-11718", "ecosystem": "Packagist", "package_name": "couleurcitron/tarteaucitron-wp", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-13009", "ecosystem": "Maven", "package_name": "org.eclipse.jetty:jetty-server", "disclosure_at": "2025-05-08", "advisory_at": "2025-05-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-13941", "ecosystem": "crates.io", "package_name": "ouch", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2024-14020", "ecosystem": "npm", "package_name": "carbone", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "LOW", "cvss_score": 5, "source_registry": "npm" }, { "cve_id": "CVE-2024-14021", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-1440", "ecosystem": "Maven", "package_name": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.endpoint.util", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2024-21486", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": null, "advisory_at": "2025-06-05", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2024-21635", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2024-22031", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": null, "advisory_at": "2025-04-25", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2024-24780", "ecosystem": "Maven", "package_name": "org.apache.iotdb:iotdb-core", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-24780", "ecosystem": "PyPI", "package_name": "org.apache.iotdb:iotdb-core", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-25621", "ecosystem": "Go", "package_name": "github.com/containerd/containerd", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2024-29198", "ecosystem": "Maven", "package_name": "org.geoserver:gs-wfs", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-29370", "ecosystem": "PyPI", "package_name": "python-jose", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-29371", "ecosystem": "Maven", "package_name": "org.bitbucket.b_c:jose4j", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-29643", "ecosystem": "Packagist", "package_name": "croogo/croogo", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-21", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-34711", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-38524", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2024-38824", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-38825", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-3884", "ecosystem": "Maven", "package_name": "io.undertow:undertow-core", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-38988", "ecosystem": "npm", "package_name": "@alizeait/unflatto", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-39954", "ecosystem": "Maven", "package_name": "org.apache.eventmesh:eventmesh-runtime", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2024-40120", "ecosystem": "Go", "package_name": "github.com/seaweedfs/seaweedfs", "disclosure_at": "2025-05-16", "advisory_at": "2025-05-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2024-4027", "ecosystem": "Maven", "package_name": "io.undertow:undertow-core", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-40625", "ecosystem": "Maven", "package_name": "org.geoserver:gs-rest", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-41169", "ecosystem": "Maven", "package_name": "org.apache.zeppelin:zeppelin-interpreter", "disclosure_at": "2025-07-12", "advisory_at": "2025-07-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-41177", "ecosystem": "Maven", "package_name": "org.apache.zeppelin:zeppelin-web", "disclosure_at": "2025-08-03", "advisory_at": "2025-08-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2024-41446", "ecosystem": "Maven", "package_name": "org.opencms:opencms-core", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2024-41447", "ecosystem": "Maven", "package_name": "org.opencms:opencms-core", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2024-42699", "ecosystem": "Maven", "package_name": "org.opencms:opencms-core", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-42718", "ecosystem": "Packagist", "package_name": "croogo/croogo", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-43035", "ecosystem": "npm", "package_name": "@fonoster/voice", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2024-43115", "ecosystem": "Maven", "package_name": "org.apache.dolphinscheduler:dolphinscheduler", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-09", "lag_days": 6, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-43166", "ecosystem": "Maven", "package_name": "org.apache.dolphinscheduler:dolphinscheduler", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-44088", "ecosystem": "Maven", "package_name": "org.apache.geode:geode-web-api", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2024-44905", "ecosystem": "Go", "package_name": "github.com/go-pg/pg/v10", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2024-44906", "ecosystem": "Go", "package_name": "github.com/uptrace/bun/driver/pgdriver", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2024-45296", "ecosystem": "npm", "package_name": "path-to-regexp", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-46992", "ecosystem": "npm", "package_name": "electron", "disclosure_at": "2025-07-01", "advisory_at": "2025-06-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2024-46993", "ecosystem": "npm", "package_name": "electron", "disclosure_at": "2025-07-01", "advisory_at": "2025-06-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-47055", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-47056", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-47057", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-47081", "ecosystem": "PyPI", "package_name": "requests", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-47822", "ecosystem": "npm", "package_name": "@directus/api", "disclosure_at": null, "advisory_at": "2025-04-14", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-47829", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2024-49364", "ecosystem": "npm", "package_name": "tiny-secp256k1", "disclosure_at": "2025-07-01", "advisory_at": "2025-06-30", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-49365", "ecosystem": "npm", "package_name": "tiny-secp256k1", "disclosure_at": "2025-07-01", "advisory_at": "2025-06-30", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-51775", "ecosystem": "Maven", "package_name": "org.apache.zeppelin:zeppelin-shell", "disclosure_at": "2025-08-03", "advisory_at": "2025-08-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2024-5187", "ecosystem": "PyPI", "package_name": "onnx", "disclosure_at": null, "advisory_at": "2025-07-22", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-51991", "ecosystem": "Packagist", "package_name": "october/system", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "LOW", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-51999", "ecosystem": "npm", "package_name": "express", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2024-52279", "ecosystem": "Maven", "package_name": "org.apache.zeppelin:zeppelin-jdbc", "disclosure_at": "2025-08-03", "advisory_at": "2025-08-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2024-52284", "ecosystem": "Go", "package_name": "github.com/rancher/fleet", "disclosure_at": "2025-09-02", "advisory_at": "2025-08-29", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2024-52290", "ecosystem": "Go", "package_name": "github.com/lf-edge/ekuiper", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2024-52588", "ecosystem": "npm", "package_name": "@strapi/admin", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-27", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2024-52979", "ecosystem": "Maven", "package_name": "org.elasticsearch:elasticsearch", "disclosure_at": "2025-05-01", "advisory_at": "2025-05-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-52980", "ecosystem": "Maven", "package_name": "org.elasticsearch:elasticsearch", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2024-52981", "ecosystem": "Maven", "package_name": "org.elasticsearch:elasticsearch", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2024-53305", "ecosystem": "PyPI", "package_name": "whoogle-search", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-53924", "ecosystem": "PyPI", "package_name": "pycel", "disclosure_at": "2025-04-17", "advisory_at": "2025-04-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-54000", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": null, "advisory_at": "2025-06-27", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-55238", "ecosystem": "Maven", "package_name": "org.open-metadata:openmetadata-service", "disclosure_at": "2025-04-17", "advisory_at": "2025-04-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2024-56143", "ecosystem": "npm", "package_name": "@strapi/core", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2024-56158", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-oldcore", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-56325", "ecosystem": "Maven", "package_name": "org.apache.pinot:pinot-broker", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-56373", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-56526", "ecosystem": "Packagist", "package_name": "oxid-esales/oxideshop-ce", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-56731", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2024-57186", "ecosystem": "npm", "package_name": "erxes", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2024-57189", "ecosystem": "npm", "package_name": "erxes", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2024-57190", "ecosystem": "npm", "package_name": "erxes", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2024-58136", "ecosystem": "Packagist", "package_name": "yiisoft/yii2", "disclosure_at": "2025-04-10", "advisory_at": "2025-04-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-58253", "ecosystem": "crates.io", "package_name": "obfstr", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-02", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2024-58259", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-09-02", "advisory_at": "2025-08-29", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2024-58260", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-10-02", "advisory_at": "2025-09-26", "lag_days": -6, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2024-58267", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-10-02", "advisory_at": "2025-09-26", "lag_days": -6, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2024-58269", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-24", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2024-58303", "ecosystem": "Packagist", "package_name": "fof/pretty-mail", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-12", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2024-58339", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-58340", "ecosystem": "PyPI", "package_name": "langchain-exa", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-5986", "ecosystem": "Maven", "package_name": "ai.h2o:h2o-core", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2024-5986", "ecosystem": "PyPI", "package_name": "ai.h2o:h2o-core", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2024-6429", "ecosystem": "Maven", "package_name": "org.wso2.identity.apps:authentication-portal", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2024-6717", "ecosystem": "Go", "package_name": "github.com/hashicorp/nomad", "disclosure_at": null, "advisory_at": "2026-01-12", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2024-7096", "ecosystem": "Maven", "package_name": "org.wso2.am:am-parent", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-8008", "ecosystem": "Maven", "package_name": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-8063", "ecosystem": "Go", "package_name": "github.com/ollama/ollama", "disclosure_at": null, "advisory_at": "2025-05-15", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2024-9342", "ecosystem": "Maven", "package_name": "org.glassfish.main.admingui:console-common", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2024-9343", "ecosystem": "Maven", "package_name": "org.glassfish.main.admingui:console-common", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2024-9408", "ecosystem": "Maven", "package_name": "org.glassfish.main.admingui:console-common", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-0312", "ecosystem": "Go", "package_name": "github.com/ollama/ollama", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-0520", "ecosystem": "Packagist", "package_name": "showdoc/showdoc", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-0716", "ecosystem": "npm", "package_name": "angular", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-0913", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-0928", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-09", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-10044", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-account-ui", "disclosure_at": "2025-09-05", "advisory_at": "2025-10-17", "lag_days": 42, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-10097", "ecosystem": "npm", "package_name": "simstudio", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-10155", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-10", "lag_days": -7, "severity": "CRITICAL", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10156", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-10", "lag_days": -7, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10157", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-10", "lag_days": -7, "severity": "CRITICAL", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10164", "ecosystem": "PyPI", "package_name": "sglang", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10193", "ecosystem": "PyPI", "package_name": "mcp-neo4j-cypher", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10279", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10281", "ecosystem": "PyPI", "package_name": "bbot", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10282", "ecosystem": "PyPI", "package_name": "bbot", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-27", "lag_days": 18, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10283", "ecosystem": "PyPI", "package_name": "bbot", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10284", "ecosystem": "PyPI", "package_name": "bbot", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10316", "ecosystem": "Packagist", "package_name": "lavitto/typo3-form-to-database", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10351", "ecosystem": "Packagist", "package_name": "melisplatform/melis-cms", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10352", "ecosystem": "Packagist", "package_name": "melisplatform/melis-core", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10353", "ecosystem": "Packagist", "package_name": "melisplatform/melis-cms-slider", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10492", "ecosystem": "Maven", "package_name": "net.sf.jasperreports:jasperreports", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-10543", "ecosystem": "Go", "package_name": "github.com/eclipse/paho.mqtt.golang", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-10545", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-10619", "ecosystem": "npm", "package_name": "@sequa-ai/sequa-mcp", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-10630", "ecosystem": "Go", "package_name": "github.com/alexanderzobnin/grafana-zabbix", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-10678", "ecosystem": "Go", "package_name": "github.com/netbirdio/netbird", "disclosure_at": "2025-10-20", "advisory_at": "2025-10-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-10713", "ecosystem": "Maven", "package_name": "org.wso2.carbon.mediation:org.wso2.carbon.localentry", "disclosure_at": "2025-11-05", "advisory_at": "2025-11-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-1088", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-06-18", "advisory_at": "2025-06-18", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-10894", "ecosystem": "npm", "package_name": "nx", "disclosure_at": "2025-09-24", "advisory_at": "2025-08-27", "lag_days": -28, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-10909", "ecosystem": "Packagist", "package_name": "novosga/novosga", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 2.399999999999999911182158029987476766109466552734375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10926", "ecosystem": "Packagist", "package_name": "drupal/json_field", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-24", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10927", "ecosystem": "Packagist", "package_name": "drupal/plausible_tracking", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-24", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10928", "ecosystem": "Packagist", "package_name": "drupal/access_code", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-24", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10929", "ecosystem": "Packagist", "package_name": "drupal/reverse_proxy_header", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-24", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10930", "ecosystem": "Packagist", "package_name": "drupal/currency", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-24", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10931", "ecosystem": "Packagist", "package_name": "drupal/umami_analytics", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-24", "lag_days": -36, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-10939", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-quarkus-server", "disclosure_at": "2025-10-28", "advisory_at": "2025-12-02", "lag_days": 35, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-10950", "ecosystem": "PyPI", "package_name": "ml-logger", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10951", "ecosystem": "PyPI", "package_name": "ml-logger", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10952", "ecosystem": "PyPI", "package_name": "ml-logger", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-10954", "ecosystem": "Go", "package_name": "github.com/nyaruka/phonenumbers", "disclosure_at": "2025-09-27", "advisory_at": "2025-09-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-11058", "ecosystem": "PyPI", "package_name": "xml2rfc", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11059", "ecosystem": "PyPI", "package_name": "xml2rfc", "disclosure_at": null, "advisory_at": "2025-09-10", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11060", "ecosystem": "crates.io", "package_name": "SurrealDB", "disclosure_at": "2025-09-26", "advisory_at": "2025-09-11", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-11065", "ecosystem": "Go", "package_name": "github.com/go-viper/mapstructure/v2", "disclosure_at": "2026-01-26", "advisory_at": "2025-08-21", "lag_days": -158, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-11143", "ecosystem": "Maven", "package_name": "org.eclipse.jetty:jetty-http", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11148", "ecosystem": "npm", "package_name": "check-branches", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-11149", "ecosystem": "npm", "package_name": "@nubosoftware/node-static", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-11157", "ecosystem": "PyPI", "package_name": "feast", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11183", "ecosystem": "npm", "package_name": "qwc2", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-11200", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11201", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11222", "ecosystem": "Maven", "package_name": "com.linecorp.centraldogma:centraldogma-server-auth-shiro", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11226", "ecosystem": "Maven", "package_name": "ch.qos.logback:logback-core", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11274", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11275", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11277", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11285", "ecosystem": "npm", "package_name": "@samanhappy/mcphub", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-11287", "ecosystem": "npm", "package_name": "@samanhappy/mcphub", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-11322", "ecosystem": "Packagist", "package_name": "novosga/novosga", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-06", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-11362", "ecosystem": "npm", "package_name": "pdfmake", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-11374", "ecosystem": "Go", "package_name": "github.com/hashicorp/consul", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-11375", "ecosystem": "Go", "package_name": "github.com/hashicorp/consul", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-11393", "ecosystem": "Go", "package_name": "github.com/RedHatInsights/runtimes-inventory-operator", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2025-11419", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-quarkus-dist", "disclosure_at": "2025-12-23", "advisory_at": "2025-10-27", "lag_days": -57, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11429", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11537", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-quarkus-server", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11538", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-quarkus-dist", "disclosure_at": "2025-11-13", "advisory_at": "2025-12-02", "lag_days": 19, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11569", "ecosystem": "npm", "package_name": "cross-zip", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-11570", "ecosystem": "Packagist", "package_name": "drupal-pattern-lab/unified-twig-extensions", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "LOW", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-11573", "ecosystem": "NuGet", "package_name": "Amazon.IonDotnet", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-11579", "ecosystem": "Go", "package_name": "github.com/nwaples/rardecode/v2", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-11580", "ecosystem": "Maven", "package_name": "tech.powerjob:powerjob", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11581", "ecosystem": "Maven", "package_name": "tech.powerjob:powerjob-server-starter", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11621", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-11687", "ecosystem": "PyPI", "package_name": "gi-docgen", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11695", "ecosystem": "crates.io", "package_name": "mongodb", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-11776", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-11777", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-11794", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-11842", "ecosystem": "NuGet", "package_name": "Smidge", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-11844", "ecosystem": "PyPI", "package_name": "smolagents", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11849", "ecosystem": "Maven", "package_name": "mammoth", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11849", "ecosystem": "NuGet", "package_name": "mammoth", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-11849", "ecosystem": "PyPI", "package_name": "mammoth", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11849", "ecosystem": "npm", "package_name": "mammoth", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-1194", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-11953", "ecosystem": "npm", "package_name": "@react-native-community/cli", "disclosure_at": "2025-11-03", "advisory_at": "2025-11-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-11965", "ecosystem": "Maven", "package_name": "io.vertx:vertx-web", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-11966", "ecosystem": "Maven", "package_name": "io.vertx:vertx-web", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "LOW", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12044", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-12058", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12060", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2025-10-30", "advisory_at": "2025-12-02", "lag_days": 33, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12082", "ecosystem": "Packagist", "package_name": "drupal/civictheme", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-22", "lag_days": -8, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12083", "ecosystem": "Packagist", "package_name": "drupal/civictheme", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-22", "lag_days": -8, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12110", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12119", "ecosystem": "Packagist", "package_name": "mongodb/mongodb-extension", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-19", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12150", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12183", "ecosystem": "Maven", "package_name": "at.yawk.lz4:lz4-java", "disclosure_at": "2025-11-28", "advisory_at": "2025-11-28", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12194", "ecosystem": "Maven", "package_name": "org.bouncycastle:bc-fips", "disclosure_at": "2025-10-24", "advisory_at": "2025-10-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12383", "ecosystem": "Maven", "package_name": "org.glassfish.jersey.core:jersey-client", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12390", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12419", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-12421", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-12466", "ecosystem": "Packagist", "package_name": "drupal/simple_oauth", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-29", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12543", "ecosystem": "Maven", "package_name": "io.undertow:undertow-core", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-12559", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-12613", "ecosystem": "npm", "package_name": "cloudinary", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-12689", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-calls", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-12695", "ecosystem": "PyPI", "package_name": "dspy", "disclosure_at": "2025-11-04", "advisory_at": "2025-11-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12735", "ecosystem": "npm", "package_name": "expr-eval", "disclosure_at": "2025-11-05", "advisory_at": "2025-11-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-12756", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-12758", "ecosystem": "npm", "package_name": "validator", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-12760", "ecosystem": "Packagist", "package_name": "drupal/email_tfa", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-05", "lag_days": -13, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12761", "ecosystem": "Packagist", "package_name": "drupal/simple_multistep", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-05", "lag_days": -13, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12762", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12763", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12764", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12765", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12790", "ecosystem": "RubyGems", "package_name": "mqtt", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-12816", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-12918", "ecosystem": "Packagist", "package_name": "yungifez/skuul", "disclosure_at": "2025-11-09", "advisory_at": "2025-11-09", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-12919", "ecosystem": "npm", "package_name": "@evershop/evershop", "disclosure_at": "2025-11-09", "advisory_at": "2025-11-09", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-12967", "ecosystem": "PyPI", "package_name": "aws-advanced-python-wrapper", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 8, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-12998", "ecosystem": "Packagist", "package_name": "codingms/modules", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13033", "ecosystem": "npm", "package_name": "nodemailer", "disclosure_at": "2025-11-14", "advisory_at": "2025-10-07", "lag_days": -38, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-13080", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-12", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13081", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-12", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13082", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-12", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13083", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-12", "lag_days": -6, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13158", "ecosystem": "npm", "package_name": "apidoc-core", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-13204", "ecosystem": "npm", "package_name": "expr-eval", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-13261", "ecosystem": "Maven", "package_name": "lsfusion.platform:web-client", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13262", "ecosystem": "Maven", "package_name": "lsfusion.platform:web-client", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13265", "ecosystem": "Maven", "package_name": "lsfusion.platform:server", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13266", "ecosystem": "Maven", "package_name": "io.github.wwwlike:vlife-base", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13281", "ecosystem": "Go", "package_name": "k8s.io/kubernetes", "disclosure_at": "2025-12-14", "advisory_at": "2025-12-15", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-13321", "ecosystem": "npm", "package_name": "mattermost-desktop", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-13324", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-13327", "ecosystem": "PyPI", "package_name": "uv", "disclosure_at": "2026-02-27", "advisory_at": "2025-10-29", "lag_days": -121, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-13327", "ecosystem": "crates.io", "package_name": "uv", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-13352", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3, "source_registry": "Go" }, { "cve_id": "CVE-2025-13353", "ecosystem": "Go", "package_name": "github.com/cloudflare/gokey", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-13357", "ecosystem": "Go", "package_name": "github.com/hashicorp/terraform-provider-vault", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-13372", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-13425", "ecosystem": "Go", "package_name": "github.com/google/osv-scalibr", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-13435", "ecosystem": "Maven", "package_name": "cn.dreampie:resty", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13437", "ecosystem": "npm", "package_name": "zx", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-13465", "ecosystem": "npm", "package_name": "lodash", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-13466", "ecosystem": "npm", "package_name": "body-parser", "disclosure_at": "2025-11-24", "advisory_at": "2025-11-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-13467", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-ldap-federation", "disclosure_at": "2025-11-25", "advisory_at": "2025-12-19", "lag_days": 24, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13472", "ecosystem": "Maven", "package_name": "com.blazemeter.plugins:BlazeMeterJenkinsPlugin", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13473", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-13523", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-13590", "ecosystem": "Maven", "package_name": "org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.impl", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13609", "ecosystem": "PyPI", "package_name": "keylime", "disclosure_at": "2025-11-24", "advisory_at": "2025-11-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-13742", "ecosystem": "PyPI", "package_name": "pretix", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-13767", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-24", "advisory_at": "2025-12-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-13780", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-11", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-13784", "ecosystem": "Packagist", "package_name": "yungifez/skuul", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "LOW", "cvss_score": 2.399999999999999911182158029987476766109466552734375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13785", "ecosystem": "Packagist", "package_name": "yungifez/skuul", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13804", "ecosystem": "Maven", "package_name": "org.nutz:nutzboot-parent", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13805", "ecosystem": "Maven", "package_name": "org.nutz:nutzboot-parent", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13806", "ecosystem": "Maven", "package_name": "org.nutz:nutzboot-parent", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13821", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-13827", "ecosystem": "Packagist", "package_name": "mautic/grapes-js-builder-bundle", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13828", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-1386", "ecosystem": "Go", "package_name": "github.com/ClickHouse/ch-go", "disclosure_at": "2025-04-11", "advisory_at": "2025-04-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-13870", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-13877", "ecosystem": "npm", "package_name": "@nocobase/auth", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-09", "lag_days": 7, "severity": "MEDIUM", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-13881", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13888", "ecosystem": "Go", "package_name": "github.com/redhat-developer/gitops-operator", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-1396", "ecosystem": "Maven", "package_name": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.input.validation.mgt", "disclosure_at": "2025-09-26", "advisory_at": "2025-09-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-13979", "ecosystem": "Packagist", "package_name": "drupal/minisite", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13980", "ecosystem": "Packagist", "package_name": "drupal/ckeditor5_premium_features", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13981", "ecosystem": "Packagist", "package_name": "drupal/ai", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13982", "ecosystem": "Packagist", "package_name": "drupal/login_time_restriction", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13983", "ecosystem": "Packagist", "package_name": "drupal/tagify", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13984", "ecosystem": "Packagist", "package_name": "drupal/next", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13985", "ecosystem": "Packagist", "package_name": "drupal/entity_share", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-13986", "ecosystem": "Packagist", "package_name": "drupal/disable_login", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-03", "lag_days": -56, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-14009", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14010", "ecosystem": "PyPI", "package_name": "ansible", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14082", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14083", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14273", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-14279", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14284", "ecosystem": "npm", "package_name": "@tiptap/extension-link", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-14287", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14306", "ecosystem": "Maven", "package_name": "net.sf.robocode:robocode.core", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14307", "ecosystem": "Maven", "package_name": "net.sf.robocode:robocode.battle", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14350", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-14435", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-14443", "ecosystem": "Go", "package_name": "github.com/openshift/openshift-apiserver", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-14472", "ecosystem": "Packagist", "package_name": "drupal/acquia_contenthub", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-10", "lag_days": -49, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-14505", "ecosystem": "npm", "package_name": "elliptic", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-14518", "ecosystem": "Maven", "package_name": "tech.powerjob:powerjob-common", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14525", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-14542", "ecosystem": "PyPI", "package_name": "utcp", "disclosure_at": "2025-12-13", "advisory_at": "2025-12-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14546", "ecosystem": "PyPI", "package_name": "fastapi-sso", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14550", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14559", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14573", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-14674", "ecosystem": "Maven", "package_name": "com.aizuda:snail-job", "disclosure_at": "2025-12-14", "advisory_at": "2025-12-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14675", "ecosystem": "Packagist", "package_name": "wpmetabox/meta-box", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-14691", "ecosystem": "PyPI", "package_name": "mayan-edms", "disclosure_at": "2025-12-14", "advisory_at": "2025-12-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14692", "ecosystem": "PyPI", "package_name": "mayan-edms", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14759", "ecosystem": "NuGet", "package_name": "Amazon.Extensions.S3.Encryption", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-14761", "ecosystem": "Packagist", "package_name": "aws/aws-sdk-php", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-14762", "ecosystem": "RubyGems", "package_name": "aws-sdk-s3", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-14763", "ecosystem": "Maven", "package_name": "software.amazon.encryption.s3:amazon-s3-encryption-client-java", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14764", "ecosystem": "Go", "package_name": "github.com/aws/amazon-s3-encryption-client-go/v3", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-14778", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14822", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-14840", "ecosystem": "Packagist", "package_name": "drupal/http_client_manager", "disclosure_at": "2026-01-28", "advisory_at": "2025-12-17", "lag_days": -42, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-14874", "ecosystem": "Maven", "package_name": "nodemailer", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-01", "lag_days": -17, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14874", "ecosystem": "npm", "package_name": "nodemailer", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-01", "lag_days": -17, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-14881", "ecosystem": "PyPI", "package_name": "pretix", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14882", "ecosystem": "PyPI", "package_name": "pretix", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14894", "ecosystem": "Packagist", "package_name": "livewire-filemanager/filemanager", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-14920", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14921", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14924", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14926", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14927", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14928", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14929", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14930", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14931", "ecosystem": "PyPI", "package_name": "smolagents", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-14969", "ecosystem": "Maven", "package_name": "org.hibernate.reactive:hibernate-reactive-core", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-14986", "ecosystem": "Go", "package_name": "go.temporal.io/server", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-14987", "ecosystem": "Go", "package_name": "go.temporal.io/server", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-15022", "ecosystem": "Maven", "package_name": "com.vaadin:vaadin-server", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-15031", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-19", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15036", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15056", "ecosystem": "npm", "package_name": "quill", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-15104", "ecosystem": "Maven", "package_name": "nu.validator:validator", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-15104", "ecosystem": "npm", "package_name": "nu.validator:validator", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-15107", "ecosystem": "Go", "package_name": "github.com/actiontech/sqle", "disclosure_at": "2025-12-27", "advisory_at": "2025-12-27", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-1520", "ecosystem": "npm", "package_name": "@posthog/plugin-server", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "npm" }, { "cve_id": "CVE-2025-15265", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-15284", "ecosystem": "npm", "package_name": "qs", "disclosure_at": "2025-12-29", "advisory_at": "2025-12-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-15346", "ecosystem": "PyPI", "package_name": "wolfssl", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15379", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15381", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15504", "ecosystem": "PyPI", "package_name": "lief", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-10", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15504", "ecosystem": "crates.io", "package_name": "lief", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-10", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-15506", "ecosystem": "PyPI", "package_name": "opencolorio", "disclosure_at": "2026-01-11", "advisory_at": "2026-01-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-15536", "ecosystem": "npm", "package_name": "opencc", "disclosure_at": "2026-01-18", "advisory_at": "2026-01-18", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-15558", "ecosystem": "Go", "package_name": "github.com/docker/cli", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-05", "lag_days": 1, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-15599", "ecosystem": "npm", "package_name": "dompurify", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-15602", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-1647", "ecosystem": "npm", "package_name": "bootstrap", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-1750", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-1752", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2025-05-10", "advisory_at": "2025-05-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-1753", "ecosystem": "PyPI", "package_name": "llama-index-cli", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-1792", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-1793", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2025-06-05", "advisory_at": "2025-06-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-1948", "ecosystem": "Maven", "package_name": "org.eclipse.jetty.http2:jetty-http2-common", "disclosure_at": "2025-05-08", "advisory_at": "2025-05-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-1975", "ecosystem": "Go", "package_name": "github.com/ollama/ollama", "disclosure_at": "2025-05-16", "advisory_at": "2025-05-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-1975", "ecosystem": "PyPI", "package_name": "ollama", "disclosure_at": "2025-05-16", "advisory_at": "2025-05-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-2099", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-21621", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-22227", "ecosystem": "Maven", "package_name": "io.projectreactor.netty:reactor-netty-http", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-22233", "ecosystem": "Maven", "package_name": "org.springframework:spring-context", "disclosure_at": "2025-05-16", "advisory_at": "2025-05-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-22234", "ecosystem": "Maven", "package_name": "org.springframework.security:spring-security-core", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-22235", "ecosystem": "Maven", "package_name": "org.springframework.boot:spring-boot", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-22236", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22237", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22238", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22239", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22240", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22241", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22242", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-22868", "ecosystem": "Go", "package_name": "golang.org/x/oauth2", "disclosure_at": null, "advisory_at": "2025-07-18", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-22869", "ecosystem": "Go", "package_name": "golang.org/x/crypto", "disclosure_at": null, "advisory_at": "2025-04-12", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-22871", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-22871", "ecosystem": "Packagist", "package_name": "spiral/roadrunner", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-22872", "ecosystem": "Go", "package_name": "golang.org/x/net", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-22873", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-22874", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-23266", "ecosystem": "Go", "package_name": "github.com/NVIDIA/nvidia-container-toolkit", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2025-23267", "ecosystem": "Go", "package_name": "github.com/NVIDIA/nvidia-container-toolkit", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-2336", "ecosystem": "npm", "package_name": "angular-sanitize", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-23368", "ecosystem": "Maven", "package_name": "org.wildfly.core:wildfly-elytron-integration", "disclosure_at": null, "advisory_at": "2026-02-13", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-23390", "ecosystem": "Go", "package_name": "github.com/rancher/fleet", "disclosure_at": null, "advisory_at": "2025-04-25", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-23391", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-04-11", "advisory_at": "2025-04-01", "lag_days": -10, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-24015", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-24016", "ecosystem": "Go", "package_name": "github.com/wazuh/wazuh", "disclosure_at": null, "advisory_at": "2025-04-22", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-2424", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-14", "advisory_at": "2025-04-14", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-24293", "ecosystem": "RubyGems", "package_name": "activestorage", "disclosure_at": "2026-01-30", "advisory_at": "2025-08-14", "lag_days": -169, "severity": "CRITICAL", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-24294", "ecosystem": "RubyGems", "package_name": "resolv", "disclosure_at": "2025-07-12", "advisory_at": "2025-07-15", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-24358", "ecosystem": "Go", "package_name": "github.com/gorilla/csrf", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-14", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-2475", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-14", "advisory_at": "2025-04-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-24839", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-24853", "ecosystem": "Maven", "package_name": "org.apache.jspwiki:jspwiki-main", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-24854", "ecosystem": "Maven", "package_name": "org.apache.jspwiki:jspwiki-main", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-24866", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-10", "advisory_at": "2025-04-10", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-24887", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-24977", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-25197", "ecosystem": "Packagist", "package_name": "dnadesign/silverstripe-elemental", "disclosure_at": "2025-04-10", "advisory_at": "2025-04-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-25207", "ecosystem": "Go", "package_name": "github.com/kuadrant/authorino", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-25208", "ecosystem": "Go", "package_name": "github.com/kuadrant/authorino", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-25226", "ecosystem": "Packagist", "package_name": "joomla/database", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-25227", "ecosystem": "Packagist", "package_name": "joomla/joomla-cms", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-2527", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-25298", "ecosystem": "npm", "package_name": "@strapi/core", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-25341", "ecosystem": "npm", "package_name": "libxmljs", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-2564", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-2570", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-2571", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-26074", "ecosystem": "Maven", "package_name": "org.conductoross:conductor-core", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-26159", "ecosystem": "Packagist", "package_name": "nasirkhan/laravel-starter", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-26278", "ecosystem": "npm", "package_name": "dref", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-26467", "ecosystem": "Maven", "package_name": "org.apache.cassandra:cassandra-all", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-26621", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-26625", "ecosystem": "Go", "package_name": "github.com/git-lfs/git-lfs", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-26646", "ecosystem": "NuGet", "package_name": "Microsoft.Build.Tasks.Core", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-26795", "ecosystem": "Maven", "package_name": "org.apache.iotdb:iotdb-jdbc", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-26864", "ecosystem": "Maven", "package_name": "org.apache.iotdb:node-commons", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-26864", "ecosystem": "PyPI", "package_name": "org.apache.iotdb:node-commons", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-26866", "ecosystem": "Maven", "package_name": "org.apache.hugegraph:hg-pd-core", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27093", "ecosystem": "Go", "package_name": "github.com/BishopFox/sliver", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-27188", "ecosystem": "Packagist", "package_name": "magento/community-edition", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-27190", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-27191", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-27192", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-27206", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-27391", "ecosystem": "Maven", "package_name": "org.apache.activemq:artemis-project", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27427", "ecosystem": "Maven", "package_name": "org.apache.activemq:artemis-server", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27505", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27520", "ecosystem": "PyPI", "package_name": "bentoml", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-27522", "ecosystem": "Maven", "package_name": "org.apache.inlong:manager-pojo", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27526", "ecosystem": "Maven", "package_name": "org.apache.inlong:manager-pojo", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27528", "ecosystem": "Maven", "package_name": "org.apache.inlong:manager-pojo", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27531", "ecosystem": "Maven", "package_name": "org.apache.inlong:inlong-manager", "disclosure_at": "2025-06-06", "advisory_at": "2025-06-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27533", "ecosystem": "Maven", "package_name": "org.apache.activemq:activemq-openwire-legacy", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27538", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "LOW", "cvss_score": 2.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-27555", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-27556", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-27571", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-27611", "ecosystem": "npm", "package_name": "base-x", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-27696", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-27817", "ecosystem": "Maven", "package_name": "org.apache.kafka:kafka-clients", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27818", "ecosystem": "Maven", "package_name": "org.apache.kafka:kafka_2.11", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27819", "ecosystem": "Maven", "package_name": "org.apache.kafka:kafka_2.10", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27820", "ecosystem": "Maven", "package_name": "org.apache.httpcomponents.client5:httpclient5", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-27821", "ecosystem": "Maven", "package_name": "org.apache.hadoop:hadoop-hdfs-native-client", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-2786", "ecosystem": "Go", "package_name": "github.com/grafana/tempo-operator", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-27892", "ecosystem": "Packagist", "package_name": "shopware/core", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-08", "lag_days": -7, "severity": "HIGH", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-27936", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-28197", "ecosystem": "PyPI", "package_name": "crawl4ai", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28269", "ecosystem": "npm", "package_name": "js-object-utilities", "disclosure_at": null, "advisory_at": "2025-04-07", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-2828", "ecosystem": "PyPI", "package_name": "langchain-community", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28380", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28381", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28382", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28382", "ecosystem": "RubyGems", "package_name": "openc3-cosmos-tool-iframe", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-28384", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28384", "ecosystem": "RubyGems", "package_name": "openc3-cosmos-tool-iframe", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-28386", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28388", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-28389", "ecosystem": "PyPI", "package_name": "openc3", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-2842", "ecosystem": "Go", "package_name": "github.com/grafana/tempo-operator", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-2843", "ecosystem": "Go", "package_name": "github.com/rhobs/observability-operator", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-2901", "ecosystem": "Maven", "package_name": "org.jboss.hal:hal-console", "disclosure_at": null, "advisory_at": "2025-05-06", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-2905", "ecosystem": "Maven", "package_name": "org.wso2.am:am-distribution-parent", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-29072", "ecosystem": "Go", "package_name": "github.com/NethermindEth/juno", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-29085", "ecosystem": "Maven", "package_name": "com.vip.saturn:saturn-console", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-29189", "ecosystem": "npm", "package_name": "flowise-components", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-29192", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-03", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-29287", "ecosystem": "Maven", "package_name": "net.mingsoft:ms-mcms", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-29448", "ecosystem": "Packagist", "package_name": "alextselegidis/easyappointments", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-2945", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-2946", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-29480", "ecosystem": "PyPI", "package_name": "gdal", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-29573", "ecosystem": "PyPI", "package_name": "mezzanine", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-29606", "ecosystem": "PyPI", "package_name": "libp2p", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-29744", "ecosystem": "npm", "package_name": "pg-promise", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-29746", "ecosystem": "Packagist", "package_name": "koillection/koillection", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-29785", "ecosystem": "Go", "package_name": "github.com/quic-go/quic-go", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-03", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-29847", "ecosystem": "Maven", "package_name": "org.apache.linkis:linkis", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-29868", "ecosystem": "Go", "package_name": "github.com/apache/answer", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-29953", "ecosystem": "NuGet", "package_name": "Apache.NMS.ActiveMQ", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-30001", "ecosystem": "Maven", "package_name": "org.apache.streampark:streampark", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30065", "ecosystem": "Maven", "package_name": "org.apache.parquet:parquet-avro", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30086", "ecosystem": "Go", "package_name": "github.com/goharbor/harbor", "disclosure_at": "2025-07-25", "advisory_at": "2025-07-23", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-30145", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30148", "ecosystem": "Packagist", "package_name": "silverstripe/framework", "disclosure_at": "2025-04-10", "advisory_at": "2025-04-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30150", "ecosystem": "Packagist", "package_name": "shopware/core", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30151", "ecosystem": "Packagist", "package_name": "shopware/core", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30159", "ecosystem": "Packagist", "package_name": "getkirby/kirby", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30165", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30166", "ecosystem": "Packagist", "package_name": "pimcore/admin-ui-classic-bundle", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-08", "lag_days": 0, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30167", "ecosystem": "PyPI", "package_name": "jupyter-core", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30177", "ecosystem": "Maven", "package_name": "org.apache.camel:camel-undertow", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30202", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30206", "ecosystem": "Go", "package_name": "github.com/donknap/dpanel", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-30207", "ecosystem": "Packagist", "package_name": "getkirby/cms", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30215", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-15", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-30218", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "LOW", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-30220", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30223", "ecosystem": "Go", "package_name": "github.com/beego/beego", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-30359", "ecosystem": "npm", "package_name": "webpack-dev-server", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-30360", "ecosystem": "npm", "package_name": "webpack-dev-server", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-30370", "ecosystem": "PyPI", "package_name": "jupyterlab-git", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30373", "ecosystem": "Maven", "package_name": "org.graylog2:graylog2-server", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30399", "ecosystem": "NuGet", "package_name": "Microsoft.NetCore.App.Runtime.linux-arm", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-11", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-30402", "ecosystem": "Maven", "package_name": "executorch", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30402", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30404", "ecosystem": "Maven", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30404", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30405", "ecosystem": "Maven", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-30405", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3044", "ecosystem": "PyPI", "package_name": "llama-index-readers-papers", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3046", "ecosystem": "PyPI", "package_name": "llama-index-readers-obsidian", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-30473", "ecosystem": "PyPI", "package_name": "apache-airflow-providers-common-sql", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3057", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-30677", "ecosystem": "Maven", "package_name": "org.apache.pulsar:pulsar-io-kafka-connect-adaptor", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3108", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2025-07-06", "advisory_at": "2025-07-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-31119", "ecosystem": "npm", "package_name": "generator-jhipster-entity-audit", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-31128", "ecosystem": "Packagist", "package_name": "drupal/gifplayer", "disclosure_at": null, "advisory_at": "2025-04-09", "lag_days": null, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31129", "ecosystem": "Maven", "package_name": "io.jooby:jooby-pac4j", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31130", "ecosystem": "crates.io", "package_name": "gix-features", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-31131", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31133", "ecosystem": "Go", "package_name": "github.com/opencontainers/runc", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-31135", "ecosystem": "Go", "package_name": "github.com/phires/go-guerrilla", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-31137", "ecosystem": "npm", "package_name": "@react-router/express", "disclosure_at": "2025-04-01", "advisory_at": "2025-04-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-31138", "ecosystem": "npm", "package_name": "tarteaucitronjs", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-3121", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3122", "ecosystem": "PyPI", "package_name": "wabt-bin", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3129", "ecosystem": "Packagist", "package_name": "drupal/access_code", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3130", "ecosystem": "Packagist", "package_name": "drupal/obfuscate", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3131", "ecosystem": "Packagist", "package_name": "drupal/eca", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3136", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-31363", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3, "source_registry": "Go" }, { "cve_id": "CVE-2025-31475", "ecosystem": "npm", "package_name": "tarteaucitronjs", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-31476", "ecosystem": "Packagist", "package_name": "drupal/tacjs", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-02", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31476", "ecosystem": "npm", "package_name": "tarteaucitronjs", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-31477", "ecosystem": "crates.io", "package_name": "tauri-plugin-shell", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-31477", "ecosystem": "npm", "package_name": "tauri-plugin-shell", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-31481", "ecosystem": "Packagist", "package_name": "api-platform/graphql", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31483", "ecosystem": "Go", "package_name": "miniflux.app/v2", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-31485", "ecosystem": "Packagist", "package_name": "api-platform/graphql", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31486", "ecosystem": "npm", "package_name": "vite", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-31487", "ecosystem": "Maven", "package_name": "org.xwiki.contrib.jira:jira-macro-default", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31489", "ecosystem": "Go", "package_name": "github.com/minio/minio", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-04", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-31493", "ecosystem": "Packagist", "package_name": "getkirby/cms", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31496", "ecosystem": "crates.io", "package_name": "apollo-compiler", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-3153", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3158", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3159", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3160", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3162", "ecosystem": "PyPI", "package_name": "lmdeploy", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3163", "ecosystem": "PyPI", "package_name": "lmdeploy", "disclosure_at": "2025-04-03", "advisory_at": "2025-04-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-31650", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-coyote", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31651", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-catalina", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31672", "ecosystem": "Maven", "package_name": "org.apache.poi:poi-ooxml", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31673", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31674", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31675", "ecosystem": "Packagist", "package_name": "drupal/core", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31677", "ecosystem": "Packagist", "package_name": "drupal/ai", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31678", "ecosystem": "Packagist", "package_name": "drupal/ai", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31679", "ecosystem": "Packagist", "package_name": "drupal/ignition", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31680", "ecosystem": "Packagist", "package_name": "drupal/matomo", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31681", "ecosystem": "Packagist", "package_name": "drupal/alogin", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31682", "ecosystem": "Packagist", "package_name": "drupal/google_tag", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31683", "ecosystem": "Packagist", "package_name": "drupal/google_tag", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31684", "ecosystem": "Packagist", "package_name": "drupal/oauth2_client", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31685", "ecosystem": "Packagist", "package_name": "goalgorilla/open_social", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31686", "ecosystem": "Packagist", "package_name": "goalgorilla/open_social", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31687", "ecosystem": "Packagist", "package_name": "drupal/spamspan", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31688", "ecosystem": "Packagist", "package_name": "drupal/config_split", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31689", "ecosystem": "Packagist", "package_name": "drupal/gdpr", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31690", "ecosystem": "Packagist", "package_name": "drupal/cache_utility", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31691", "ecosystem": "Packagist", "package_name": "drupal/oauth2_server", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31692", "ecosystem": "Packagist", "package_name": "drupal/ai", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31693", "ecosystem": "Packagist", "package_name": "drupal/ai", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31694", "ecosystem": "Packagist", "package_name": "drupal/tfa", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31695", "ecosystem": "Packagist", "package_name": "drupal/link_field_display_mode_formatter", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31696", "ecosystem": "Packagist", "package_name": "drupal/rapidoc_elements_field_formatter", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31697", "ecosystem": "Packagist", "package_name": "drupal/formatter_suite", "disclosure_at": null, "advisory_at": "2025-04-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-31720", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31721", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31722", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:templating-engine", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31723", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:simple-queue", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31724", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:vmanager-plugin", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31725", "ecosystem": "Maven", "package_name": "org.ukiuni.monitor-remote-job-plugin:monitor-remote-job", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31726", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:stackhammer", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31727", "ecosystem": "Maven", "package_name": "org.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-31728", "ecosystem": "Maven", "package_name": "org.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin", "disclosure_at": "2025-04-02", "advisory_at": "2025-04-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3191", "ecosystem": "npm", "package_name": "react-draft-wysiwyg", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-04", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-3192", "ecosystem": "Packagist", "package_name": "spatie/browsershot", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3193", "ecosystem": "npm", "package_name": "algoliasearch-helper", "disclosure_at": "2025-09-27", "advisory_at": "2025-09-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-3194", "ecosystem": "npm", "package_name": "bigint-buffer", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-31947", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-3196", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3197", "ecosystem": "npm", "package_name": "expand-object", "disclosure_at": "2025-04-04", "advisory_at": "2025-04-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-32013", "ecosystem": "PyPI", "package_name": "lnbits", "disclosure_at": "2025-04-06", "advisory_at": "2025-04-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32014", "ecosystem": "npm", "package_name": "estree-util-value-to-estree", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-32016", "ecosystem": "NuGet", "package_name": "Microsoft.Identity.Web", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-32017", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-09", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-32019", "ecosystem": "Go", "package_name": "github.com/goharbor/harbor", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-32020", "ecosystem": "npm", "package_name": "crud-query-parser", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-09", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-32021", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-15", "lag_days": 0, "severity": "LOW", "cvss_score": 2.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32024", "ecosystem": "Go", "package_name": "github.com/bep/imagemeta", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-09", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-32025", "ecosystem": "Go", "package_name": "github.com/bep/imagemeta", "disclosure_at": "2025-04-08", "advisory_at": "2025-04-09", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-32027", "ecosystem": "Packagist", "package_name": "yiisoft/yii", "disclosure_at": "2025-04-10", "advisory_at": "2025-04-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32029", "ecosystem": "npm", "package_name": "@apeleghq/asn1-der", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-32030", "ecosystem": "npm", "package_name": "@apollo/gateway", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-32031", "ecosystem": "npm", "package_name": "@apollo/gateway", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-32032", "ecosystem": "crates.io", "package_name": "apollo-router", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-32033", "ecosystem": "crates.io", "package_name": "apollo-router", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-32034", "ecosystem": "crates.io", "package_name": "apollo-router", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-32044", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32045", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32093", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-04-14", "advisory_at": "2025-04-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-3225", "ecosystem": "PyPI", "package_name": "llama-index-readers-papers", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3227", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-3228", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-3230", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-32372", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-32375", "ecosystem": "PyPI", "package_name": "bentoml", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32377", "ecosystem": "PyPI", "package_name": "rasa-pro", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32378", "ecosystem": "Packagist", "package_name": "shopware/core", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32379", "ecosystem": "npm", "package_name": "koa", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "npm" }, { "cve_id": "CVE-2025-32380", "ecosystem": "crates.io", "package_name": "apollo-router", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-07", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-32381", "ecosystem": "PyPI", "package_name": "xgrammar", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32386", "ecosystem": "Go", "package_name": "helm.sh/helm/v3", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-32387", "ecosystem": "Go", "package_name": "helm.sh/helm/v3", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-32388", "ecosystem": "npm", "package_name": "@sveltejs/kit", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-14", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-32395", "ecosystem": "npm", "package_name": "vite", "disclosure_at": "2025-04-10", "advisory_at": "2025-04-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-32421", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-15", "lag_days": 1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-32426", "ecosystem": "Packagist", "package_name": "verbb/formie", "disclosure_at": "2025-04-11", "advisory_at": "2025-04-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32427", "ecosystem": "Packagist", "package_name": "verbb/formie", "disclosure_at": "2025-04-11", "advisory_at": "2025-04-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32428", "ecosystem": "PyPI", "package_name": "jupyter-remote-desktop-proxy", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-12", "lag_days": -3, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32429", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-distribution-war", "disclosure_at": "2025-07-24", "advisory_at": "2025-07-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32430", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-web-templates", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32431", "ecosystem": "Go", "package_name": "github.com/traefik/traefik", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-32432", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32434", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32439", "ecosystem": "crates.io", "package_name": "pleezer", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-14", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-32441", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-08", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-32442", "ecosystem": "npm", "package_name": "fastify", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-32444", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32445", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-events", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-14", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-3248", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2025-04-07", "advisory_at": "2025-04-07", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3260", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-3261", "ecosystem": "Maven", "package_name": "org.thingsboard:application", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3262", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3263", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3264", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32777", "ecosystem": "Go", "package_name": "volcano.sh/volcano", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-32783", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-messagestream", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32788", "ecosystem": "PyPI", "package_name": "octoprint", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32791", "ecosystem": "npm", "package_name": "@backstage/plugin-permission-backend", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-32792", "ecosystem": "npm", "package_name": "ses", "disclosure_at": "2025-04-18", "advisory_at": "2025-04-18", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-32793", "ecosystem": "Go", "package_name": "github.com/cilium/cilium", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "Go" }, { "cve_id": "CVE-2025-32873", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-05-08", "advisory_at": "2025-05-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32896", "ecosystem": "Maven", "package_name": "org.apache.seatunnel:seatunnel-engine-server", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-19", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32897", "ecosystem": "Maven", "package_name": "org.apache.seata:seata-config-core", "disclosure_at": "2025-06-28", "advisory_at": "2025-06-28", "lag_days": 0, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32931", "ecosystem": "Packagist", "package_name": "tcg/voyager", "disclosure_at": "2025-04-14", "advisory_at": "2025-04-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32950", "ecosystem": "Maven", "package_name": "io.jmix.localfs:jmix-localfs", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32951", "ecosystem": "Maven", "package_name": "io.jmix.rest:jmix-rest", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32952", "ecosystem": "Maven", "package_name": "io.jmix.localfs:jmix-localfs", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32957", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-32959", "ecosystem": "Maven", "package_name": "com.haulmont.cuba:cuba-core", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32960", "ecosystem": "Maven", "package_name": "com.haulmont.addon.restapi:restapi-rest-api", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32961", "ecosystem": "Maven", "package_name": "com.haulmont.addon.jpawebapi:jpawebapi-jpawebapi", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32962", "ecosystem": "PyPI", "package_name": "flask-appbuilder", "disclosure_at": "2025-05-16", "advisory_at": "2025-05-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-32963", "ecosystem": "Go", "package_name": "github.com/minio/operator", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-32965", "ecosystem": "npm", "package_name": "xrpl", "disclosure_at": "2025-04-22", "advisory_at": "2025-04-22", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-32968", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-oldcore", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32969", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rest-server", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32970", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-wysiwyg-api", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32971", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-search-solr-api", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32972", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-lesscss-script", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32973", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-component-wiki", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32974", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-security-requiredrights-default", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Maven" }, { "cve_id": "CVE-2025-32996", "ecosystem": "npm", "package_name": "http-proxy-middleware", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "npm" }, { "cve_id": "CVE-2025-32997", "ecosystem": "npm", "package_name": "http-proxy-middleware", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "npm" }, { "cve_id": "CVE-2025-33042", "ecosystem": "Maven", "package_name": "org.apache.avro:avro-compiler", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-33042", "ecosystem": "PyPI", "package_name": "avro", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-33245", "ecosystem": "PyPI", "package_name": "nemo-toolkit", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-33253", "ecosystem": "PyPI", "package_name": "nemo-toolkit", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-34075", "ecosystem": "RubyGems", "package_name": "vagrant", "disclosure_at": "2025-07-02", "advisory_at": "2025-07-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-34076", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2025-07-02", "advisory_at": "2025-07-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-34086", "ecosystem": "Packagist", "package_name": "bolt/bolt", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-34146", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-3415", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-34267", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-34281", "ecosystem": "Maven", "package_name": "org.thingsboard:application", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-34291", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2025-12-05", "advisory_at": "2025-12-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-34351", "ecosystem": "PyPI", "package_name": "ray", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-34410", "ecosystem": "Go", "package_name": "github.com/1Panel-dev/1Panel", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-34429", "ecosystem": "Go", "package_name": "github.com/1Panel-dev/1Panel", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-34430", "ecosystem": "Go", "package_name": "github.com/1Panel-dev/1Panel", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-3445", "ecosystem": "Go", "package_name": "github.com/mholt/archiver", "disclosure_at": "2025-04-13", "advisory_at": "2025-04-14", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-3446", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-34469", "ecosystem": "PyPI", "package_name": "cowrie", "disclosure_at": "2025-12-31", "advisory_at": "2025-12-20", "lag_days": -11, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3454", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-3474", "ecosystem": "Packagist", "package_name": "drupal/panels", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3475", "ecosystem": "Packagist", "package_name": "drupal/webt", "disclosure_at": "2025-04-09", "advisory_at": "2025-04-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3501", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-30", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-35036", "ecosystem": "Maven", "package_name": "org.hibernate.validator:hibernate-validator", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3526", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.kernel", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3549", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-04-14", "advisory_at": "2025-04-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3573", "ecosystem": "npm", "package_name": "jquery-validation", "disclosure_at": "2025-04-15", "advisory_at": "2025-04-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-3586", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.object.service", "disclosure_at": "2025-09-01", "advisory_at": "2025-12-12", "lag_days": 102, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3588", "ecosystem": "Maven", "package_name": "org.jsonschema2pojo:jsonschema2pojo-core", "disclosure_at": "2025-04-14", "advisory_at": "2025-04-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-35939", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-08", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3594", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.server.admin.web", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-35965", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-3602", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.vulcan.impl", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3611", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-3627", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3628", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3634", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3635", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3636", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3637", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3638", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "LOW", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3639", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3640", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3641", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3642", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3643", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3644", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3645", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3647", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-36530", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-36852", "ecosystem": "npm", "package_name": "@nx/azure-cache", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-3730", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3733", "ecosystem": "Packagist", "package_name": "drupal/baguettebox", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3734", "ecosystem": "Packagist", "package_name": "drupal/stage_file_proxy", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3735", "ecosystem": "Packagist", "package_name": "drupal/panelizer", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3736", "ecosystem": "Packagist", "package_name": "drupal/simple_gtm", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3737", "ecosystem": "Packagist", "package_name": "drupal/gmap_store_locator", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3738", "ecosystem": "Packagist", "package_name": "drupal/google_optimize", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3739", "ecosystem": "Packagist", "package_name": "drupal/d8_google_optimize_hide_page", "disclosure_at": "2025-04-16", "advisory_at": "2025-04-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3757", "ecosystem": "Go", "package_name": "github.com/openpubkey/openpubkey", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-3760", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-04-17", "advisory_at": "2025-04-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-37727", "ecosystem": "Maven", "package_name": "org.elasticsearch:elasticsearch", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-37731", "ecosystem": "Maven", "package_name": "org.elasticsearch:elasticsearch", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3777", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3801", "ecosystem": "Go", "package_name": "github.com/songquanpeng/one-api", "disclosure_at": "2025-04-19", "advisory_at": "2025-04-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 2.399999999999999911182158029987476766109466552734375, "source_registry": "Go" }, { "cve_id": "CVE-2025-3857", "ecosystem": "NuGet", "package_name": "Amazon.IonDotnet", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-3879", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-3900", "ecosystem": "Packagist", "package_name": "drupal/colorbox", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3901", "ecosystem": "Packagist", "package_name": "drupal/bootstrap_site_alert", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3902", "ecosystem": "Packagist", "package_name": "drupal/block_class", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3903", "ecosystem": "Packagist", "package_name": "drupal/ueditor", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3904", "ecosystem": "Packagist", "package_name": "drupal/sportsleague", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3907", "ecosystem": "Packagist", "package_name": "drupal/search_api_solr", "disclosure_at": "2025-04-23", "advisory_at": "2025-04-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-3910", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3913", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-3930", "ecosystem": "npm", "package_name": "@strapi/strapi", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-3931", "ecosystem": "Go", "package_name": "github.com/redhatinsights/yggdrasil", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-3933", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-3984", "ecosystem": "Maven", "package_name": "org.apereo.cas:cas-management-webapp-support", "disclosure_at": "2025-04-27", "advisory_at": "2025-04-27", "lag_days": 0, "severity": "LOW", "cvss_score": 5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3985", "ecosystem": "Maven", "package_name": "org.apereo.cas:cas-management-webapp-support", "disclosure_at": "2025-04-27", "advisory_at": "2025-04-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-3986", "ecosystem": "Maven", "package_name": "org.apereo.cas:cas-server-core-configuration-metadata-repository", "disclosure_at": "2025-04-27", "advisory_at": "2025-04-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4032", "ecosystem": "PyPI", "package_name": "aworld", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "LOW", "cvss_score": 5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-4057", "ecosystem": "Go", "package_name": "github.com/arkmq-org/activemq-artemis-operator", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-40843", "ecosystem": "PyPI", "package_name": "codechecker", "disclosure_at": "2025-10-28", "advisory_at": "2025-09-22", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-41115", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2025-41117", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-4123", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-05-22", "advisory_at": "2025-05-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-41232", "ecosystem": "Maven", "package_name": "org.springframework.security:spring-security-aspects", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41234", "ecosystem": "Maven", "package_name": "org.springframework:spring-web", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41235", "ecosystem": "Maven", "package_name": "org.springframework.cloud:spring-cloud-gateway-server", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41242", "ecosystem": "Maven", "package_name": "org.springframework:spring-webmvc", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41243", "ecosystem": "Maven", "package_name": "org.springframework.cloud:spring-cloud-gateway-server-webflux", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41248", "ecosystem": "Maven", "package_name": "org.springframework.security:spring-security-core", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41249", "ecosystem": "Maven", "package_name": "org.springframework:spring-core", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41253", "ecosystem": "Maven", "package_name": "org.springframework.cloud:spring-cloud-gateway-server", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-41254", "ecosystem": "Maven", "package_name": "org.springframework:spring-websocket", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4128", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-41395", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-playbooks", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-41410", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-41419", "ecosystem": "PyPI", "package_name": "ms-swift", "disclosure_at": null, "advisory_at": "2025-07-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-41423", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-playbooks", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-24", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-4143", "ecosystem": "npm", "package_name": "@cloudflare/workers-oauth-provider", "disclosure_at": "2025-05-01", "advisory_at": "2025-05-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-41436", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-4144", "ecosystem": "npm", "package_name": "@cloudflare/workers-oauth-provider", "disclosure_at": "2025-05-01", "advisory_at": "2025-05-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-41443", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-4166", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-4210", "ecosystem": "Go", "package_name": "github.com/casdoor/casdoor", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-43585", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-4366", "ecosystem": "crates.io", "package_name": "pingora-core", "disclosure_at": "2025-05-22", "advisory_at": "2025-05-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-43717", "ecosystem": "Packagist", "package_name": "pear/http_request2", "disclosure_at": "2025-04-17", "advisory_at": "2025-04-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-43731", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43732", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.roles.selector.web", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43733", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.layout.taglib", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43734", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43735", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43736", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43737", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.journal.web", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43738", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.expando.web", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43739", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.calendar.service", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43740", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43741", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43742", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.layout.type.controller.display.page", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43743", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43744", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43745", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43746", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43748", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43749", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43750", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.dynamic.data.mapping.form.web", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43751", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.login.web", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43752", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43753", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.layout.taglib", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-22", "lag_days": 1, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43754", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43755", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.layout.admin.web", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43756", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43757", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43758", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.frontend.js.web", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43759", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.layout.impl", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43760", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43761", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.frontend.editor.ckeditor.web", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43761", "ecosystem": "npm", "package_name": "com.liferay:com.liferay.frontend.editor.ckeditor.web", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-43762", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.dynamic.data.mapping.form.web", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43763", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.object.service", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43764", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.workflow.kaleo.designer.web", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43765", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.journal.service", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43766", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.style.book.web", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43767", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.info.impl", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43768", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43769", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.plugins.admin.web", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43770", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.kernel", "disclosure_at": "2025-08-23", "advisory_at": "2025-08-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43771", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.flags.web", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43772", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.workflow.kaleo.forms.web", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-04", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43773", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43774", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.frontend.taglib.clay", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43775", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.client.extension.web", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43776", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43777", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.security.sso.openid.connect.impl", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43778", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.workflow.kaleo.forms.web", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43781", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.search.web", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43782", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.workflow.kaleo.runtime.integration.impl", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43783", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.frontend.editor.ckeditor.web", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43784", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.headless.builder.impl", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43785", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43786", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.vulcan.impl", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43787", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.users.admin.web", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43788", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.organizations.item.selector.web", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43789", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.comment.web", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43790", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.object.service", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43791", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.dynamic.data.mapping.form.field.type", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43792", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.kernel", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43793", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43794", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43795", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.configuration.admin.web", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43796", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.vulcan.api", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43797", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.site.admin.web", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-16", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43798", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43799", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43800", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.dynamic.data.mapping.form.field.type", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43801", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43802", "ecosystem": "Maven", "package_name": "com.liferay.workspace:com.liferay.ticket.workspace", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-16", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43803", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.contacts.web", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43804", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.search", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-17", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43805", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.asset.display.page.service", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-17", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43806", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.headless.batch.engine.impl", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43807", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.change.tracking.service", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43808", "ecosystem": "Maven", "package_name": "com.liferay.commerce:com.liferay.commerce.product.type.virtual.service", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43809", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43810", "ecosystem": "Maven", "package_name": "com.liferay.commerce:com.liferay.commerce.service", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43811", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.item.selector.web", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43812", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43813", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43814", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.security.audit.event.generators.user.management", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43815", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.product.navigation.control.menu.web", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43816", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.vulcan.impl", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43817", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43818", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.calendar.web", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43819", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.saml.impl", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43820", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43821", "ecosystem": "Maven", "package_name": "com.liferay.commerce:com.liferay.commerce.product.service", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43822", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-08", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43823", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-08", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43824", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-07", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43825", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.template.freemarker", "disclosure_at": "2025-10-03", "advisory_at": "2025-10-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43826", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-09-30", "advisory_at": "2025-10-01", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43827", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.security.audit.web", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43829", "ecosystem": "Maven", "package_name": "com.liferay.commerce:com.liferay.commerce.shop.by.diagram.web", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43830", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43855", "ecosystem": "npm", "package_name": "@trpc/server", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-24", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-43857", "ecosystem": "RubyGems", "package_name": "net-imap", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-43858", "ecosystem": "NuGet", "package_name": "YoutubeDLSharp", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-23", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.199999999999999289457264239899814128875732421875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-43859", "ecosystem": "PyPI", "package_name": "h11", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-43863", "ecosystem": "PyPI", "package_name": "vantage6", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-12", "lag_days": 0, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-43864", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-43865", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-43866", "ecosystem": "PyPI", "package_name": "vantage6-server", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-12", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-4388", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.marketplace.app.manager.web", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-43915", "ecosystem": "Go", "package_name": "github.com/linkerd/linkerd2", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-43954", "ecosystem": "npm", "package_name": "@quasar/quasar-ui-qmarkdown", "disclosure_at": "2025-04-20", "advisory_at": "2025-04-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-43960", "ecosystem": "Packagist", "package_name": "vrana/adminer", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-43970", "ecosystem": "Go", "package_name": "github.com/osrg/gobgp", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-43971", "ecosystem": "Go", "package_name": "github.com/osrg/gobgp/v3", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-43972", "ecosystem": "Go", "package_name": "github.com/osrg/gobgp", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-43973", "ecosystem": "Go", "package_name": "github.com/osrg/gobgp", "disclosure_at": "2025-04-21", "advisory_at": "2025-04-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-44001", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "Go" }, { "cve_id": "CVE-2025-44004", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-44005", "ecosystem": "Go", "package_name": "github.com/smallstep/certificates", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-03", "lag_days": -14, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2025-44021", "ecosystem": "PyPI", "package_name": "ironic", "disclosure_at": "2025-05-08", "advisory_at": "2025-05-08", "lag_days": 0, "severity": "LOW", "cvss_score": 2.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-4415", "ecosystem": "Packagist", "package_name": "drupal/piwik_pro", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-14", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-4416", "ecosystem": "Packagist", "package_name": "drupal/events_log_track", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-14", "lag_days": -7, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-44163", "ecosystem": "Packagist", "package_name": "billz/raspap-webgui", "disclosure_at": "2025-06-27", "advisory_at": "2025-06-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-4432", "ecosystem": "Go", "package_name": "github.com/briansmith/ring", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-15", "lag_days": 6, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-4432", "ecosystem": "crates.io", "package_name": "ring", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-4437", "ecosystem": "Go", "package_name": "github.com/cri-o/cri-o", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-44779", "ecosystem": "Go", "package_name": "github.com/ollama/ollama", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-44779", "ecosystem": "PyPI", "package_name": "ollama", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-45001", "ecosystem": "npm", "package_name": "react-native-keys", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-45143", "ecosystem": "npm", "package_name": "string-math", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "LOW", "cvss_score": 7, "source_registry": "npm" }, { "cve_id": "CVE-2025-45346", "ecosystem": "Packagist", "package_name": "bacula-web/bacula-web", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-45616", "ecosystem": "Maven", "package_name": "com.baidu.mapp:brcc-core", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4563", "ecosystem": "Go", "package_name": "k8s.io/kubernetes", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-4565", "ecosystem": "PyPI", "package_name": "protobuf", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-45691", "ecosystem": "PyPI", "package_name": "ragas", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-4573", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-4574", "ecosystem": "crates.io", "package_name": "crossbeam-channel", "disclosure_at": "2025-05-13", "advisory_at": "2025-04-08", "lag_days": -35, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-4576", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.blogs.web", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-45768", "ecosystem": "PyPI", "package_name": "pyjwt", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-45769", "ecosystem": "Packagist", "package_name": "firebase/php-jwt", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-4581", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-45855", "ecosystem": "Maven", "package_name": "xyz.erupt:erupt", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46001", "ecosystem": "Packagist", "package_name": "simogeo/filemanager", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46002", "ecosystem": "Packagist", "package_name": "simogeo/filemanager", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-4604", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.captcha.impl", "disclosure_at": "2025-08-04", "advisory_at": "2025-08-05", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46047", "ecosystem": "Maven", "package_name": "org.silverpeas.core:silverpeas-core", "disclosure_at": "2025-09-02", "advisory_at": "2025-09-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46096", "ecosystem": "Maven", "package_name": "org.noear:solon-faas-luffy", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46148", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46149", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46150", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46152", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46153", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46326", "ecosystem": "NuGet", "package_name": "Snowflake.Data", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-46327", "ecosystem": "Go", "package_name": "github.com/snowflakedb/gosnowflake", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-46328", "ecosystem": "npm", "package_name": "snowflake-sdk", "disclosure_at": "2025-04-28", "advisory_at": "2025-04-28", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-46331", "ecosystem": "Go", "package_name": "github.com/openfga/openfga", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-46332", "ecosystem": "npm", "package_name": "flags", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-46335", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46336", "ecosystem": "RubyGems", "package_name": "rack-session", "disclosure_at": "2025-05-08", "advisory_at": "2025-05-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-46337", "ecosystem": "Packagist", "package_name": "adodb/adodb-php", "disclosure_at": "2025-05-01", "advisory_at": "2025-05-01", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46342", "ecosystem": "Go", "package_name": "github.com/kyverno/kyverno", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-46343", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-28", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "npm" }, { "cve_id": "CVE-2025-46344", "ecosystem": "npm", "package_name": "@auth0/nextjs-auth0", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-46346", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46347", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46348", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46349", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46350", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46392", "ecosystem": "Maven", "package_name": "commons-configuration:commons-configuration", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-09", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4641", "ecosystem": "Maven", "package_name": "io.github.bonigarcia:webdrivermanager", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46417", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": "2025-04-24", "advisory_at": "2025-04-07", "lag_days": -17, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-4643", "ecosystem": "npm", "package_name": "payload", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-4644", "ecosystem": "npm", "package_name": "payload", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-46548", "ecosystem": "Maven", "package_name": "org.apache.pekko:pekko-management_2.12", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46549", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-4655", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46550", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-04-29", "advisory_at": "2025-04-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46551", "ecosystem": "Maven", "package_name": "rubygems:jruby-openssl", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46551", "ecosystem": "RubyGems", "package_name": "rubygems:jruby-openssl", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-46553", "ecosystem": "npm", "package_name": "@misskey-dev/summaly", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-46554", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rest-server", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46556", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2025-11-04", "advisory_at": "2025-11-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46557", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-security-authentication-ui", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46558", "ecosystem": "Maven", "package_name": "org.xwiki.contrib.markdown:syntax-markdown-commonmark12", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4656", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-46560", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-04-30", "advisory_at": "2025-04-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46565", "ecosystem": "npm", "package_name": "vite", "disclosure_at": "2025-05-01", "advisory_at": "2025-04-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-46567", "ecosystem": "PyPI", "package_name": "llamafactory", "disclosure_at": "2025-05-01", "advisory_at": "2025-04-23", "lag_days": -8, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46569", "ecosystem": "Go", "package_name": "github.com/open-policy-agent/opa/v1/server", "disclosure_at": "2025-05-01", "advisory_at": "2025-05-01", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-46570", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-28", "lag_days": -1, "severity": "LOW", "cvss_score": 2.600000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46572", "ecosystem": "npm", "package_name": "passport-wsfed-saml2", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-46573", "ecosystem": "npm", "package_name": "passport-wsfed-saml2", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-4658", "ecosystem": "Go", "package_name": "github.com/openpubkey/opkssh", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-46599", "ecosystem": "Go", "package_name": "github.com/k3s-io/k3s", "disclosure_at": "2025-04-25", "advisory_at": "2025-04-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-46653", "ecosystem": "npm", "package_name": "formidable", "disclosure_at": "2025-04-26", "advisory_at": "2025-04-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2025-46656", "ecosystem": "PyPI", "package_name": "markdownify", "disclosure_at": "2025-04-26", "advisory_at": "2025-04-27", "lag_days": 1, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46701", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-catalina", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-29", "lag_days": 0, "severity": "LOW", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46702", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-46717", "ecosystem": "crates.io", "package_name": "sudo-rs", "disclosure_at": "2025-05-12", "advisory_at": "2025-05-13", "lag_days": 1, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-46718", "ecosystem": "crates.io", "package_name": "sudo-rs", "disclosure_at": "2025-05-12", "advisory_at": "2025-05-13", "lag_days": 1, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-46720", "ecosystem": "npm", "package_name": "@keystone-6/core", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2025-46721", "ecosystem": "Go", "package_name": "github.com/justinas/nosurf", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-46722", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-28", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46723", "ecosystem": "crates.io", "package_name": "openvm", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-05", "lag_days": 3, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-46724", "ecosystem": "PyPI", "package_name": "langroid", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46725", "ecosystem": "PyPI", "package_name": "langroid", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46726", "ecosystem": "PyPI", "package_name": "langroid", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46727", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-08", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-4673", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-46730", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46731", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46732", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46734", "ecosystem": "Packagist", "package_name": "league/commonmark", "disclosure_at": "2025-05-05", "advisory_at": "2025-05-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-46735", "ecosystem": "Go", "package_name": "github.com/nrkno/terraform-provider-windns", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-46736", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-4674", "ecosystem": "Go", "package_name": "toolchain", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-46762", "ecosystem": "Maven", "package_name": "org.apache.parquet:parquet-avro", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-46812", "ecosystem": "npm", "package_name": "trix", "disclosure_at": "2025-05-08", "advisory_at": "2025-05-08", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-46814", "ecosystem": "PyPI", "package_name": "fastapi-guard", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "LOW", "cvss_score": 3.399999999999999911182158029987476766109466552734375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-46815", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-46816", "ecosystem": "Go", "package_name": "github.com/patrickhener/goshs", "disclosure_at": "2025-05-06", "advisory_at": "2025-05-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-46827", "ecosystem": "Maven", "package_name": "org.graylog2:graylog2-server", "disclosure_at": "2025-05-07", "advisory_at": "2025-05-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47110", "ecosystem": "Packagist", "package_name": "magento/community-edition", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47204", "ecosystem": "npm", "package_name": "bootstrap-multiselect", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-47226", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2025-05-02", "advisory_at": "2025-05-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47241", "ecosystem": "PyPI", "package_name": "browser-use", "disclosure_at": "2025-05-03", "advisory_at": "2025-05-05", "lag_days": 2, "severity": "CRITICAL", "cvss_score": 4, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47269", "ecosystem": "npm", "package_name": "code-server", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-4727", "ecosystem": "npm", "package_name": "meteor", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-16", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-47273", "ecosystem": "PyPI", "package_name": "setuptools", "disclosure_at": "2025-05-17", "advisory_at": "2025-05-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47275", "ecosystem": "Packagist", "package_name": "auth0/auth0-php", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-16", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47277", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47278", "ecosystem": "PyPI", "package_name": "flask", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47279", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-15", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2025-47280", "ecosystem": "NuGet", "package_name": "Umbraco.Forms", "disclosure_at": "2025-05-13", "advisory_at": "2025-05-13", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-47281", "ecosystem": "Go", "package_name": "github.com/kyverno/kyverno", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-22", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-47282", "ecosystem": "Go", "package_name": "github.com/gardener/external-dns-management", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-47283", "ecosystem": "Go", "package_name": "github.com/gardener/gardener", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-47284", "ecosystem": "Go", "package_name": "github.com/gardener/gardener", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-47285", "ecosystem": "PyPI", "package_name": "vyper", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-16", "lag_days": 1, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47287", "ecosystem": "PyPI", "package_name": "tornado", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-16", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47290", "ecosystem": "Go", "package_name": "github.com/containerd/containerd/v2", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-21", "lag_days": 1, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-47291", "ecosystem": "Go", "package_name": "github.com/containerd/containerd/v2", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-47293", "ecosystem": "Maven", "package_name": "com.powsybl:powsybl-commons", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-19", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47410", "ecosystem": "Maven", "package_name": "org.apache.geode:geode-web", "disclosure_at": "2025-10-18", "advisory_at": "2025-10-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47411", "ecosystem": "Maven", "package_name": "org.apache.streampipes:streampipes-parent", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4759", "ecosystem": "npm", "package_name": "lockfile-lint-api", "disclosure_at": "2025-05-16", "advisory_at": "2025-05-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-4760", "ecosystem": "Maven", "package_name": "org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.api", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47700", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-47701", "ecosystem": "Packagist", "package_name": "drupal/restrict_route_by_ip", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47702", "ecosystem": "Packagist", "package_name": "drupal/oembed_providers", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47703", "ecosystem": "Packagist", "package_name": "drupal/cookies", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47704", "ecosystem": "Packagist", "package_name": "drupal/klaro", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47705", "ecosystem": "Packagist", "package_name": "drupal/iframeremove", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47706", "ecosystem": "Packagist", "package_name": "drupal/miniorange_2fa", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47707", "ecosystem": "Packagist", "package_name": "drupal/miniorange_2fa", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47708", "ecosystem": "Packagist", "package_name": "drupal/miniorange_2fa", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47709", "ecosystem": "Packagist", "package_name": "drupal/miniorange_2fa", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47710", "ecosystem": "Packagist", "package_name": "drupal/miniorange_2fa", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-07", "lag_days": -7, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47735", "ecosystem": "crates.io", "package_name": "wgp", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-09", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-47736", "ecosystem": "crates.io", "package_name": "libsql-sqlite3-parser", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-09", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-47737", "ecosystem": "crates.io", "package_name": "trailer", "disclosure_at": "2025-05-09", "advisory_at": "2025-05-04", "lag_days": -5, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-47771", "ecosystem": "Maven", "package_name": "com.powsybl:powsybl-math", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-19", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47774", "ecosystem": "PyPI", "package_name": "vyper", "disclosure_at": "2025-05-15", "advisory_at": "2025-05-16", "lag_days": 1, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47776", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2025-11-04", "advisory_at": "2025-11-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47778", "ecosystem": "Packagist", "package_name": "sulu/sulu", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-15", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47782", "ecosystem": "PyPI", "package_name": "motioneye", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47783", "ecosystem": "PyPI", "package_name": "label-studio", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47828", "ecosystem": "npm", "package_name": "@lumieducation/h5p-server", "disclosure_at": "2025-05-11", "advisory_at": "2025-05-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-47870", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47871", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47884", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:oidc-provider", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47885", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:cloudbees-jenkins-advisor", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47886", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:vmanager-plugin", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47887", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:vmanager-plugin", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47888", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:dingding-notifications", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47889", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:wso2id-oauth", "disclosure_at": "2025-05-14", "advisory_at": "2025-05-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-47906", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-09-18", "advisory_at": "2025-09-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-47907", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "Go" }, { "cve_id": "CVE-2025-47909", "ecosystem": "Go", "package_name": "github.com/gorilla/csrf", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47910", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-47911", "ecosystem": "Go", "package_name": "golang.org/x/net", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47912", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47913", "ecosystem": "Go", "package_name": "golang.org/x/crypto", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-47914", "ecosystem": "Go", "package_name": "golang.org/x/crypto", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47931", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-05-17", "advisory_at": "2025-05-19", "lag_days": 2, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47933", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-cd", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-28", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2025-47934", "ecosystem": "npm", "package_name": "openpgp", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-47935", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-47936", "ecosystem": "Packagist", "package_name": "typo3/cms-webhooks", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47937", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47938", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47939", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47940", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47941", "ecosystem": "Packagist", "package_name": "typo3/cms-backend", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47943", "ecosystem": "Go", "package_name": "github.com/gogs/gogs", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-26", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-47944", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-47946", "ecosystem": "Packagist", "package_name": "symfony/ux-twig-component", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-47948", "ecosystem": "npm", "package_name": "cocotais-bot", "disclosure_at": "2025-05-17", "advisory_at": "2025-05-19", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-47949", "ecosystem": "npm", "package_name": "samlify", "disclosure_at": "2025-05-19", "advisory_at": "2025-05-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-47950", "ecosystem": "Go", "package_name": "github.com/coredns/coredns", "disclosure_at": "2025-06-06", "advisory_at": "2025-06-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-47951", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-47952", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "LOW", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-48009", "ecosystem": "Packagist", "package_name": "drupal/single_content_sync", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-14", "lag_days": -7, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48010", "ecosystem": "Packagist", "package_name": "drupal/one_time_password", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-14", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48011", "ecosystem": "Packagist", "package_name": "drupal/one_time_password", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-14", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48012", "ecosystem": "Packagist", "package_name": "drupal/one_time_password", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-14", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48013", "ecosystem": "Packagist", "package_name": "drupal/quick_node_block", "disclosure_at": "2025-06-11", "advisory_at": "2025-05-21", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48054", "ecosystem": "npm", "package_name": "radashi", "disclosure_at": "2025-05-27", "advisory_at": "2025-05-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-48056", "ecosystem": "Go", "package_name": "github.com/cilium/hubble", "disclosure_at": "2025-05-20", "advisory_at": "2025-05-21", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-48058", "ecosystem": "Maven", "package_name": "com.powsybl:powsybl-commons", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48059", "ecosystem": "Maven", "package_name": "com.powsybl:powsybl-iidm-criteria", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-19", "lag_days": -1, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48063", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-security-authorization-bridge", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48067", "ecosystem": "PyPI", "package_name": "octoprint", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48068", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-48069", "ecosystem": "Go", "package_name": "github.com/Shopify/ejson2env/v2", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-48069", "ecosystem": "RubyGems", "package_name": "github.com/Shopify/ejson2env/v2", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-48071", "ecosystem": "PyPI", "package_name": "openexr", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48072", "ecosystem": "PyPI", "package_name": "openexr", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48073", "ecosystem": "PyPI", "package_name": "openexr", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48074", "ecosystem": "PyPI", "package_name": "openexr", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-31", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48075", "ecosystem": "Go", "package_name": "github.com/gofiber/fiber/v2", "disclosure_at": "2025-05-22", "advisory_at": "2025-05-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-48200", "ecosystem": "Packagist", "package_name": "sjbr/sr-feuser-register", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48201", "ecosystem": "Packagist", "package_name": "nitsan/ns-backup", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48202", "ecosystem": "Packagist", "package_name": "in2code/femanager", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48203", "ecosystem": "Packagist", "package_name": "clickstorm/cs-seo", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48204", "ecosystem": "Packagist", "package_name": "nitsan/ns-backup", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48205", "ecosystem": "Packagist", "package_name": "sjbr/sr-feuser-register", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48206", "ecosystem": "Packagist", "package_name": "nitsan/ns-backup", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48207", "ecosystem": "Packagist", "package_name": "renolit/reint-downloadmanager", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48370", "ecosystem": "npm", "package_name": "@supabase/auth-js", "disclosure_at": "2025-05-27", "advisory_at": "2025-05-27", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-48371", "ecosystem": "Go", "package_name": "github.com/openfga/openfga", "disclosure_at": "2025-05-22", "advisory_at": "2025-05-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-48374", "ecosystem": "Go", "package_name": "zotregistry.dev/zot", "disclosure_at": "2025-05-22", "advisory_at": "2025-05-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-48376", "ecosystem": "NuGet", "package_name": "DotNetNuke.SiteExportImport", "disclosure_at": "2025-05-23", "advisory_at": "2025-05-23", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-48377", "ecosystem": "NuGet", "package_name": "DotNetNuke.Web", "disclosure_at": "2025-05-23", "advisory_at": "2025-05-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-48378", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-05-23", "advisory_at": "2025-05-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-48379", "ecosystem": "PyPI", "package_name": "pillow", "disclosure_at": "2025-07-01", "advisory_at": "2025-07-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48382", "ecosystem": "Maven", "package_name": "org.codelibs.fess:fess", "disclosure_at": "2025-05-27", "advisory_at": "2025-05-27", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48383", "ecosystem": "PyPI", "package_name": "django-select2", "disclosure_at": "2025-05-27", "advisory_at": "2025-05-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48387", "ecosystem": "npm", "package_name": "tar-fs", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-03", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-48392", "ecosystem": "Maven", "package_name": "org.apache.iotdb:iotdb-core", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48432", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-06-05", "advisory_at": "2025-06-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48444", "ecosystem": "Packagist", "package_name": "drupal/quick_node_block", "disclosure_at": "2025-06-11", "advisory_at": "2025-05-21", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48445", "ecosystem": "Packagist", "package_name": "drupal/commerce_eurobank_redirect", "disclosure_at": "2025-06-11", "advisory_at": "2025-05-21", "lag_days": -21, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48446", "ecosystem": "Packagist", "package_name": "drupal/commerce_alphabank_redirect", "disclosure_at": "2025-06-11", "advisory_at": "2025-05-21", "lag_days": -21, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48447", "ecosystem": "Packagist", "package_name": "drupal/lightgallery", "disclosure_at": "2025-06-11", "advisory_at": "2025-05-21", "lag_days": -21, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48448", "ecosystem": "Packagist", "package_name": "drupal/admin_audit_trail", "disclosure_at": "2025-06-11", "advisory_at": "2025-05-21", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48459", "ecosystem": "Maven", "package_name": "org.apache.iotdb:iotdb-confignode", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48459", "ecosystem": "PyPI", "package_name": "org.apache.iotdb:iotdb-confignode", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48490", "ecosystem": "Packagist", "package_name": "lomkit/laravel-rest-api", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-27", "lag_days": -3, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48493", "ecosystem": "Packagist", "package_name": "yiisoft/yii2-redis", "disclosure_at": "2025-06-05", "advisory_at": "2025-06-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48494", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-48495", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-48710", "ecosystem": "Go", "package_name": "github.com/kro-run/kro", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-48731", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-48734", "ecosystem": "Maven", "package_name": "commons-beanutils:commons-beanutils", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48751", "ecosystem": "crates.io", "package_name": "process_lock", "disclosure_at": "2025-05-24", "advisory_at": "2025-05-24", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48752", "ecosystem": "crates.io", "package_name": "process-sync", "disclosure_at": "2025-05-24", "advisory_at": "2025-05-24", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48754", "ecosystem": "crates.io", "package_name": "memory_pages", "disclosure_at": "2025-05-24", "advisory_at": "2025-05-24", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48756", "ecosystem": "crates.io", "package_name": "scsir", "disclosure_at": "2025-05-24", "advisory_at": "2025-05-24", "lag_days": 0, "severity": "LOW", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48795", "ecosystem": "Maven", "package_name": "org.apache.cxf:cxf-core", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48865", "ecosystem": "Go", "package_name": "github.com/fabiolb/fabio", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-29", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-48879", "ecosystem": "PyPI", "package_name": "octoprint", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48881", "ecosystem": "Maven", "package_name": "com.ritense.valtimo:objecten-api", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48882", "ecosystem": "Packagist", "package_name": "phpoffice/math", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-29", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48883", "ecosystem": "Packagist", "package_name": "chrome-php/chrome", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48887", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48888", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48889", "ecosystem": "PyPI", "package_name": "gradio", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48912", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48913", "ecosystem": "Maven", "package_name": "org.apache.cxf:cxf-rt-transports-jms", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48914", "ecosystem": "Packagist", "package_name": "drupal/cookies", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48915", "ecosystem": "Packagist", "package_name": "drupal/cookies", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48916", "ecosystem": "Packagist", "package_name": "drupal/bookable_calendar", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48917", "ecosystem": "Packagist", "package_name": "drupal/eu_cookie_compliance", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48918", "ecosystem": "Packagist", "package_name": "drupal/simple_klaro", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48919", "ecosystem": "Packagist", "package_name": "drupal/simple_klaro", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48920", "ecosystem": "Packagist", "package_name": "drupal/etracker", "disclosure_at": "2025-06-13", "advisory_at": "2025-05-28", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48921", "ecosystem": "Packagist", "package_name": "drupal/social", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48922", "ecosystem": "Packagist", "package_name": "drupal/glightbox", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48923", "ecosystem": "Packagist", "package_name": "drupal/toc_js", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48924", "ecosystem": "Maven", "package_name": "org.apache.commons:commons-lang3", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48934", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48935", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-03", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48936", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-48937", "ecosystem": "crates.io", "package_name": "matrix-sdk-crypto", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-48938", "ecosystem": "Go", "package_name": "github.com/cli/go-gh/v2", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-48939", "ecosystem": "npm", "package_name": "tarteaucitronjs", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-48942", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48943", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48944", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-28", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48945", "ecosystem": "PyPI", "package_name": "pycares", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-16", "lag_days": -4, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48947", "ecosystem": "npm", "package_name": "@auth0/nextjs-auth0", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-04", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-48948", "ecosystem": "Go", "package_name": "github.com/navidrome/navidrome", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-29", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-48949", "ecosystem": "Go", "package_name": "github.com/navidrome/navidrome", "disclosure_at": "2025-05-30", "advisory_at": "2025-05-29", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-48951", "ecosystem": "Packagist", "package_name": "auth0/auth0-php", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-04", "lag_days": 1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-48953", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-48955", "ecosystem": "Maven", "package_name": "com.erudika:para-server", "disclosure_at": "2025-06-02", "advisory_at": "2025-05-30", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48956", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48957", "ecosystem": "PyPI", "package_name": "astrbot", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-04", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48976", "ecosystem": "Maven", "package_name": "commons-fileupload:commons-fileupload", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48985", "ecosystem": "npm", "package_name": "ai", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-07", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-48988", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-catalina", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48989", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-coyote", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-48994", "ecosystem": "PyPI", "package_name": "signxml", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-05", "lag_days": 3, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48995", "ecosystem": "PyPI", "package_name": "signxml", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-05", "lag_days": 3, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-48996", "ecosystem": "npm", "package_name": "@haxtheweb/open-apis", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-05", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-48997", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2025-06-03", "advisory_at": "2025-06-05", "lag_days": 2, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-49005", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-49007", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-05", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-49009", "ecosystem": "Maven", "package_name": "com.erudika:para-server", "disclosure_at": "2025-06-05", "advisory_at": "2025-06-06", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49011", "ecosystem": "Go", "package_name": "github.com/authzed/spicedb", "disclosure_at": "2025-06-06", "advisory_at": "2025-06-06", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-49015", "ecosystem": "NuGet", "package_name": "CouchbaseNetClient", "disclosure_at": "2025-06-18", "advisory_at": "2025-06-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-49089", "ecosystem": "PyPI", "package_name": "moneyprinterturbo", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49113", "ecosystem": "Packagist", "package_name": "roundcube/roundcubemail", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49124", "ecosystem": "Maven", "package_name": "org.apache.tomcat.embed:tomcat-embed-core", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49125", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-catalina", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49128", "ecosystem": "Maven", "package_name": "com.fasterxml.jackson.core:jackson-core", "disclosure_at": "2025-06-06", "advisory_at": "2025-06-07", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49130", "ecosystem": "Packagist", "package_name": "barryvdh/laravel-translation-manager", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49132", "ecosystem": "Packagist", "package_name": "pterodactyl/panel", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-19", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49134", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49136", "ecosystem": "Go", "package_name": "github.com/knadh/listmonk", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2025-49137", "ecosystem": "Packagist", "package_name": "elmsln/haxcms", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49138", "ecosystem": "Packagist", "package_name": "elmsln/haxcms", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49139", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-49140", "ecosystem": "Go", "package_name": "github.com/pion/interceptor", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-49141", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-49142", "ecosystem": "PyPI", "package_name": "nautobot", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49143", "ecosystem": "PyPI", "package_name": "nautobot", "disclosure_at": "2025-06-10", "advisory_at": "2025-06-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49146", "ecosystem": "Maven", "package_name": "org.postgresql:postgresql", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49147", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-4922", "ecosystem": "Go", "package_name": "github.com/hashicorp/nomad", "disclosure_at": "2025-06-11", "advisory_at": "2025-06-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-49221", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-49222", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-49223", "ecosystem": "npm", "package_name": "billboard.js", "disclosure_at": "2025-06-04", "advisory_at": "2025-06-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-4949", "ecosystem": "Maven", "package_name": "org.eclipse.jgit:org.eclipse.jgit", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4953", "ecosystem": "Go", "package_name": "github.com/containers/podman/v5", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-49549", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49550", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49554", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49555", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49556", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49557", "ecosystem": "Packagist", "package_name": "magento/community-edition", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49558", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49559", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49574", "ecosystem": "Maven", "package_name": "io.quarkus:quarkus-vertx", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49575", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-11", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49576", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49577", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49578", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49579", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-06-12", "advisory_at": "2025-06-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49580", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-refactoring-default", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49581", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rendering-wikimacro-store", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49582", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rendering-xwiki", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49583", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-notifications-notifiers-default", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49584", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rest-server", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49585", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-security-requiredrights-default", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49586", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-oldcore", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49587", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-notifications-notifiers-default", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49592", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-49594", "ecosystem": "Maven", "package_name": "org.xwiki.contrib.oidc:oidc-authenticator", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-49595", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-49596", "ecosystem": "npm", "package_name": "@modelcontextprotocol/inspector", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-49597", "ecosystem": "Packagist", "package_name": "handcraftedinthealps/goodby-csv", "disclosure_at": "2025-06-13", "advisory_at": "2025-06-13", "lag_days": 0, "severity": "LOW", "cvss_score": 3.899999999999999911182158029987476766109466552734375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-49619", "ecosystem": "PyPI", "package_name": "skyvern", "disclosure_at": "2025-06-07", "advisory_at": "2025-06-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49651", "ecosystem": "PyPI", "package_name": "backend-ai", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49652", "ecosystem": "PyPI", "package_name": "backend-ai", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49653", "ecosystem": "PyPI", "package_name": "backend-ai", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49655", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-49656", "ecosystem": "Maven", "package_name": "org.apache.jena:jena-fuseki", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-4981", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-49810", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-49825", "ecosystem": "Go", "package_name": "github.com/gravitational/teleport", "disclosure_at": "2025-06-17", "advisory_at": "2025-06-16", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-49826", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-50151", "ecosystem": "Maven", "package_name": "org.apache.jena:jena", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-50180", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-50181", "ecosystem": "PyPI", "package_name": "urllib3", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-18", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-50182", "ecosystem": "PyPI", "package_name": "urllib3", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-18", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-50183", "ecosystem": "npm", "package_name": "@openlist-frontend/openlist-frontend", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-18", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-50213", "ecosystem": "PyPI", "package_name": "apache-airflow-providers-snowflake", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5030", "ecosystem": "Go", "package_name": "github.com/Ackites/KillWxapkg", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "LOW", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-5031", "ecosystem": "Go", "package_name": "github.com/Ackites/KillWxapkg", "disclosure_at": "2025-05-21", "advisory_at": "2025-05-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-50383", "ecosystem": "Packagist", "package_name": "alextselegidis/easyappointments", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-50460", "ecosystem": "PyPI", "package_name": "ms-swift", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-31", "lag_days": -1, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-50481", "ecosystem": "PyPI", "package_name": "mezzanine", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-50537", "ecosystem": "npm", "package_name": "eslint", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-50538", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-03", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-50706", "ecosystem": "Packagist", "package_name": "topthink/framework", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-50736", "ecosystem": "PyPI", "package_name": "pdf2zh", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-50738", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-50817", "ecosystem": "PyPI", "package_name": "future", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-50864", "ecosystem": "npm", "package_name": "@elysiajs/cors", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-50946", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-50979", "ecosystem": "npm", "package_name": "nodebb", "disclosure_at": "2025-08-27", "advisory_at": "2025-08-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-5115", "ecosystem": "Maven", "package_name": "org.eclipse.jetty.http2:http2-common", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5120", "ecosystem": "PyPI", "package_name": "smolagents", "disclosure_at": "2025-07-27", "advisory_at": "2025-07-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51464", "ecosystem": "PyPI", "package_name": "aim", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51471", "ecosystem": "Go", "package_name": "github.com/ollama/ollama", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-51471", "ecosystem": "PyPI", "package_name": "ollama", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5148", "ecosystem": "PyPI", "package_name": "inspiremusic", "disclosure_at": "2025-05-25", "advisory_at": "2025-05-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51481", "ecosystem": "PyPI", "package_name": "dagster", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51487", "ecosystem": "Packagist", "package_name": "moonshine/moonshine", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51488", "ecosystem": "Packagist", "package_name": "moonshine/moonshine", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51489", "ecosystem": "Packagist", "package_name": "moonshine/moonshine", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-5150", "ecosystem": "PyPI", "package_name": "docarray", "disclosure_at": "2025-05-25", "advisory_at": "2025-05-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51501", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51502", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51503", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51504", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51510", "ecosystem": "Packagist", "package_name": "moonshine/moonshine", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51511", "ecosystem": "Packagist", "package_name": "cadmium-org/cadmium-cms", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51586", "ecosystem": "Packagist", "package_name": "prestashop/prestashop", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-04", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-51606", "ecosystem": "Maven", "package_name": "cn.hippo4j:hippo4j-core", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5165", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5166", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51667", "ecosystem": "Go", "package_name": "github.com/suyuan32/simple-admin-core", "disclosure_at": "2025-08-27", "advisory_at": "2025-08-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "Go" }, { "cve_id": "CVE-2025-5167", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5168", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5169", "ecosystem": "PyPI", "package_name": "pyassimp", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5173", "ecosystem": "PyPI", "package_name": "label-studio-ml", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5174", "ecosystem": "PyPI", "package_name": "pypickle", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5175", "ecosystem": "PyPI", "package_name": "pypickle", "disclosure_at": "2025-05-26", "advisory_at": "2025-05-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-51825", "ecosystem": "Maven", "package_name": "org.jeecgframework.boot:jeecg-boot-base-core", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5187", "ecosystem": "Go", "package_name": "k8s.io/kubernetes", "disclosure_at": "2025-08-27", "advisory_at": "2025-08-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-5197", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-52122", "ecosystem": "Packagist", "package_name": "solspace/craft-freeform", "disclosure_at": "2025-08-27", "advisory_at": "2025-08-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52277", "ecosystem": "Packagist", "package_name": "yeswiki/yeswiki", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52353", "ecosystem": "Packagist", "package_name": "badaso/core", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52392", "ecosystem": "Packagist", "package_name": "soosyze/soosyze", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52434", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-coyote", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-52472", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rest-server", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-52477", "ecosystem": "Go", "package_name": "github.com/octo-sts/app", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-52478", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-52484", "ecosystem": "crates.io", "package_name": "risc0-zkvm", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-20", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-52485", "ecosystem": "NuGet", "package_name": "DNN.PLATFORM", "disclosure_at": "2025-06-21", "advisory_at": "2025-06-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-52486", "ecosystem": "NuGet", "package_name": "DNN.PLATFORM", "disclosure_at": "2025-06-21", "advisory_at": "2025-06-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-52487", "ecosystem": "NuGet", "package_name": "DNN.PLATFORM", "disclosure_at": "2025-06-21", "advisory_at": "2025-06-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-52488", "ecosystem": "NuGet", "package_name": "DNN.PLATFORM", "disclosure_at": "2025-06-21", "advisory_at": "2025-06-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-52490", "ecosystem": "Go", "package_name": "github.com/couchbase/sync_gateway", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-52490", "ecosystem": "PyPI", "package_name": "couchbase", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-52520", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-catalina", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-52554", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-52556", "ecosystem": "PyPI", "package_name": "rfc3161-client", "disclosure_at": "2025-06-21", "advisory_at": "2025-06-20", "lag_days": -1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-52558", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5256", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52565", "ecosystem": "Go", "package_name": "github.com/opencontainers/runc", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-5257", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-05-28", "advisory_at": "2025-05-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52570", "ecosystem": "crates.io", "package_name": "letmeind", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-52573", "ecosystem": "npm", "package_name": "ios-simulator-mcp", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6, "source_registry": "npm" }, { "cve_id": "CVE-2025-52662", "ecosystem": "npm", "package_name": "@nuxt/devtools", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-5273", "ecosystem": "npm", "package_name": "mcp-markdownify-server", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-5276", "ecosystem": "npm", "package_name": "mcp-markdownify-server", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-5279", "ecosystem": "PyPI", "package_name": "redshift-connector", "disclosure_at": "2025-05-27", "advisory_at": "2025-05-28", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-52881", "ecosystem": "Go", "package_name": "github.com/opencontainers/runc", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-52882", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-23", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-52884", "ecosystem": "crates.io", "package_name": "risc0-ethereum-contracts", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-25", "lag_days": 1, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-52888", "ecosystem": "Maven", "package_name": "io.qameta.allure.plugins:xunit-xml-plugin", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-52889", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "LOW", "cvss_score": 3.399999999999999911182158029987476766109466552734375, "source_registry": "Go" }, { "cve_id": "CVE-2025-52890", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-52893", "ecosystem": "Go", "package_name": "github.com/openbao/openbao/sdk/v2", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-52894", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-52900", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-52901", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-52902", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-52903", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-52904", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-30", "lag_days": 4, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-52926", "ecosystem": "crates.io", "package_name": "spytrap-adb", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-52931", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-52967", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-52994", "ecosystem": "Packagist", "package_name": "james-heinrich/phpthumb", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-52995", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-52996", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-52997", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-06-30", "advisory_at": "2025-06-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-52999", "ecosystem": "Maven", "package_name": "com.fasterxml.jackson.core:jackson-core", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-27", "lag_days": 2, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53000", "ecosystem": "PyPI", "package_name": "nbconvert", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53002", "ecosystem": "PyPI", "package_name": "llamafactory", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53003", "ecosystem": "Maven", "package_name": "io.jans:jans-config-api-server", "disclosure_at": "2025-07-01", "advisory_at": "2025-06-30", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53009", "ecosystem": "PyPI", "package_name": "materialx", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-31", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53010", "ecosystem": "PyPI", "package_name": "materialx", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-31", "lag_days": -1, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53011", "ecosystem": "PyPI", "package_name": "materialx", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-31", "lag_days": -1, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53012", "ecosystem": "PyPI", "package_name": "materialx", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-31", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53014", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-07-14", "advisory_at": "2025-08-25", "lag_days": 42, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-53015", "ecosystem": "NuGet", "package_name": "Magick.NET-Q8-AnyCPU", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-23", "lag_days": 9, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-53019", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-07-14", "advisory_at": "2025-08-25", "lag_days": 42, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-5302", "ecosystem": "PyPI", "package_name": "llama-index-core", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53021", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53092", "ecosystem": "npm", "package_name": "@strapi/core", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53093", "ecosystem": "Packagist", "package_name": "starcitizentools/tabber-neue", "disclosure_at": "2025-06-27", "advisory_at": "2025-06-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53101", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-07-14", "advisory_at": "2025-08-25", "lag_days": 42, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-53103", "ecosystem": "Maven", "package_name": "org.junit.platform:junit-platform-reporting", "disclosure_at": "2025-07-01", "advisory_at": "2025-07-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53106", "ecosystem": "Maven", "package_name": "org.graylog2:graylog2-server", "disclosure_at": "2025-07-02", "advisory_at": "2025-06-30", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53107", "ecosystem": "npm", "package_name": "@cyanheads/git-mcp-server", "disclosure_at": "2025-07-01", "advisory_at": "2025-06-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53109", "ecosystem": "npm", "package_name": "@modelcontextprotocol/server-filesystem", "disclosure_at": "2025-07-02", "advisory_at": "2025-07-01", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-53110", "ecosystem": "npm", "package_name": "@modelcontextprotocol/server-filesystem", "disclosure_at": "2025-07-02", "advisory_at": "2025-07-01", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-5320", "ecosystem": "PyPI", "package_name": "gradio", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-29", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5321", "ecosystem": "PyPI", "package_name": "aim", "disclosure_at": "2025-05-29", "advisory_at": "2025-05-29", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53354", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2025-10-03", "advisory_at": "2025-10-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53355", "ecosystem": "npm", "package_name": "mcp-server-kubernetes", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53359", "ecosystem": "crates.io", "package_name": "ethereum", "disclosure_at": "2025-07-02", "advisory_at": "2025-07-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-53363", "ecosystem": "Go", "package_name": "github.com/donknap/dpanel", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-53364", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-53365", "ecosystem": "PyPI", "package_name": "mcp", "disclosure_at": "2025-07-04", "advisory_at": "2025-07-04", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53366", "ecosystem": "PyPI", "package_name": "mcp", "disclosure_at": "2025-07-04", "advisory_at": "2025-07-04", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53368", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53369", "ecosystem": "Packagist", "package_name": "starcitizentools/short-description", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53370", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-07-03", "advisory_at": "2025-07-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53372", "ecosystem": "npm", "package_name": "node-code-sandbox-mcp", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53393", "ecosystem": "Maven", "package_name": "com.typesafe.akka:akka-cluster-metrics_3", "disclosure_at": "2025-06-28", "advisory_at": "2025-06-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53506", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-coyote", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53512", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-09", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-53513", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-09", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-53514", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-53528", "ecosystem": "PyPI", "package_name": "cadwyn", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53534", "ecosystem": "Go", "package_name": "github.com/tnborg/panel", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-53535", "ecosystem": "npm", "package_name": "better-auth", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-53539", "ecosystem": "PyPI", "package_name": "fastapi-guard", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53547", "ecosystem": "Go", "package_name": "helm.sh/helm/v3", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-53548", "ecosystem": "npm", "package_name": "@clerk/backend", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53549", "ecosystem": "crates.io", "package_name": "matrix-sdk", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-53602", "ecosystem": "Maven", "package_name": "io.zipkin:zipkin-server", "disclosure_at": "2025-07-04", "advisory_at": "2025-07-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53604", "ecosystem": "crates.io", "package_name": "web-push", "disclosure_at": "2025-07-05", "advisory_at": "2025-07-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-53606", "ecosystem": "Maven", "package_name": "org.apache.seata:seata-serializer-fury", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53620", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-53621", "ecosystem": "Maven", "package_name": "org.dspace:dspace-api", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53622", "ecosystem": "Maven", "package_name": "org.dspace:dspace-api", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53623", "ecosystem": "RubyGems", "package_name": "job-iteration", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-53624", "ecosystem": "npm", "package_name": "docusaurus-plugin-content-gists", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2025-53625", "ecosystem": "Packagist", "package_name": "universal-omega/dynamic-page-list3", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53626", "ecosystem": "npm", "package_name": "@pdfme/common", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-53632", "ecosystem": "Go", "package_name": "github.com/ctfer-io/chall-manager", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-53633", "ecosystem": "Go", "package_name": "github.com/ctfer-io/chall-manager", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-53634", "ecosystem": "Go", "package_name": "github.com/ctfer-io/chall-manager", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-53640", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53643", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53650", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:credentials-binding", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53651", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:htmlpublisher", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53652", "ecosystem": "Maven", "package_name": "org.jenkins-ci.tools:git-parameter", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53653", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:aqua-security-scanner", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53654", "ecosystem": "Maven", "package_name": "org.jenkins.plugins.statistics.gatherer:statistics-gatherer", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53655", "ecosystem": "Maven", "package_name": "org.jenkins.plugins.statistics.gatherer:statistics-gatherer", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53656", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:soapui-pro-functional-testing", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53657", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:soapui-pro-functional-testing", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53658", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:applitools-eyes", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53659", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:qmetry-test-management", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53660", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:qmetry-test-management", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53661", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:testsigma", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53662", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:ifttt-build-notifier", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53663", "ecosystem": "Maven", "package_name": "com.ibm.devops:ibm-cloud-devops", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53664", "ecosystem": "Maven", "package_name": "com.apica:ApicaLoadtest", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53665", "ecosystem": "Maven", "package_name": "com.apica:ApicaLoadtest", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53666", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:deadmanssnitch", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53667", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:deadmanssnitch", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53668", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:vaddy-plugin", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53669", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:vaddy-plugin", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53670", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:nouvola-divecloud", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53671", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:nouvola-divecloud", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53672", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:kryptowire", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53673", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:sensedia-api-platform", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53674", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:sensedia-api-platform", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53675", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:warrior", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53676", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:xooa", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53677", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:xooa", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53678", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:user1st-utester", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53689", "ecosystem": "Maven", "package_name": "org.apache.jackrabbit:jackrabbit-spi-commons", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53742", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:applitools-eyes", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53743", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:applitools-eyes", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53818", "ecosystem": "npm", "package_name": "@sunwood-ai-labs/github-kanban-mcp-server", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-15", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-53826", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-16", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-53832", "ecosystem": "npm", "package_name": "@translated/lara-mcp", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53833", "ecosystem": "Packagist", "package_name": "binarytorch/larecipe", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-53835", "ecosystem": "Maven", "package_name": "org.xwiki.rendering:xwiki-rendering-syntax-xhtml", "disclosure_at": "2025-07-14", "advisory_at": "2025-07-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53836", "ecosystem": "Maven", "package_name": "org.xwiki.rendering:xwiki-rendering-transformation-macro", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-14", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53857", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-53864", "ecosystem": "Maven", "package_name": "com.nimbusds:nimbus-jose-jwt", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53865", "ecosystem": "PyPI", "package_name": "roundup", "disclosure_at": "2025-07-13", "advisory_at": "2025-07-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53884", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2025-09-17", "advisory_at": "2025-08-28", "lag_days": -20, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-53885", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-53886", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53887", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-53889", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-53890", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-53892", "ecosystem": "npm", "package_name": "vue-i18n", "disclosure_at": "2025-07-16", "advisory_at": "2025-07-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-53893", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-16", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-53901", "ecosystem": "crates.io", "package_name": "wasmtime-wasi", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-53910", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "Go" }, { "cve_id": "CVE-2025-53942", "ecosystem": "Go", "package_name": "goauthentik.io", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-22", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-53945", "ecosystem": "Go", "package_name": "chainguard.dev/apko", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "Go" }, { "cve_id": "CVE-2025-53960", "ecosystem": "Maven", "package_name": "org.apache.streampark:streampark", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-53967", "ecosystem": "npm", "package_name": "figma-developer-mcp", "disclosure_at": "2025-10-08", "advisory_at": "2025-09-30", "lag_days": -8, "severity": "HIGH", "cvss_score": 8, "source_registry": "npm" }, { "cve_id": "CVE-2025-53971", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54057", "ecosystem": "Maven", "package_name": "org.apache.skywalking:apm-webapp", "disclosure_at": "2025-11-27", "advisory_at": "2025-11-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54059", "ecosystem": "Go", "package_name": "chainguard.dev/melange", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-54066", "ecosystem": "npm", "package_name": "@dirac-grid/diracx-web-components", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54068", "ecosystem": "Packagist", "package_name": "livewire/livewire", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54070", "ecosystem": "npm", "package_name": "@openzeppelin/contracts", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54073", "ecosystem": "npm", "package_name": "mcp-package-docs", "disclosure_at": "2025-07-18", "advisory_at": "2025-08-05", "lag_days": 18, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54075", "ecosystem": "npm", "package_name": "@nuxtjs/mdc", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-20", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54080", "ecosystem": "PyPI", "package_name": "exiv2", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54082", "ecosystem": "Packagist", "package_name": "marshmallow/nova-tiptap", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54119", "ecosystem": "Packagist", "package_name": "adodb/adodb-php", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54121", "ecosystem": "PyPI", "package_name": "starlette", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54123", "ecosystem": "Go", "package_name": "github.com/SpectoLabs/hoverfly", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54124", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-oldcore", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54125", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-oldcore", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54127", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54128", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-54134", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54137", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-54138", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54139", "ecosystem": "Packagist", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-21", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54139", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-21", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-54140", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5420", "ecosystem": "Packagist", "package_name": "juzaweb/cms", "disclosure_at": "2025-06-02", "advisory_at": "2025-06-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54236", "ecosystem": "Packagist", "package_name": "magento/community-edition", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54263", "ecosystem": "Packagist", "package_name": "magento/community-edition", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54264", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54265", "ecosystem": "Packagist", "package_name": "magento/community-edition", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54266", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54267", "ecosystem": "Packagist", "package_name": "magento/project-community-edition", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54286", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54287", "ecosystem": "Go", "package_name": "github.com/lxc/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54288", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54289", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-54290", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54291", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54293", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54313", "ecosystem": "npm", "package_name": "eslint-config-prettier", "disclosure_at": "2025-07-19", "advisory_at": "2025-07-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54314", "ecosystem": "RubyGems", "package_name": "thor", "disclosure_at": "2025-07-20", "advisory_at": "2025-07-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 2.79999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-54363", "ecosystem": "PyPI", "package_name": "knack", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54364", "ecosystem": "PyPI", "package_name": "knack", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54365", "ecosystem": "PyPI", "package_name": "fastapi-guard", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54368", "ecosystem": "PyPI", "package_name": "uv", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-07", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54369", "ecosystem": "npm", "package_name": "node-saml", "disclosure_at": "2025-07-24", "advisory_at": "2025-07-25", "lag_days": 1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54370", "ecosystem": "Packagist", "package_name": "phpoffice/phpspreadsheet", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54371", "ecosystem": "npm", "package_name": "axios", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54376", "ecosystem": "Go", "package_name": "github.com/SpectoLabs/hoverfly", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54378", "ecosystem": "Packagist", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-26", "advisory_at": "2025-07-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54378", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2025-07-26", "advisory_at": "2025-07-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54379", "ecosystem": "Go", "package_name": "github.com/lf-edge/ekuiper/v2", "disclosure_at": "2025-07-24", "advisory_at": "2025-07-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54379", "ecosystem": "PyPI", "package_name": "ekuiper", "disclosure_at": "2025-07-24", "advisory_at": "2025-07-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54380", "ecosystem": "Maven", "package_name": "org.opencastproject:opencast-common", "disclosure_at": "2025-07-26", "advisory_at": "2025-07-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54381", "ecosystem": "PyPI", "package_name": "bentoml", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54384", "ecosystem": "PyPI", "package_name": "ckan", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54385", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-oldcore", "disclosure_at": "2025-07-26", "advisory_at": "2025-07-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54386", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v2", "disclosure_at": "2025-08-02", "advisory_at": "2025-08-01", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54387", "ecosystem": "npm", "package_name": "ipx", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54388", "ecosystem": "Go", "package_name": "github.com/docker/docker", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-54410", "ecosystem": "Go", "package_name": "github.com/docker/docker", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-29", "lag_days": -1, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54412", "ecosystem": "PyPI", "package_name": "skops", "disclosure_at": "2025-07-26", "advisory_at": "2025-07-25", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54413", "ecosystem": "PyPI", "package_name": "skops", "disclosure_at": "2025-07-26", "advisory_at": "2025-07-25", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54417", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54418", "ecosystem": "Packagist", "package_name": "codeigniter4/framework", "disclosure_at": "2025-07-28", "advisory_at": "2025-07-28", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54419", "ecosystem": "npm", "package_name": "@node-saml/node-saml", "disclosure_at": "2025-07-28", "advisory_at": "2025-07-28", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2025-54423", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2025-07-28", "advisory_at": "2025-07-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54424", "ecosystem": "Go", "package_name": "github.com/1Panel-dev/1Panel/core", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-54425", "ecosystem": "NuGet", "package_name": "Umbraco.Cms.Api.Delivery", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-54433", "ecosystem": "PyPI", "package_name": "bugsink", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-29", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54458", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54463", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-54467", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2025-09-17", "advisory_at": "2025-08-28", "lag_days": -20, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54468", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2025-10-02", "advisory_at": "2025-09-26", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54469", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-21", "lag_days": -9, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-54470", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-21", "lag_days": -9, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-54471", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-21", "lag_days": -9, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54476", "ecosystem": "Packagist", "package_name": "joomla/filter", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54478", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54499", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-54525", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54539", "ecosystem": "NuGet", "package_name": "Apache.NMS.AMQP", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-54572", "ecosystem": "RubyGems", "package_name": "ruby-saml", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-54575", "ecosystem": "NuGet", "package_name": "SixLabors.ImageSharp", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-54576", "ecosystem": "Go", "package_name": "github.com/oauth2-proxy/oauth2-proxy/v7", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-54581", "ecosystem": "crates.io", "package_name": "vproxy", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-54583", "ecosystem": "npm", "package_name": "@finos/git-proxy", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54584", "ecosystem": "npm", "package_name": "@finos/git-proxy", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54585", "ecosystem": "npm", "package_name": "@finos/git-proxy", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54586", "ecosystem": "npm", "package_name": "@finos/git-proxy", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-54588", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-15", "lag_days": 12, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54589", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2025-07-31", "advisory_at": "2025-07-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54590", "ecosystem": "npm", "package_name": "webfinger.js", "disclosure_at": "2025-08-01", "advisory_at": "2025-07-28", "lag_days": -4, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54656", "ecosystem": "Maven", "package_name": "org.apache.struts:struts-extras", "disclosure_at": "2025-07-30", "advisory_at": "2025-07-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5472", "ecosystem": "PyPI", "package_name": "llama-index-core", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54782", "ecosystem": "npm", "package_name": "@nestjs/devtools-integration", "disclosure_at": "2025-08-02", "advisory_at": "2025-08-01", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54791", "ecosystem": "PyPI", "package_name": "omero-web", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54793", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-07", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-54794", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-54795", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-54796", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2025-08-02", "advisory_at": "2025-08-04", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54798", "ecosystem": "npm", "package_name": "tmp", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-06", "lag_days": -1, "severity": "LOW", "cvss_score": 2.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54799", "ecosystem": "Go", "package_name": "github.com/go-acme/lego", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-06", "lag_days": -1, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-54801", "ecosystem": "Go", "package_name": "github.com/gofiber/fiber/v2", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-54802", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54803", "ecosystem": "npm", "package_name": "js-toml", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-54804", "ecosystem": "crates.io", "package_name": "russh", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-04", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-54831", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2025-09-26", "advisory_at": "2025-09-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54867", "ecosystem": "crates.io", "package_name": "youki", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-54869", "ecosystem": "Packagist", "package_name": "setasign/fpdi", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-54873", "ecosystem": "crates.io", "package_name": "risc0-zkvm", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-05", "lag_days": -1, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-54880", "ecosystem": "npm", "package_name": "mermaid", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-54881", "ecosystem": "npm", "package_name": "mermaid", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54885", "ecosystem": "npm", "package_name": "thinbus-srp", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54886", "ecosystem": "PyPI", "package_name": "skops", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54887", "ecosystem": "RubyGems", "package_name": "jwe", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-07", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-54888", "ecosystem": "npm", "package_name": "@fedify/fedify", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54920", "ecosystem": "Maven", "package_name": "org.apache.spark:spark-core_2.13", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54941", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54947", "ecosystem": "Maven", "package_name": "org.apache.streampark:streampark", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54949", "ecosystem": "Maven", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54949", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54950", "ecosystem": "Maven", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54950", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54951", "ecosystem": "Maven", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54951", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-08", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54952", "ecosystem": "PyPI", "package_name": "executorch", "disclosure_at": "2025-08-08", "advisory_at": "2025-08-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-54981", "ecosystem": "Maven", "package_name": "org.apache.streampark:streampark", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54988", "ecosystem": "Maven", "package_name": "org.apache.tika:tika-parser-pdf-module", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54990", "ecosystem": "Maven", "package_name": "com.xwiki.admintools:application-admintools", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-54994", "ecosystem": "npm", "package_name": "@akoskm/create-mcp-server-stdio", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-54996", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-54997", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-54998", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-54999", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-55000", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55001", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55003", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-55004", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-25", "lag_days": 12, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55008", "ecosystem": "npm", "package_name": "@workos-inc/authkit-react-router", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-55009", "ecosystem": "npm", "package_name": "@workos-inc/authkit-remix", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-55013", "ecosystem": "PyPI", "package_name": "assemblyline-service-client", "disclosure_at": "2025-08-09", "advisory_at": "2025-07-25", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55037", "ecosystem": "PyPI", "package_name": "tkeasygui", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55039", "ecosystem": "Maven", "package_name": "org.apache.spark:spark-network-common_2.13", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55039", "ecosystem": "PyPI", "package_name": "org.apache.spark:spark-network-common_2.13", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55070", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55073", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-11-14", "advisory_at": "2025-11-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-55074", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "LOW", "cvss_score": 3, "source_registry": "Go" }, { "cve_id": "CVE-2025-55149", "ecosystem": "PyPI", "package_name": "tiny-scientist", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-11", "lag_days": 2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55152", "ecosystem": "npm", "package_name": "@oakserver/oak", "disclosure_at": "2025-08-09", "advisory_at": "2025-08-12", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-55154", "ecosystem": "NuGet", "package_name": "Magick.NET-Q8-x86", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-25", "lag_days": 12, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55155", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2025-11-04", "advisory_at": "2025-11-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55156", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-12", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55159", "ecosystem": "crates.io", "package_name": "slab", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-55160", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-25", "lag_days": 12, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55163", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-http2", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55164", "ecosystem": "npm", "package_name": "content-security-policy-parser", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-55166", "ecosystem": "Packagist", "package_name": "enshrined/svg-sanitize", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55173", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-55178", "ecosystem": "PyPI", "package_name": "llama-stack", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55182", "ecosystem": "npm", "package_name": "react-server-dom-webpack", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2025-55183", "ecosystem": "npm", "package_name": "react-server-dom-parcel", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-55184", "ecosystem": "npm", "package_name": "react-server-dom-parcel", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-55190", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-cd/v2", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-55191", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-cd/v2", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55193", "ecosystem": "RubyGems", "package_name": "activerecord", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-55196", "ecosystem": "Go", "package_name": "github.com/external-secrets/external-secrets", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-55197", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55198", "ecosystem": "Go", "package_name": "helm.sh/helm/v3", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55199", "ecosystem": "Go", "package_name": "helm.sh/helm/v3", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55201", "ecosystem": "PyPI", "package_name": "copier", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55202", "ecosystem": "Maven", "package_name": "org.opencastproject:opencast-user-interface-configuration", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55205", "ecosystem": "Go", "package_name": "github.com/projectcapsule/capsule", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2025-55207", "ecosystem": "npm", "package_name": "@astrojs/node", "disclosure_at": "2025-08-15", "advisory_at": "2025-08-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-55212", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55213", "ecosystem": "Go", "package_name": "github.com/openfga/openfga", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-55214", "ecosystem": "PyPI", "package_name": "copier", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55247", "ecosystem": "NuGet", "package_name": "Microsoft.Build.Tasks.Core", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-15", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55248", "ecosystem": "NuGet", "package_name": "Microsoft.NetCore.App.Runtime.linux-arm", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-15", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55284", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-08-16", "advisory_at": "2025-08-18", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-55285", "ecosystem": "npm", "package_name": "@backstage/plugin-scaffolder-backend", "disclosure_at": "2025-08-15", "advisory_at": "2025-08-15", "lag_days": 0, "severity": "LOW", "cvss_score": 2.600000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2025-55294", "ecosystem": "npm", "package_name": "screenshot-desktop", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-55296", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55298", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55300", "ecosystem": "Go", "package_name": "github.com/komari-monitor/komari", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-12", "lag_days": -6, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-55303", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-55304", "ecosystem": "PyPI", "package_name": "exiv2", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55305", "ecosystem": "npm", "package_name": "electron", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-55315", "ecosystem": "NuGet", "package_name": "Microsoft.AspNetCore.Server.Kestrel.Core", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55346", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-08-14", "advisory_at": "2025-10-06", "lag_days": 53, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-55449", "ecosystem": "PyPI", "package_name": "astrbot", "disclosure_at": null, "advisory_at": "2025-11-14", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55551", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55552", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55553", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55554", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55557", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55558", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55560", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55668", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-catalina", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55671", "ecosystem": "PyPI", "package_name": "tkeasygui", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55672", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55673", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55674", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55675", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-55740", "ecosystem": "Go", "package_name": "github.com/Anipaleja/nginx-defender", "disclosure_at": "2025-08-19", "advisory_at": "2025-08-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-55741", "ecosystem": "Packagist", "package_name": "unopim/unopim", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55742", "ecosystem": "Packagist", "package_name": "unopim/unopim", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55743", "ecosystem": "Packagist", "package_name": "unopim/unopim", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55744", "ecosystem": "Packagist", "package_name": "unopim/unopim", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55745", "ecosystem": "Packagist", "package_name": "unopim/unopim", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "LOW", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-55746", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-55747", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-webjars-api", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55748", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-skin-skinx", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55749", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-tool-jetty-resources", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55752", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55754", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "LOW", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-55797", "ecosystem": "NuGet", "package_name": "FormCMS", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-55988", "ecosystem": "Packagist", "package_name": "dreamfactory/df-core", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-56200", "ecosystem": "npm", "package_name": "validator", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-56236", "ecosystem": "NuGet", "package_name": "FormCMS", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-56265", "ecosystem": "npm", "package_name": "@n8n/n8n-nodes-langchain", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-56316", "ecosystem": "Maven", "package_name": "net.mingsoft:ms-mcms", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-56421", "ecosystem": "Packagist", "package_name": "limesurvey/limesurvey", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-56427", "ecosystem": "PyPI", "package_name": "composio", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-56514", "ecosystem": "npm", "package_name": "fiora", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-56515", "ecosystem": "npm", "package_name": "fiora", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "LOW", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-56556", "ecosystem": "Packagist", "package_name": "intelliants/subrion", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-56571", "ecosystem": "npm", "package_name": "financejs", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-56572", "ecosystem": "npm", "package_name": "financejs", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-56588", "ecosystem": "Packagist", "package_name": "dolibarr/dolibarr", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-56647", "ecosystem": "npm", "package_name": "@farmfe/core", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-56648", "ecosystem": "npm", "package_name": "@parcel/reporter-dev-server", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-56760", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-56761", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-56769", "ecosystem": "Maven", "package_name": "cn.hutool:hutool-extra", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5682", "ecosystem": "Packagist", "package_name": "drupal/klaro", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-5689", "ecosystem": "Go", "package_name": "github.com/ubuntu/authd", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-57106", "ecosystem": "PyPI", "package_name": "vtk", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57107", "ecosystem": "PyPI", "package_name": "vtk", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57108", "ecosystem": "PyPI", "package_name": "vtk", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57164", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-10-17", "advisory_at": "2025-09-15", "lag_days": -32, "severity": "CRITICAL", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57275", "ecosystem": "PyPI", "package_name": "spdk", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57283", "ecosystem": "npm", "package_name": "browserstack-local", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-57285", "ecosystem": "npm", "package_name": "codeceptjs", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-5731", "ecosystem": "Maven", "package_name": "org.infinispan:infinispan-cli-client", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-57317", "ecosystem": "npm", "package_name": "apidoc-core", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57318", "ecosystem": "npm", "package_name": "csvjson", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57319", "ecosystem": "npm", "package_name": "fast-redact", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57320", "ecosystem": "npm", "package_name": "json-schema-editor-visual", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57321", "ecosystem": "npm", "package_name": "magix-combine-ex", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-57323", "ecosystem": "npm", "package_name": "mpregular", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57324", "ecosystem": "npm", "package_name": "parse", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57325", "ecosystem": "npm", "package_name": "rollbar", "disclosure_at": "2025-09-24", "advisory_at": "2025-10-20", "lag_days": 26, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57326", "ecosystem": "npm", "package_name": "sassdoc-extras", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57327", "ecosystem": "npm", "package_name": "spmrc", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57328", "ecosystem": "npm", "package_name": "toggle-array", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57329", "ecosystem": "npm", "package_name": "web3-core-method", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57330", "ecosystem": "npm", "package_name": "web3-core-subscriptions", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57348", "ecosystem": "npm", "package_name": "node-cube", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57349", "ecosystem": "npm", "package_name": "messageformat", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57350", "ecosystem": "npm", "package_name": "csvtojson", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-57351", "ecosystem": "npm", "package_name": "ts-fns", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57352", "ecosystem": "npm", "package_name": "min-document", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-57353", "ecosystem": "npm", "package_name": "@messageformat/runtime", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-57354", "ecosystem": "npm", "package_name": "counterpart", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57407", "ecosystem": "Packagist", "package_name": "s-cart/core", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-57520", "ecosystem": "npm", "package_name": "decap-cms", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-57665", "ecosystem": "npm", "package_name": "element-plus", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-57692", "ecosystem": "NuGet", "package_name": "Piranha", "disclosure_at": "2025-09-26", "advisory_at": "2025-09-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-57697", "ecosystem": "PyPI", "package_name": "astrbot", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57698", "ecosystem": "PyPI", "package_name": "astrbot", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57738", "ecosystem": "Maven", "package_name": "org.apache.syncope.core:syncope-core-spring", "disclosure_at": "2025-10-20", "advisory_at": "2025-10-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-57749", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57751", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57752", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-57753", "ecosystem": "npm", "package_name": "vite-plugin-static-copy", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-57755", "ecosystem": "npm", "package_name": "@musistudio/claude-code-router", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-57756", "ecosystem": "Packagist", "package_name": "contao/core-bundle", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-57757", "ecosystem": "Packagist", "package_name": "contao/core-bundle", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-57758", "ecosystem": "Packagist", "package_name": "contao/core-bundle", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-57759", "ecosystem": "Packagist", "package_name": "contao/core-bundle", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-57760", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57766", "ecosystem": "PyPI", "package_name": "ethyca-fides", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57801", "ecosystem": "Go", "package_name": "github.com/consensys/gnark", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-57803", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-57804", "ecosystem": "PyPI", "package_name": "h2", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57807", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-x64", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-05", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-57808", "ecosystem": "PyPI", "package_name": "esphome", "disclosure_at": "2025-09-02", "advisory_at": "2025-09-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57809", "ecosystem": "PyPI", "package_name": "xgrammar", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57810", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57811", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-57813", "ecosystem": "Go", "package_name": "github.com/traPtitech/traQ", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-57814", "ecosystem": "npm", "package_name": "request-filtering-agent", "disclosure_at": "2025-08-25", "advisory_at": "2025-08-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-57815", "ecosystem": "PyPI", "package_name": "ethyca-fides", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57816", "ecosystem": "PyPI", "package_name": "ethyca-fides", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57817", "ecosystem": "PyPI", "package_name": "ethyca-fides", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-57820", "ecosystem": "npm", "package_name": "devalue", "disclosure_at": "2025-08-26", "advisory_at": "2025-08-26", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-57821", "ecosystem": "RubyGems", "package_name": "google_sign_in", "disclosure_at": "2025-08-27", "advisory_at": "2025-08-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-57822", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-57833", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-5791", "ecosystem": "crates.io", "package_name": "users", "disclosure_at": "2025-06-06", "advisory_at": "2025-06-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-58047", "ecosystem": "npm", "package_name": "@plone/volto", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-58049", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-export-pdf-api", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58050", "ecosystem": "PyPI", "package_name": "pcre2", "disclosure_at": "2025-08-27", "advisory_at": "2025-08-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58056", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-http", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-04", "lag_days": 1, "severity": "LOW", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58057", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-compression", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58058", "ecosystem": "Go", "package_name": "github.com/ulikunitz/xz", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58059", "ecosystem": "Maven", "package_name": "com.ritense.valtimo:core", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5806", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:gatling", "disclosure_at": "2025-06-06", "advisory_at": "2025-06-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58063", "ecosystem": "Go", "package_name": "github.com/coredns/coredns", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-58064", "ecosystem": "npm", "package_name": "ckeditor5", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-03", "lag_days": -1, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-58065", "ecosystem": "PyPI", "package_name": "flask-appbuilder", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58066", "ecosystem": "crates.io", "package_name": "ntpd-rs", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-58067", "ecosystem": "RubyGems", "package_name": "google_sign_in", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-58068", "ecosystem": "PyPI", "package_name": "eventlet", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58073", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-58075", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-58157", "ecosystem": "Go", "package_name": "github.com/consensys/gnark", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-58158", "ecosystem": "Go", "package_name": "github.com/harness/gitness", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-58160", "ecosystem": "crates.io", "package_name": "tracing-subscriber", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-58161", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": "2025-09-02", "advisory_at": "2025-09-02", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58162", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": "2025-09-02", "advisory_at": "2025-09-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58177", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-58179", "ecosystem": "npm", "package_name": "@astrojs/cloudflare", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-58180", "ecosystem": "PyPI", "package_name": "octoprint", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58181", "ecosystem": "Go", "package_name": "golang.org/x/crypto", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58183", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58185", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58186", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58187", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-58188", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-58189", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58190", "ecosystem": "Go", "package_name": "golang.org/x/net", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-58337", "ecosystem": "PyPI", "package_name": "doris-mcp-server", "disclosure_at": "2025-11-05", "advisory_at": "2025-11-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58352", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-04", "lag_days": -1, "severity": "LOW", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58355", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-02", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-58356", "ecosystem": "Go", "package_name": "github.com/edgelesssys/constellation/v2", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-58358", "ecosystem": "npm", "package_name": "mcp-markdownify-server", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-02", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-58359", "ecosystem": "crates.io", "package_name": "frost-core", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-03", "lag_days": -2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-58360", "ecosystem": "Maven", "package_name": "org.geoserver.web:gs-web-app", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58362", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-03", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-58365", "ecosystem": "Maven", "package_name": "org.xwiki.contrib.blog:application-blog-ui", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58367", "ecosystem": "PyPI", "package_name": "deepdiff", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-03", "lag_days": -2, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58369", "ecosystem": "Maven", "package_name": "co.fs2:fs2-io_2.12", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58430", "ecosystem": "Go", "package_name": "github.com/knadh/listmonk", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-58434", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-58437", "ecosystem": "Go", "package_name": "github.com/coder/coder/v2", "disclosure_at": "2025-09-06", "advisory_at": "2025-09-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-58438", "ecosystem": "PyPI", "package_name": "internetarchive", "disclosure_at": "2025-09-06", "advisory_at": "2025-09-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58444", "ecosystem": "npm", "package_name": "@modelcontextprotocol/inspector", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-58445", "ecosystem": "Go", "package_name": "github.com/runatlantis/atlantis", "disclosure_at": "2025-09-06", "advisory_at": "2025-09-05", "lag_days": -1, "severity": "LOW", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-58446", "ecosystem": "PyPI", "package_name": "xgrammar", "disclosure_at": "2025-09-06", "advisory_at": "2025-09-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58449", "ecosystem": "Packagist", "package_name": "mahocommerce/maho", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-09", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-58450", "ecosystem": "Go", "package_name": "github.com/prest/prest/v2", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-58451", "ecosystem": "npm", "package_name": "cattown", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-09", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-58457", "ecosystem": "Maven", "package_name": "org.apache.zookeeper:zookeeper", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58458", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:git-client", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58459", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:global-build-stats", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58460", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:opentelemetry", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-58751", "ecosystem": "npm", "package_name": "vite", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-09", "lag_days": 1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-58752", "ecosystem": "npm", "package_name": "vite", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-09", "lag_days": 1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-58753", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58754", "ecosystem": "npm", "package_name": "axios", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-11", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-58755", "ecosystem": "PyPI", "package_name": "monai", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58756", "ecosystem": "PyPI", "package_name": "monai", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58757", "ecosystem": "PyPI", "package_name": "monai", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-58758", "ecosystem": "Packagist", "package_name": "datahihi1/tiny-env", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-58759", "ecosystem": "Packagist", "package_name": "datahihi1/tiny-env", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-58764", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-58765", "ecosystem": "npm", "package_name": "@webrecorder/wabac", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-10", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-58767", "ecosystem": "RubyGems", "package_name": "rexml", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-58769", "ecosystem": "Packagist", "package_name": "auth0/auth0-php", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-58782", "ecosystem": "Maven", "package_name": "org.apache.jackrabbit:jackrabbit-core", "disclosure_at": "2025-09-08", "advisory_at": "2025-09-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-5889", "ecosystem": "npm", "package_name": "brace-expansion", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2025-5891", "ecosystem": "npm", "package_name": "pm2", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-5896", "ecosystem": "npm", "package_name": "taro-css-to-react-native", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-5897", "ecosystem": "npm", "package_name": "@vue/cli-plugin-pwa", "disclosure_at": "2025-06-09", "advisory_at": "2025-06-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59013", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59014", "ecosystem": "Packagist", "package_name": "typo3/cms-backend", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59015", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59016", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59017", "ecosystem": "Packagist", "package_name": "typo3/cms-workspaces", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59018", "ecosystem": "Packagist", "package_name": "typo3/cms-workspaces", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59019", "ecosystem": "Packagist", "package_name": "typo3/cms-backend", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59020", "ecosystem": "Packagist", "package_name": "typo3/cms-backend", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59021", "ecosystem": "Packagist", "package_name": "typo3/cms-redirects", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59022", "ecosystem": "Packagist", "package_name": "typo3/cms-recycler", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59034", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59035", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59036", "ecosystem": "PyPI", "package_name": "infrahub-server", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59037", "ecosystem": "npm", "package_name": "duckdb", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59038", "ecosystem": "npm", "package_name": "prebid.js", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-09", "lag_days": 0, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59039", "ecosystem": "npm", "package_name": "prebid-universal-creative", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-11", "lag_days": 2, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59041", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59042", "ecosystem": "PyPI", "package_name": "pyinstaller", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-10", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59043", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59046", "ecosystem": "npm", "package_name": "interactive-git-checkout", "disclosure_at": "2025-09-09", "advisory_at": "2025-09-10", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59047", "ecosystem": "crates.io", "package_name": "matrix-sdk-base", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-59048", "ecosystem": "Go", "package_name": "github.com/openbao/openbao-plugins", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-59052", "ecosystem": "npm", "package_name": "@angular/platform-server", "disclosure_at": "2025-09-10", "advisory_at": "2025-09-10", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59057", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-59058", "ecosystem": "crates.io", "package_name": "httpsig", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-59059", "ecosystem": "Maven", "package_name": "org.apache.ranger:ranger-plugins-common", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59060", "ecosystem": "Maven", "package_name": "org.apache.ranger:ranger-nifi-registry-plugin", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59139", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59140", "ecosystem": "npm", "package_name": "backslash", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59141", "ecosystem": "npm", "package_name": "simple-swizzle", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59142", "ecosystem": "npm", "package_name": "color-string", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59143", "ecosystem": "npm", "package_name": "color", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59144", "ecosystem": "npm", "package_name": "debug", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59145", "ecosystem": "npm", "package_name": "color-name", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59152", "ecosystem": "PyPI", "package_name": "litestar", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59154", "ecosystem": "Maven", "package_name": "org.igniterealtime.openfire:xmppserver", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-16", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59155", "ecosystem": "npm", "package_name": "hackmd-mcp", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59159", "ecosystem": "npm", "package_name": "sillytavern", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-59160", "ecosystem": "npm", "package_name": "matrix-js-sdk", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59162", "ecosystem": "npm", "package_name": "color-convert", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59163", "ecosystem": "Go", "package_name": "github.com/safedep/vet", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-29", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-59250", "ecosystem": "Maven", "package_name": "com.microsoft.sqlserver:mssql-jdbc", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59288", "ecosystem": "npm", "package_name": "playwright", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59328", "ecosystem": "Maven", "package_name": "org.apache.fory:fory-core", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59330", "ecosystem": "npm", "package_name": "error-ex", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59331", "ecosystem": "npm", "package_name": "is-arrayish", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-08", "lag_days": -7, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59333", "ecosystem": "npm", "package_name": "@executeautomation/database-server", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-59340", "ecosystem": "Maven", "package_name": "com.hubspot.jinjava:jinjava", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59341", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-59342", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-59343", "ecosystem": "npm", "package_name": "tar-fs", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59345", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-59346", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-59347", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59348", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59349", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-59350", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-59351", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-59352", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-59353", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59354", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-59355", "ecosystem": "Maven", "package_name": "org.apache.linkis:linkis-metadata", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59358", "ecosystem": "Go", "package_name": "github.com/chaos-mesh/chaos-mesh", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59359", "ecosystem": "Go", "package_name": "github.com/chaos-mesh/chaos-mesh", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-59360", "ecosystem": "Go", "package_name": "github.com/chaos-mesh/chaos-mesh", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-59361", "ecosystem": "Go", "package_name": "github.com/chaos-mesh/chaos-mesh", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-59364", "ecosystem": "npm", "package_name": "express-xss-sanitizer", "disclosure_at": "2025-09-14", "advisory_at": "2025-09-26", "lag_days": 12, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59376", "ecosystem": "PyPI", "package_name": "mcp-kubernetes-server", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59377", "ecosystem": "PyPI", "package_name": "mcp-kubernetes-server", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59390", "ecosystem": "Maven", "package_name": "org.apache.druid:druid", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59397", "ecosystem": "Packagist", "package_name": "open-web-analytics/open-web-analytics", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59410", "ecosystem": "Go", "package_name": "github.com/dragonflyoss/dragonfly", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-59414", "ecosystem": "npm", "package_name": "nuxt", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2025-59417", "ecosystem": "npm", "package_name": "@lobehub/chat", "disclosure_at": "2025-09-18", "advisory_at": "2025-09-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-59419", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-smtp", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59420", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59425", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59426", "ecosystem": "npm", "package_name": "@lobehub/chat", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59427", "ecosystem": "npm", "package_name": "@cloudflare/vite-plugin", "disclosure_at": "2025-09-19", "advisory_at": "2025-07-08", "lag_days": -73, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59430", "ecosystem": "npm", "package_name": "@meshconnect/web-link-sdk", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59432", "ecosystem": "Maven", "package_name": "com.ongres.scram:scram-common", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-16", "lag_days": -6, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59433", "ecosystem": "npm", "package_name": "@conventional-changelog/git-client", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59471", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-59472", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-28", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-59474", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59475", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59476", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59526", "ecosystem": "npm", "package_name": "mailgen", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59527", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-15", "lag_days": -7, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-59528", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-15", "lag_days": -7, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2025-59530", "ecosystem": "Go", "package_name": "github.com/quic-go/quic-go", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59531", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-cd", "disclosure_at": "2025-10-01", "advisory_at": "2025-09-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59532", "ecosystem": "npm", "package_name": "@openai/codex", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-19", "lag_days": -3, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-59535", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-09-22", "advisory_at": "2025-09-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-59536", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-10-03", "advisory_at": "2025-10-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59537", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-cd", "disclosure_at": "2025-10-01", "advisory_at": "2025-09-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59538", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-cd/v2", "disclosure_at": "2025-10-01", "advisory_at": "2025-09-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59539", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-22", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-59545", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-59546", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "LOW", "cvss_score": 2.399999999999999911182158029987476766109466552734375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-59681", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59682", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59712", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59713", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59717", "ecosystem": "npm", "package_name": "@digitalocean/do-markdownit", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-5981", "ecosystem": "Go", "package_name": "github.com/google/osv-scalibr", "disclosure_at": "2025-06-18", "advisory_at": "2025-06-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59821", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-59822", "ecosystem": "Maven", "package_name": "org.http4s:http4s-ember-core_2.12", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59823", "ecosystem": "Go", "package_name": "github.com/gardener/gardener-extension-provider-aws", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-59824", "ecosystem": "Go", "package_name": "github.com/siderolabs/omni", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-59825", "ecosystem": "crates.io", "package_name": "astral-tokio-tar", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-59828", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59829", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-10-03", "advisory_at": "2025-10-03", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-59830", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-59831", "ecosystem": "npm", "package_name": "git-commiters", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-22", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59834", "ecosystem": "npm", "package_name": "adb-mcp", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-24", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59836", "ecosystem": "Go", "package_name": "github.com/siderolabs/omni", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-59837", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-59839", "ecosystem": "Packagist", "package_name": "starcitizenwiki/embedvideo", "disclosure_at": "2025-09-25", "advisory_at": "2025-09-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59840", "ecosystem": "npm", "package_name": "vega", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-59842", "ecosystem": "PyPI", "package_name": "jupyterlab", "disclosure_at": "2025-09-26", "advisory_at": "2025-09-26", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59845", "ecosystem": "npm", "package_name": "@apollo/sandbox", "disclosure_at": "2025-09-26", "advisory_at": "2025-09-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-59936", "ecosystem": "npm", "package_name": "get-jwks", "disclosure_at": "2025-09-27", "advisory_at": "2025-09-26", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-59937", "ecosystem": "Go", "package_name": "github.com/wneessen/go-mail", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-59940", "ecosystem": "PyPI", "package_name": "mkdocs-include-markdown-plugin", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-59941", "ecosystem": "Go", "package_name": "github.com/filecoin-project/go-f3", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-59942", "ecosystem": "Go", "package_name": "github.com/filecoin-project/go-f3", "disclosure_at": "2025-09-29", "advisory_at": "2025-09-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-59943", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": "2025-10-03", "advisory_at": "2025-10-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-59952", "ecosystem": "Maven", "package_name": "io.minio:minio", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-29", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-59956", "ecosystem": "Go", "package_name": "github.com/coder/agentapi", "disclosure_at": "2025-09-30", "advisory_at": "2025-09-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-5999", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-6000", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-60012", "ecosystem": "Maven", "package_name": "org.apache.livy:livy-server", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6004", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-6011", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-6013", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-6014", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-6015", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-6023", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-6032", "ecosystem": "Go", "package_name": "github.com/containers/podman/v4", "disclosure_at": "2025-06-24", "advisory_at": "2025-06-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-6037", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-01", "advisory_at": "2025-08-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-60455", "ecosystem": "PyPI", "package_name": "modular", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6050", "ecosystem": "PyPI", "package_name": "mezzanine", "disclosure_at": "2025-06-17", "advisory_at": "2025-06-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6051", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-09-14", "advisory_at": "2025-09-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-60538", "ecosystem": "Go", "package_name": "github.com/go-shiori/shiori", "disclosure_at": "2026-01-09", "advisory_at": "2026-01-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-60542", "ecosystem": "npm", "package_name": "typeorm", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-60632", "ecosystem": "Go", "package_name": "github.com/free5gc/pcf", "disclosure_at": "2025-11-24", "advisory_at": "2025-11-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-60633", "ecosystem": "Go", "package_name": "github.com/free5gc/udm", "disclosure_at": "2025-11-24", "advisory_at": "2025-11-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-60638", "ecosystem": "Go", "package_name": "github.com/free5gc/nssf", "disclosure_at": "2025-11-24", "advisory_at": "2025-11-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-60787", "ecosystem": "PyPI", "package_name": "motioneye", "disclosure_at": "2025-10-03", "advisory_at": "2025-11-03", "lag_days": 31, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-60790", "ecosystem": "Packagist", "package_name": "processwire/processwire", "disclosure_at": "2025-10-21", "advisory_at": "2025-10-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-60794", "ecosystem": "npm", "package_name": "@perfood/couch-auth", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-60796", "ecosystem": "Packagist", "package_name": "phppgadmin/phppgadmin", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-60797", "ecosystem": "Packagist", "package_name": "phppgadmin/phppgadmin", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-60798", "ecosystem": "Packagist", "package_name": "phppgadmin/phppgadmin", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-60799", "ecosystem": "Packagist", "package_name": "phppgadmin/phppgadmin", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-60837", "ecosystem": "Maven", "package_name": "net.mingsoft:ms-mcms", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-60868", "ecosystem": "Packagist", "package_name": "alt-design/alt-redirect", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6087", "ecosystem": "npm", "package_name": "@opennextjs/cloudflare", "disclosure_at": "2025-06-16", "advisory_at": "2025-06-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-60880", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61140", "ecosystem": "npm", "package_name": "jsonpath", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-61141", "ecosystem": "Go", "package_name": "github.com/sqls-server/sqls", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61183", "ecosystem": "Packagist", "package_name": "webreinvent/vaahcms", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61385", "ecosystem": "PyPI", "package_name": "pg8000", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61413", "ecosystem": "NuGet", "package_name": "Piranha", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-61417", "ecosystem": "Packagist", "package_name": "tastyigniter/tastyigniter", "disclosure_at": "2025-10-20", "advisory_at": "2025-10-20", "lag_days": 0, "severity": "LOW", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61457", "ecosystem": "Packagist", "package_name": "code16/sharp", "disclosure_at": "2025-10-21", "advisory_at": "2025-10-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61492", "ecosystem": "PyPI", "package_name": "terminal-controller", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61524", "ecosystem": "Go", "package_name": "github.com/casdoor/casdoor", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-61581", "ecosystem": "Go", "package_name": "github.com/apache/trafficcontrol/v8", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61587", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61588", "ecosystem": "crates.io", "package_name": "risc0-zkvm-platform", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-01", "lag_days": -1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-61594", "ecosystem": "RubyGems", "package_name": "uri", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61595", "ecosystem": "Go", "package_name": "github.com/MANTRA-Chain/mantrachain/v4", "disclosure_at": "2025-10-02", "advisory_at": "2025-09-30", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-61620", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": null, "advisory_at": "2025-10-07", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61622", "ecosystem": "PyPI", "package_name": "pyfory", "disclosure_at": "2025-10-01", "advisory_at": "2025-10-01", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61668", "ecosystem": "npm", "package_name": "@plone/volto", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-01", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-6167", "ecosystem": "PyPI", "package_name": "python-a2a", "disclosure_at": "2025-06-17", "advisory_at": "2025-06-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61670", "ecosystem": "PyPI", "package_name": "wasmtime-bin", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61672", "ecosystem": "PyPI", "package_name": "matrix-synapse", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61674", "ecosystem": "Packagist", "package_name": "october/system", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61676", "ecosystem": "Packagist", "package_name": "october/system", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61677", "ecosystem": "PyPI", "package_name": "datachain", "disclosure_at": "2025-10-03", "advisory_at": "2025-10-02", "lag_days": -1, "severity": "LOW", "cvss_score": 2.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61685", "ecosystem": "npm", "package_name": "@mastra/mcp-docs-server", "disclosure_at": "2025-10-03", "advisory_at": "2025-09-24", "lag_days": -9, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-61686", "ecosystem": "npm", "package_name": "@react-router/node", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-61687", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-08", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-61688", "ecosystem": "Go", "package_name": "github.com/siderolabs/omni", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-61723", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61724", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-61725", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61726", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61727", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61728", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61729", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-61730", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-61731", "ecosystem": "Go", "package_name": "toolchain", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-61732", "ecosystem": "Go", "package_name": "toolchain", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-61733", "ecosystem": "Maven", "package_name": "org.apache.kylin:kylin", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-61734", "ecosystem": "Maven", "package_name": "org.apache.kylin:kylin", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-61735", "ecosystem": "Maven", "package_name": "org.apache.kylin:kylin", "disclosure_at": "2025-10-02", "advisory_at": "2025-10-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6176", "ecosystem": "PyPI", "package_name": "brotli", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61765", "ecosystem": "PyPI", "package_name": "python-socketio", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-07", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61770", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61771", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61772", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61773", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61778", "ecosystem": "NuGet", "package_name": "Akka.Remote", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-07", "lag_days": 1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-61780", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61781", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61782", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61783", "ecosystem": "PyPI", "package_name": "social-auth-app-django", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61784", "ecosystem": "PyPI", "package_name": "llamafactory", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61785", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-07", "lag_days": -1, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-61786", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-61787", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-61788", "ecosystem": "Maven", "package_name": "org.opencastproject:opencast-common", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-61795", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-61911", "ecosystem": "PyPI", "package_name": "python-ldap", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61912", "ecosystem": "PyPI", "package_name": "python-ldap", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61913", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-10-08", "advisory_at": "2025-10-09", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-61914", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-61916", "ecosystem": "Maven", "package_name": "io.spinnaker.clouddriver:clouddriver-artifacts", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-61917", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-61919", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61920", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-61921", "ecosystem": "RubyGems", "package_name": "sinatra", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-61922", "ecosystem": "Packagist", "package_name": "prestashop/ps_checkout", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61923", "ecosystem": "Packagist", "package_name": "prestashop/ps_checkout", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61924", "ecosystem": "Packagist", "package_name": "prestashop/ps_checkout", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-61925", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-61926", "ecosystem": "Go", "package_name": "github.com/ossf/allstar", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-61927", "ecosystem": "npm", "package_name": "happy-dom", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-61928", "ecosystem": "npm", "package_name": "better-auth", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-6203", "ecosystem": "Go", "package_name": "github.com/hashicorp/vault", "disclosure_at": "2025-08-28", "advisory_at": "2025-08-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-6208", "ecosystem": "PyPI", "package_name": "llama-index-core", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6209", "ecosystem": "PyPI", "package_name": "llama-index-core", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6210", "ecosystem": "PyPI", "package_name": "llama-index-readers-obsidian", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6211", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62155", "ecosystem": "Go", "package_name": "github.com/QuantumNous/new-api", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-62156", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-workflows/v3", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-62157", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-workflows/v3", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-62161", "ecosystem": "crates.io", "package_name": "youki", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 10, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-62162", "ecosystem": "crates.io", "package_name": "cel", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-62164", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62171", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-28", "lag_days": 11, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-62172", "ecosystem": "PyPI", "package_name": "homeassistant", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62190", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-calls", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-62228", "ecosystem": "Maven", "package_name": "org.apache.flink:flink-cdc-pipeline-connectors", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62237", "ecosystem": "Maven", "package_name": "com.liferay.commerce:com.liferay.commerce.order.web", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62238", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.account.admin.web", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62239", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.workflow.kaleo.designer.web", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6224", "ecosystem": "Go", "package_name": "github.com/juju/utils/v4/cert", "disclosure_at": "2025-07-01", "advisory_at": "2025-07-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-62240", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.calendar.web", "disclosure_at": "2025-10-09", "advisory_at": "2025-10-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62241", "ecosystem": "Maven", "package_name": "com.liferay.commerce:com.liferay.commerce.order.content.web", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62242", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.change.tracking.web", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62243", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.change.tracking.web", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62244", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.change.tracking.web", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62245", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.change.tracking.web", "disclosure_at": "2025-10-10", "advisory_at": "2025-10-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62246", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.mentions.web", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62247", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.search.experiences.service", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62248", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.dynamic.data.mapping.web", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62249", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-10-21", "advisory_at": "2025-10-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62250", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.cluster.multiple", "disclosure_at": "2025-10-21", "advisory_at": "2025-10-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62251", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.site.navigation.menu.item.asset.vocabulary", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62252", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62253", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.layout.admin.web", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62254", "ecosystem": "Maven", "package_name": "com.liferay.portal:com.liferay.portal.impl", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-24", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62255", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.knowledge.base.web", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62256", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.security.auth.verifier", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62257", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62258", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-28", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62259", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6226", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-62260", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-28", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62261", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62262", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.portal.security.ldap.impl", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62263", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.account.admin.web", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62264", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62265", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62266", "ecosystem": "Maven", "package_name": "com.liferay.portal:release.portal.bom", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62267", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.dynamic.data.mapping.item.selector.web", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6227", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "LOW", "cvss_score": 2.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-62275", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.blogs.item.selector.web", "disclosure_at": "2025-11-01", "advisory_at": "2025-11-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62276", "ecosystem": "Maven", "package_name": "com.liferay:com.liferay.adaptive.media.web", "disclosure_at": "2025-11-01", "advisory_at": "2025-11-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6233", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-62348", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62349", "ecosystem": "PyPI", "package_name": "salt", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62365", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62366", "ecosystem": "npm", "package_name": "mailgen", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-6237", "ecosystem": "PyPI", "package_name": "invokeai", "disclosure_at": "2025-09-18", "advisory_at": "2025-09-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62370", "ecosystem": "crates.io", "package_name": "alloy-dyn-abi", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-62371", "ecosystem": "Maven", "package_name": "org.opensearch.dataprepper.plugins:opensearch", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62372", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62374", "ecosystem": "npm", "package_name": "parse", "disclosure_at": "2025-10-14", "advisory_at": "2025-10-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-62375", "ecosystem": "Go", "package_name": "github.com/in-toto/go-witness", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-62378", "ecosystem": "npm", "package_name": "commandkit", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-13", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-62379", "ecosystem": "PyPI", "package_name": "reflex", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62380", "ecosystem": "npm", "package_name": "mailgen", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-62381", "ecosystem": "npm", "package_name": "sveltekit-superforms", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-62393", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62394", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62396", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62398", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62399", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62400", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62401", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62402", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62410", "ecosystem": "npm", "package_name": "happy-dom", "disclosure_at": "2025-10-15", "advisory_at": "2025-10-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-62411", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62412", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62414", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62415", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62416", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62417", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62418", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6242", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-10-07", "advisory_at": "2025-10-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62426", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62427", "ecosystem": "npm", "package_name": "@angular/ssr", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-62503", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62505", "ecosystem": "npm", "package_name": "@lobehub/chat", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3, "source_registry": "npm" }, { "cve_id": "CVE-2025-62506", "ecosystem": "Go", "package_name": "github.com/minio/minio", "disclosure_at": "2025-10-16", "advisory_at": "2025-10-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-62508", "ecosystem": "Packagist", "package_name": "starcitizentools/citizen-skin", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-20", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62513", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-62515", "ecosystem": "PyPI", "package_name": "pyquokka", "disclosure_at": "2025-10-17", "advisory_at": "2025-10-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62517", "ecosystem": "npm", "package_name": "rollbar", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-62518", "ecosystem": "crates.io", "package_name": "astral-tokio-tar", "disclosure_at": "2025-10-21", "advisory_at": "2025-10-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-62519", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62520", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2025-11-04", "advisory_at": "2025-11-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62522", "ecosystem": "npm", "package_name": "vite", "disclosure_at": "2025-10-20", "advisory_at": "2025-10-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-62527", "ecosystem": "PyPI", "package_name": "taguette", "disclosure_at": "2025-10-20", "advisory_at": "2025-10-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62528", "ecosystem": "PyPI", "package_name": "taguette", "disclosure_at": "2025-10-20", "advisory_at": "2025-10-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62593", "ecosystem": "PyPI", "package_name": "ray", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62594", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-x64", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-62595", "ecosystem": "npm", "package_name": "koa", "disclosure_at": "2025-10-21", "advisory_at": "2025-10-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-62596", "ecosystem": "crates.io", "package_name": "youki", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 10, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-62607", "ecosystem": "PyPI", "package_name": "nautobot-ssot", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62608", "ecosystem": "PyPI", "package_name": "mlx", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62609", "ecosystem": "PyPI", "package_name": "mlx", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62610", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-62611", "ecosystem": "PyPI", "package_name": "aiomysql", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62617", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6264", "ecosystem": "Go", "package_name": "www.velocidex.com/golang/velociraptor", "disclosure_at": "2025-06-20", "advisory_at": "2025-06-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-62671", "ecosystem": "Packagist", "package_name": "mediawiki/cargo", "disclosure_at": "2025-10-18", "advisory_at": "2025-10-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62690", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-62703", "ecosystem": "PyPI", "package_name": "fugue", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62705", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-62706", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-10", "lag_days": -12, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62707", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62708", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62710", "ecosystem": "Maven", "package_name": "org.sakaiproject.kernel:sakai-kernel-impl", "disclosure_at": "2025-10-22", "advisory_at": "2025-10-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62711", "ecosystem": "crates.io", "package_name": "wasmtime", "disclosure_at": "2025-10-24", "advisory_at": "2025-07-18", "lag_days": -98, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-62713", "ecosystem": "npm", "package_name": "@kottster/server", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-62714", "ecosystem": "Go", "package_name": "github.com/karmada-io/dashboard", "disclosure_at": "2025-10-24", "advisory_at": "2025-10-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-6272", "ecosystem": "PyPI", "package_name": "pywasm3", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-19", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62725", "ecosystem": "Go", "package_name": "github.com/docker/compose/v2", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-62726", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-62727", "ecosystem": "PyPI", "package_name": "starlette", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62728", "ecosystem": "Maven", "package_name": "org.apache.hive:hive-common", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6278", "ecosystem": "PyPI", "package_name": "upsonic", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-19", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62780", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-10", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62782", "ecosystem": "Maven", "package_name": "de.themoep:inventorygui", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62783", "ecosystem": "Maven", "package_name": "de.themoep:inventorygui", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-62784", "ecosystem": "Maven", "package_name": "de.themoep:inventorygui", "disclosure_at": "2025-10-27", "advisory_at": "2025-10-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6279", "ecosystem": "PyPI", "package_name": "upsonic", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-19", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62796", "ecosystem": "Packagist", "package_name": "privatebin/privatebin", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62798", "ecosystem": "Packagist", "package_name": "code16/sharp", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-62800", "ecosystem": "PyPI", "package_name": "fastmcp", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62801", "ecosystem": "PyPI", "package_name": "fastmcp", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-62802", "ecosystem": "NuGet", "package_name": "Dnn.Platform", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-62820", "ecosystem": "Go", "package_name": "github.com/slackhq/nebula", "disclosure_at": "2025-10-23", "advisory_at": "2025-10-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-62877", "ecosystem": "Go", "package_name": "github.com/harvester/harvester-installer", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-05", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-62878", "ecosystem": "Go", "package_name": "github.com/rancher/local-path-provisioner", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-04", "lag_days": -21, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-62879", "ecosystem": "Go", "package_name": "github.com/rancher/backup-restore-operator", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-63387", "ecosystem": "PyPI", "package_name": "dify-client", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-63389", "ecosystem": "Go", "package_name": "github.com/ollama/ollama", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-63396", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-63520", "ecosystem": "Packagist", "package_name": "feehi/feehicms", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-63522", "ecosystem": "Packagist", "package_name": "feehi/feehicms", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-63523", "ecosystem": "Packagist", "package_name": "feehi/feehicms", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-63644", "ecosystem": "Packagist", "package_name": "ph7software/ph7builder", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-63675", "ecosystem": "PyPI", "package_name": "cryptidy", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-63681", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-63700", "ecosystem": "npm", "package_name": "@clerk/clerk-js", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-63811", "ecosystem": "Go", "package_name": "github.com/dvsekhvalnov/jose2go", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-63828", "ecosystem": "Packagist", "package_name": "backdrop/backdrop", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6384", "ecosystem": "Maven", "package_name": "org.craftercms:crafter-studio", "disclosure_at": "2025-06-19", "advisory_at": "2025-06-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6386", "ecosystem": "PyPI", "package_name": "lollms", "disclosure_at": "2025-07-07", "advisory_at": "2025-07-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64027", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2025-11-20", "advisory_at": "2025-11-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64049", "ecosystem": "Packagist", "package_name": "redaxo/source", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64050", "ecosystem": "Packagist", "package_name": "redaxo/source", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64076", "ecosystem": "PyPI", "package_name": "cbor2", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64087", "ecosystem": "Maven", "package_name": "fr.opensagres.xdocreport:fr.opensagres.xdocreport.template.freemarker", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64094", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-64095", "ecosystem": "NuGet", "package_name": "DNN.PLATFORM", "disclosure_at": "2025-10-28", "advisory_at": "2025-10-29", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-64099", "ecosystem": "Maven", "package_name": "org.openidentityplatform.openam:openam-oauth2", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64100", "ecosystem": "PyPI", "package_name": "ckan", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64101", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel/v2", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-64102", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel/v2", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64103", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel/v2", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64104", "ecosystem": "PyPI", "package_name": "langgraph-checkpoint-sqlite", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64111", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64112", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64113", "ecosystem": "NuGet", "package_name": "MediaBrowser.Server.Core", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-64118", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2025-10-30", "advisory_at": "2025-10-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-64131", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:saml", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64132", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:mcp-server", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64133", "ecosystem": "Maven", "package_name": "jp.ikedam.jenkins.plugins:extensible-choice-parameter", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64134", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:jdepend", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64135", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:eggplant-runner", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64136", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:themis", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64137", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:themis", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64138", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:windocks-start-container", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64139", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:windocks-start-container", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64140", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:azure-cli", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64141", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:nexus-task-runner", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64142", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:nexus-task-runner", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64143", "ecosystem": "Maven", "package_name": "com.openshift.jenkins:openshift-pipeline", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64144", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:byteguard-build-actions", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64145", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:byteguard-build-actions", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64146", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:curseforge-publisher", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64147", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:curseforge-publisher", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64148", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:publish-to-bitbucket", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64149", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:publish-to-bitbucket", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64150", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:publish-to-bitbucket", "disclosure_at": "2025-10-29", "advisory_at": "2025-10-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64166", "ecosystem": "npm", "package_name": "mercurius", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-64168", "ecosystem": "PyPI", "package_name": "agno", "disclosure_at": "2025-10-31", "advisory_at": "2025-10-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64170", "ecosystem": "crates.io", "package_name": "sudo-rs", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-64171", "ecosystem": "Go", "package_name": "github.com/3scale-sre/marin3r", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-04", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-64173", "ecosystem": "crates.io", "package_name": "apollo-router", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-64174", "ecosystem": "Packagist", "package_name": "openmage/magento-lts", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-03", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64175", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64178", "ecosystem": "Go", "package_name": "github.com/jon4hz/jellysweep", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-04", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-64179", "ecosystem": "Go", "package_name": "github.com/treeverse/lakefs", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-03", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64184", "ecosystem": "PyPI", "package_name": "dosage", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-04", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64186", "ecosystem": "Go", "package_name": "github.com/evervault/evervault-go", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64187", "ecosystem": "PyPI", "package_name": "octoprint", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-04", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64323", "ecosystem": "Go", "package_name": "github.com/kgateway-dev/kgateway/v2", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-04", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64324", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-07", "lag_days": -11, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64326", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-11-06", "advisory_at": "2025-11-05", "lag_days": -1, "severity": "LOW", "cvss_score": 2.600000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64329", "ecosystem": "Go", "package_name": "github.com/containerd/containerd", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64340", "ecosystem": "PyPI", "package_name": "fastmcp", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64345", "ecosystem": "crates.io", "package_name": "wasmtime", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-11", "lag_days": -1, "severity": "LOW", "cvss_score": 1.8000000000000000444089209850062616169452667236328125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-64346", "ecosystem": "Go", "package_name": "github.com/jaredallard/archives", "disclosure_at": "2025-11-07", "advisory_at": "2025-04-01", "lag_days": -220, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-64347", "ecosystem": "crates.io", "package_name": "apollo-router", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-64408", "ecosystem": "Maven", "package_name": "org.apache.causeway.commons:causeway-commons", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6442", "ecosystem": "RubyGems", "package_name": "webrick", "disclosure_at": "2025-06-25", "advisory_at": "2025-06-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-64429", "ecosystem": "PyPI", "package_name": "duckdb", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64430", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-05", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64431", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-05", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-64432", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64433", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64434", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64435", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64436", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64437", "ecosystem": "Go", "package_name": "kubevirt.io/kubevirt", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64439", "ecosystem": "PyPI", "package_name": "langgraph-checkpoint", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-05", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64443", "ecosystem": "Go", "package_name": "github.com/docker/mcp-gateway", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-64458", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-11-05", "advisory_at": "2025-11-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64459", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-11-05", "advisory_at": "2025-11-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64460", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64481", "ecosystem": "PyPI", "package_name": "datasette", "disclosure_at": "2025-11-07", "advisory_at": "2025-11-06", "lag_days": -1, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64484", "ecosystem": "Go", "package_name": "github.com/oauth2-proxy/oauth2-proxy/v7", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-12", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64494", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2025-11-08", "advisory_at": "2025-11-06", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-64495", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2025-11-08", "advisory_at": "2025-11-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64495", "ecosystem": "npm", "package_name": "open-webui", "disclosure_at": "2025-11-08", "advisory_at": "2025-11-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-64496", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2025-11-08", "advisory_at": "2025-11-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64496", "ecosystem": "npm", "package_name": "open-webui", "disclosure_at": "2025-11-08", "advisory_at": "2025-11-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-64500", "ecosystem": "Packagist", "package_name": "symfony/http-foundation", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64501", "ecosystem": "RubyGems", "package_name": "prosemirror_to_html", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-06", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-64502", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-64507", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64508", "ecosystem": "PyPI", "package_name": "bugsink", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64509", "ecosystem": "PyPI", "package_name": "bugsink", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64512", "ecosystem": "PyPI", "package_name": "pdfminer-six", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-07", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64513", "ecosystem": "Go", "package_name": "github.com/milvus-io/milvus", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-64517", "ecosystem": "crates.io", "package_name": "sudo-rs", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-64518", "ecosystem": "Maven", "package_name": "org.cyclonedx:cyclonedx-core-java", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-64519", "ecosystem": "Packagist", "package_name": "torrentpier/torrentpier", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64521", "ecosystem": "Go", "package_name": "goauthentik.io", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64521", "ecosystem": "PyPI", "package_name": "authentik-client", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64522", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-64523", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2025-11-12", "advisory_at": "2025-11-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64525", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64527", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-05", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64529", "ecosystem": "Go", "package_name": "github.com/authzed/spicedb", "disclosure_at": "2025-11-10", "advisory_at": "2025-11-13", "lag_days": 3, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64530", "ecosystem": "npm", "package_name": "@apollo/composition", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64641", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-12-24", "advisory_at": "2025-12-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-6465", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64702", "ecosystem": "Go", "package_name": "github.com/quic-go/quic-go", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64708", "ecosystem": "Go", "package_name": "goauthentik.io", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-64711", "ecosystem": "Packagist", "package_name": "privatebin/privatebin", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "LOW", "cvss_score": 3.899999999999999911182158029987476766109466552734375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64712", "ecosystem": "PyPI", "package_name": "unstructured", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64714", "ecosystem": "Packagist", "package_name": "privatebin/privatebin", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-64715", "ecosystem": "Go", "package_name": "github.com/cilium/cilium", "disclosure_at": "2025-11-29", "advisory_at": "2025-12-01", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "Go" }, { "cve_id": "CVE-2025-64716", "ecosystem": "Go", "package_name": "github.com/TecharoHQ/anubis", "disclosure_at": "2025-11-13", "advisory_at": "2025-10-30", "lag_days": -14, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-64717", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64718", "ecosystem": "npm", "package_name": "js-yaml", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-64725", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-64745", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-64746", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-64747", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-14", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64748", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64749", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2025-11-13", "advisory_at": "2025-11-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-64750", "ecosystem": "Go", "package_name": "github.com/sylabs/singularity/v4", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-64751", "ecosystem": "Go", "package_name": "github.com/openfga/openfga", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64755", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-64756", "ecosystem": "npm", "package_name": "glob", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64757", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-64758", "ecosystem": "npm", "package_name": "@dependencytrack/frontend", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-64761", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64762", "ecosystem": "npm", "package_name": "@workos-inc/authkit-nextjs", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-64763", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-05", "lag_days": 2, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-64764", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-64765", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-64767", "ecosystem": "npm", "package_name": "@hpke/core", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-64775", "ecosystem": "Maven", "package_name": "org.apache.struts:struts2-core", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-65012", "ecosystem": "Packagist", "package_name": "getkirby/cms", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65013", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65014", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65015", "ecosystem": "PyPI", "package_name": "joserfc", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65017", "ecosystem": "RubyGems", "package_name": "decidim-core", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-65019", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-65025", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2025-65026", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-65073", "ecosystem": "PyPI", "package_name": "keystone", "disclosure_at": "2025-11-17", "advisory_at": "2025-11-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65089", "ecosystem": "Maven", "package_name": "com.xwiki.pro:xwiki-pro-macros-ui", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-18", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-65090", "ecosystem": "Maven", "package_name": "org.xwiki.contrib:macro-fullcalendar-pom", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-65091", "ecosystem": "Maven", "package_name": "org.xwiki.contrib:macro-fullcalendar-pom", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Maven" }, { "cve_id": "CVE-2025-65093", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-11-18", "advisory_at": "2025-11-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65098", "ecosystem": "npm", "package_name": "@typebot.io/js", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-65099", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-65103", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2025-11-19", "advisory_at": "2025-11-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65105", "ecosystem": "Go", "package_name": "github.com/apptainer/apptainer", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-65106", "ecosystem": "PyPI", "package_name": "langchain-core", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65108", "ecosystem": "npm", "package_name": "md-to-pdf", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2025-65109", "ecosystem": "Go", "package_name": "github.com/mindersec/minder", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-20", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-65110", "ecosystem": "npm", "package_name": "vega-selections", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-65111", "ecosystem": "Go", "package_name": "github.com/authzed/spicedb", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-21", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-6514", "ecosystem": "npm", "package_name": "mcp-remote", "disclosure_at": "2025-07-09", "advisory_at": "2025-07-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-6518", "ecosystem": "PyPI", "package_name": "pyspur", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65186", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65345", "ecosystem": "Packagist", "package_name": "alexusmai/laravel-file-manager", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65346", "ecosystem": "Packagist", "package_name": "alexusmai/laravel-file-manager", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65430", "ecosystem": "PyPI", "package_name": "django-allauth", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65431", "ecosystem": "PyPI", "package_name": "django-allauth", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6544", "ecosystem": "Maven", "package_name": "ai.h2o:h2o-core", "disclosure_at": "2025-09-21", "advisory_at": "2025-09-22", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6544", "ecosystem": "PyPI", "package_name": "ai.h2o:h2o-core", "disclosure_at": "2025-09-21", "advisory_at": "2025-09-22", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6545", "ecosystem": "npm", "package_name": "pbkdf2", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-6547", "ecosystem": "npm", "package_name": "pbkdf2", "disclosure_at": "2025-06-23", "advisory_at": "2025-06-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-65482", "ecosystem": "Maven", "package_name": "fr.opensagres.xdocreport:fr.opensagres.xdocreport.document", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-65513", "ecosystem": "npm", "package_name": "mcp-fetch-server", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-65548", "ecosystem": "PyPI", "package_name": "cashu", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65581", "ecosystem": "NuGet", "package_name": "Volo.Abp.Account.Web", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-65621", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65622", "ecosystem": "Packagist", "package_name": "snipe/snipe-it", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65637", "ecosystem": "Go", "package_name": "github.com/sirupsen/logrus", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-65657", "ecosystem": "Packagist", "package_name": "feehi/cms", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65681", "ecosystem": "PyPI", "package_name": "tutor", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65713", "ecosystem": "PyPI", "package_name": "homeassistant", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65754", "ecosystem": "Go", "package_name": "github.com/xyproto/algernon", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-65795", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-65796", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-65797", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-65798", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-65799", "ecosystem": "Go", "package_name": "github.com/usememos/memos", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-65807", "ecosystem": "crates.io", "package_name": "sd", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-65849", "ecosystem": "npm", "package_name": "altcha", "disclosure_at": "2025-12-08", "advisory_at": "2025-12-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-65852", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": null, "advisory_at": "2026-02-06", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-65854", "ecosystem": "Packagist", "package_name": "mineadmin/mineadmin", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65858", "ecosystem": "PyPI", "package_name": "calibreweb", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65896", "ecosystem": "PyPI", "package_name": "asyncmy", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65942", "ecosystem": "Go", "package_name": "github.com/VictoriaMetrics/VictoriaMetrics", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-65944", "ecosystem": "npm", "package_name": "@sentry/node", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-65945", "ecosystem": "npm", "package_name": "jws", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-65947", "ecosystem": "crates.io", "package_name": "thread-amount", "disclosure_at": "2025-11-21", "advisory_at": "2025-11-21", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-65955", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-65956", "ecosystem": "Packagist", "package_name": "getformwork/formwork", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65958", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65959", "ecosystem": "npm", "package_name": "open-webui", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-65960", "ecosystem": "Packagist", "package_name": "contao/core-bundle", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65961", "ecosystem": "Packagist", "package_name": "contao/core-bundle", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-65964", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-65965", "ecosystem": "Go", "package_name": "github.com/anchore/grype", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-65966", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-65995", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-65998", "ecosystem": "Maven", "package_name": "org.apache.syncope:syncope-core", "disclosure_at": "2025-11-24", "advisory_at": "2025-11-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66001", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2026-01-08", "advisory_at": "2025-12-12", "lag_days": -27, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-66016", "ecosystem": "crates.io", "package_name": "cggmp21", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-24", "lag_days": -1, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-66017", "ecosystem": "crates.io", "package_name": "cggmp21", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-24", "lag_days": -1, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-66019", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66020", "ecosystem": "npm", "package_name": "valibot", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-66021", "ecosystem": "Maven", "package_name": "com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66024", "ecosystem": "Maven", "package_name": "org.xwiki.contrib.blog:application-blog-ui", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 9, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66026", "ecosystem": "Packagist", "package_name": "redaxo/source", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66028", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-66030", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-66031", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-66032", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66033", "ecosystem": "Maven", "package_name": "com.okta.sdk:okta-sdk-root", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66034", "ecosystem": "PyPI", "package_name": "fonttools", "disclosure_at": "2025-11-29", "advisory_at": "2025-12-01", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66035", "ecosystem": "npm", "package_name": "@angular/common", "disclosure_at": "2025-11-26", "advisory_at": "2025-11-26", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-66040", "ecosystem": "PyPI", "package_name": "spotipy", "disclosure_at": "2025-11-27", "advisory_at": "2025-12-01", "lag_days": 4, "severity": "LOW", "cvss_score": 3.600000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66168", "ecosystem": "Maven", "package_name": "org.apache.activemq:apache-activemq", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66169", "ecosystem": "Maven", "package_name": "org.apache.camel:camel-neo4j", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66202", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-66219", "ecosystem": "npm", "package_name": "willitmerge", "disclosure_at": "2025-11-29", "advisory_at": "2025-11-26", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66220", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-05", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66221", "ecosystem": "PyPI", "package_name": "werkzeug", "disclosure_at": "2025-11-29", "advisory_at": "2025-12-02", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6624", "ecosystem": "Go", "package_name": "snyk", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-26", "lag_days": 0, "severity": "LOW", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-6624", "ecosystem": "npm", "package_name": "snyk", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-26", "lag_days": 0, "severity": "LOW", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66249", "ecosystem": "Maven", "package_name": "org.apache.livy:livy-server", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66292", "ecosystem": "Go", "package_name": "github.com/donknap/dpanel", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-66294", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66295", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66296", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66297", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66298", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66299", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66300", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66301", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66302", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66303", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66304", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66305", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66306", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66307", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66308", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66309", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66310", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66311", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66312", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66371", "ecosystem": "PyPI", "package_name": "peppol-py", "disclosure_at": "2025-11-28", "advisory_at": "2025-11-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66372", "ecosystem": "Maven", "package_name": "org.mustangproject:library", "disclosure_at": "2025-11-28", "advisory_at": "2025-11-28", "lag_days": 0, "severity": "LOW", "cvss_score": 2.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6638", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-09-12", "advisory_at": "2025-09-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66388", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66398", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-02", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-66400", "ecosystem": "npm", "package_name": "mdast-util-to-hast", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-66401", "ecosystem": "npm", "package_name": "mcp-watch", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66402", "ecosystem": "npm", "package_name": "misskey-js", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-66404", "ecosystem": "npm", "package_name": "mcp-server-kubernetes", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-66405", "ecosystem": "npm", "package_name": "@portkey-ai/gateway", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66406", "ecosystem": "Go", "package_name": "github.com/smallstep/certificates", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66407", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66410", "ecosystem": "Go", "package_name": "github.com/flipped-aurora/gin-vue-admin", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-66411", "ecosystem": "Go", "package_name": "github.com/coder/coder/v2", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-66412", "ecosystem": "npm", "package_name": "@angular/compiler", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-66414", "ecosystem": "npm", "package_name": "@modelcontextprotocol/sdk", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-66415", "ecosystem": "npm", "package_name": "@fastify/reply-from", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-66416", "ecosystem": "PyPI", "package_name": "mcp", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66418", "ecosystem": "PyPI", "package_name": "urllib3", "disclosure_at": "2025-12-05", "advisory_at": "2025-12-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66420", "ecosystem": "npm", "package_name": "tryton-sao", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-66421", "ecosystem": "npm", "package_name": "tryton-sao", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-66422", "ecosystem": "PyPI", "package_name": "trytond", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66423", "ecosystem": "PyPI", "package_name": "trytond", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66424", "ecosystem": "PyPI", "package_name": "trytond", "disclosure_at": "2025-11-30", "advisory_at": "2025-11-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66448", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2025-12-01", "advisory_at": "2025-12-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66453", "ecosystem": "Maven", "package_name": "org.mozilla:rhino", "disclosure_at": "2025-12-03", "advisory_at": "2025-12-03", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66454", "ecosystem": "PyPI", "package_name": "arcade-mcp-server", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66456", "ecosystem": "npm", "package_name": "elysia", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66457", "ecosystem": "npm", "package_name": "elysia", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66468", "ecosystem": "Packagist", "package_name": "aimeos/ai-cms-grapesjs", "disclosure_at": "2025-12-02", "advisory_at": "2025-12-03", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66469", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66470", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66471", "ecosystem": "PyPI", "package_name": "urllib3", "disclosure_at": "2025-12-05", "advisory_at": "2025-12-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66472", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-flamingo-skin-resources", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66473", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-rest-server", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66474", "ecosystem": "Maven", "package_name": "org.xwiki.rendering:xwiki-rendering-xml", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66479", "ecosystem": "npm", "package_name": "@anthropic-ai/sandbox-runtime", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-66482", "ecosystem": "npm", "package_name": "misskey-js", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-66490", "ecosystem": "Go", "package_name": "github.com/traefik/traefik", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66491", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-66506", "ecosystem": "Go", "package_name": "github.com/sigstore/fulcio", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-05", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66507", "ecosystem": "Go", "package_name": "github.com/1Panel-dev/1Panel", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66508", "ecosystem": "Go", "package_name": "github.com/1Panel-dev/1Panel", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66516", "ecosystem": "Maven", "package_name": "org.apache.tika:tika-core", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66518", "ecosystem": "Maven", "package_name": "org.apache.kyuubi:kyuubi-server_2.12", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66524", "ecosystem": "Maven", "package_name": "org.apache.nifi:nifi-asana-processors", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66560", "ecosystem": "Maven", "package_name": "io.quarkus:quarkus-rest", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66564", "ecosystem": "Go", "package_name": "github.com/sigstore/timestamp-authority", "disclosure_at": "2025-12-04", "advisory_at": "2025-12-05", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-66565", "ecosystem": "Go", "package_name": "github.com/gofiber/utils/v2", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-66566", "ecosystem": "Maven", "package_name": "at.yawk.lz4:lz4-java", "disclosure_at": "2025-12-05", "advisory_at": "2025-12-05", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66567", "ecosystem": "RubyGems", "package_name": "ruby-saml", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-66568", "ecosystem": "RubyGems", "package_name": "ruby-saml", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-66578", "ecosystem": "Packagist", "package_name": "robrichards/xmlseclibs", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66614", "ecosystem": "Maven", "package_name": "org.apache.tomcat.embed:tomcat-embed-core", "disclosure_at": "2026-02-17", "advisory_at": "2026-02-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66622", "ecosystem": "crates.io", "package_name": "matrix-sdk-base", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "LOW", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-66623", "ecosystem": "Maven", "package_name": "io.strimzi:strimzi", "disclosure_at": "2025-12-05", "advisory_at": "2025-12-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66625", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-66626", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-workflows/v3", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-66627", "ecosystem": "crates.io", "package_name": "wasmi", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-66628", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-66630", "ecosystem": "Go", "package_name": "github.com/gofiber/fiber/v2", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-66631", "ecosystem": "NuGet", "package_name": "Csla", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-66645", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66648", "ecosystem": "npm", "package_name": "vega-functions", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-66675", "ecosystem": "Maven", "package_name": "org.apache.struts:struts2-core", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-66719", "ecosystem": "Go", "package_name": "github.com/free5gc/nrf", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-6674", "ecosystem": "Packagist", "package_name": "drupal/ckeditor5_youtube", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6675", "ecosystem": "Packagist", "package_name": "drupal/miniorange_2fa", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6676", "ecosystem": "Packagist", "package_name": "drupal/simple_sitemap", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6677", "ecosystem": "Packagist", "package_name": "drupal/paragraphs_table", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66803", "ecosystem": "npm", "package_name": "@hotwired/turbo", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-66843", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66844", "ecosystem": "Packagist", "package_name": "getgrav/grav", "disclosure_at": "2025-12-15", "advisory_at": "2025-12-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-66959", "ecosystem": "PyPI", "package_name": "ollama", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-66960", "ecosystem": "PyPI", "package_name": "ollama", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6700", "ecosystem": "Maven", "package_name": "com.xuxueli:xxl-sso", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-26", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6701", "ecosystem": "Maven", "package_name": "com.xuxueli:xxl-sso", "disclosure_at": "2025-06-26", "advisory_at": "2025-06-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67030", "ecosystem": "Maven", "package_name": "org.codehaus.plexus:plexus-utils", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67124", "ecosystem": "crates.io", "package_name": "miniserve", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-67164", "ecosystem": "Packagist", "package_name": "pagekit/pagekit", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67165", "ecosystem": "Packagist", "package_name": "pagekit/pagekit", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67221", "ecosystem": "PyPI", "package_name": "orjson", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67288", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 10, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-67290", "ecosystem": "NuGet", "package_name": "Piranha", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-67291", "ecosystem": "NuGet", "package_name": "Piranha", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-6735", "ecosystem": "Packagist", "package_name": "juzaweb/cms", "disclosure_at": "2025-06-27", "advisory_at": "2025-06-27", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-6736", "ecosystem": "Packagist", "package_name": "juzaweb/cms", "disclosure_at": "2025-06-27", "advisory_at": "2025-06-27", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67364", "ecosystem": "npm", "package_name": "fast-filesystem-mcp", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-67419", "ecosystem": "npm", "package_name": "@evershop/evershop", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-67427", "ecosystem": "npm", "package_name": "@evershop/evershop", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-67438", "ecosystem": "npm", "package_name": "@sync-in/server", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-67485", "ecosystem": "PyPI", "package_name": "mad-proxy", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67487", "ecosystem": "crates.io", "package_name": "static-web-server", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-67488", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-67489", "ecosystem": "npm", "package_name": "@vitejs/plugin-rsc", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-67490", "ecosystem": "npm", "package_name": "@auth0/nextjs-auth0", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-67492", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67494", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-67495", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-12-09", "advisory_at": "2025-12-08", "lag_days": -1, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-67499", "ecosystem": "Go", "package_name": "github.com/containernetworking/plugins", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-67502", "ecosystem": "PyPI", "package_name": "taguette", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67505", "ecosystem": "Maven", "package_name": "com.okta.sdk:okta-sdk-root", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67507", "ecosystem": "Packagist", "package_name": "filament/filament", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67508", "ecosystem": "Go", "package_name": "github.com/gardener/gardenctl-v2", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-11", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-67509", "ecosystem": "Packagist", "package_name": "neuron-core/neuron-ai", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67510", "ecosystem": "Packagist", "package_name": "neuron-core/neuron-ai", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-09", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67511", "ecosystem": "PyPI", "package_name": "cai-framework", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-09", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67601", "ecosystem": "Go", "package_name": "github.com/rancher/rancher", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-01", "lag_days": -24, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-67635", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67636", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67637", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67638", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67639", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67640", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:git-client", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67641", "ecosystem": "Maven", "package_name": "io.jenkins.plugins:coverage", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67642", "ecosystem": "Maven", "package_name": "com.datapipe.jenkins.plugins:hashicorp-vault-plugin", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67643", "ecosystem": "Maven", "package_name": "org.jenkinsci.plugins:pipeline-reporter-by-redpen", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67644", "ecosystem": "PyPI", "package_name": "langgraph-checkpoint-sqlite", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67647", "ecosystem": "npm", "package_name": "@sveltejs/kit", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-67648", "ecosystem": "Packagist", "package_name": "shopware/shopware", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-09", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67713", "ecosystem": "Go", "package_name": "miniflux.app/v2", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-67715", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67716", "ecosystem": "npm", "package_name": "@auth0/nextjs-auth0", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "LOW", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-67717", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-67718", "ecosystem": "npm", "package_name": "formio", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-67719", "ecosystem": "Packagist", "package_name": "ibexa/user", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67720", "ecosystem": "PyPI", "package_name": "pyrofork", "disclosure_at": "2025-12-11", "advisory_at": "2025-12-10", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67721", "ecosystem": "Maven", "package_name": "io.airlift:aircompressor-v3", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67724", "ecosystem": "PyPI", "package_name": "tornado", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67725", "ecosystem": "PyPI", "package_name": "tornado", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67726", "ecosystem": "PyPI", "package_name": "tornado", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67729", "ecosystem": "PyPI", "package_name": "lmdeploy", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6773", "ecosystem": "PyPI", "package_name": "lightrag-hku", "disclosure_at": "2025-06-27", "advisory_at": "2025-06-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67731", "ecosystem": "npm", "package_name": "servify-express", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-11", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-67735", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-http", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-67737", "ecosystem": "Packagist", "package_name": "azuracast/azuracast", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-11", "lag_days": -1, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67743", "ecosystem": "PyPI", "package_name": "local-deep-research", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67746", "ecosystem": "Packagist", "package_name": "composer/composer", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67747", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67748", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-15", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67750", "ecosystem": "npm", "package_name": "lightning-flow-scanner", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-67779", "ecosystem": "npm", "package_name": "react-server-dom-parcel", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-67818", "ecosystem": "Go", "package_name": "github.com/weaviate/weaviate", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-67819", "ecosystem": "Go", "package_name": "github.com/weaviate/weaviate", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-67847", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67848", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67849", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67850", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67851", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67852", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67853", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67855", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67856", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67857", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-67860", "ecosystem": "Go", "package_name": "github.com/neuvector/scanner", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-12", "lag_days": -13, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-67895", "ecosystem": "PyPI", "package_name": "apache-airflow-providers-edge3", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-67897", "ecosystem": "crates.io", "package_name": "sequoia-openpgp", "disclosure_at": "2025-12-14", "advisory_at": "2025-11-07", "lag_days": -37, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-67898", "ecosystem": "npm", "package_name": "mjml", "disclosure_at": "2025-12-14", "advisory_at": "2025-12-15", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68113", "ecosystem": "Go", "package_name": "altcha-lib", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68113", "ecosystem": "Maven", "package_name": "altcha-lib", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68113", "ecosystem": "Packagist", "package_name": "altcha-lib", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68113", "ecosystem": "PyPI", "package_name": "altcha-lib", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68113", "ecosystem": "RubyGems", "package_name": "altcha-lib", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-68113", "ecosystem": "npm", "package_name": "altcha-lib", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68115", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68119", "ecosystem": "Go", "package_name": "toolchain", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "Go" }, { "cve_id": "CVE-2025-68120", "ecosystem": "Go", "package_name": "github.com/golang/vscode-go", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-29", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-68121", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2025-68129", "ecosystem": "Packagist", "package_name": "auth0/auth0-php", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68130", "ecosystem": "npm", "package_name": "@trpc/server", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-68131", "ecosystem": "PyPI", "package_name": "cbor2", "disclosure_at": "2025-12-31", "advisory_at": "2025-12-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68142", "ecosystem": "PyPI", "package_name": "pymdown-extensions", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68143", "ecosystem": "PyPI", "package_name": "mcp-server-git", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68144", "ecosystem": "PyPI", "package_name": "mcp-server-git", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68145", "ecosystem": "PyPI", "package_name": "mcp-server-git", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68146", "ecosystem": "PyPI", "package_name": "filelock", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68150", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68151", "ecosystem": "Go", "package_name": "github.com/coredns/coredns", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68154", "ecosystem": "npm", "package_name": "systeminformation", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68155", "ecosystem": "npm", "package_name": "@vitejs/plugin-rsc", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68156", "ecosystem": "Go", "package_name": "github.com/expr-lang/expr", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68157", "ecosystem": "npm", "package_name": "webpack", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-68158", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68161", "ecosystem": "Maven", "package_name": "org.apache.logging.log4j:log4j-core", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68271", "ecosystem": "RubyGems", "package_name": "openc3", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-68272", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68273", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-68274", "ecosystem": "Go", "package_name": "github.com/emiago/sipgo", "disclosure_at": "2025-12-16", "advisory_at": "2025-12-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68278", "ecosystem": "npm", "package_name": "tinacms", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-68279", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68280", "ecosystem": "Maven", "package_name": "org.apache.sis.core:sis-metadata", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68383", "ecosystem": "Go", "package_name": "github.com/elastic/beats/v7", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-19", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68384", "ecosystem": "Maven", "package_name": "org.elasticsearch.plugin:x-pack-security", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-19", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68388", "ecosystem": "Go", "package_name": "github.com/elastic/beats", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-19", "lag_days": 1, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-68390", "ecosystem": "Maven", "package_name": "org.elasticsearch.plugin:x-pack-core", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-19", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68398", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68428", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68429", "ecosystem": "npm", "package_name": "storybook", "disclosure_at": "2025-12-17", "advisory_at": "2025-12-18", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-68436", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68437", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68438", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68454", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68455", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68456", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68457", "ecosystem": "npm", "package_name": "orejime", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68458", "ecosystem": "npm", "package_name": "webpack", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-68463", "ecosystem": "PyPI", "package_name": "biopython", "disclosure_at": "2025-12-18", "advisory_at": "2025-12-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68467", "ecosystem": "npm", "package_name": "darkreader", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "LOW", "cvss_score": 3.399999999999999911182158029987476766109466552734375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68469", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-12-18", "advisory_at": "2025-08-25", "lag_days": -115, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-68470", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68472", "ecosystem": "PyPI", "package_name": "mindsdb", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68475", "ecosystem": "npm", "package_name": "@fedify/fedify", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-68476", "ecosystem": "Go", "package_name": "github.com/kedacore/keda/v2", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-68477", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68478", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68480", "ecosystem": "PyPI", "package_name": "marshmallow", "disclosure_at": "2025-12-22", "advisory_at": "2025-12-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68481", "ecosystem": "PyPI", "package_name": "fastapi-users", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68492", "ecosystem": "PyPI", "package_name": "chainlit", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "LOW", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68493", "ecosystem": "Maven", "package_name": "org.apache.struts:struts2-core", "disclosure_at": "2026-01-11", "advisory_at": "2026-01-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-6853", "ecosystem": "PyPI", "package_name": "langchain-chatchat", "disclosure_at": "2025-06-29", "advisory_at": "2025-06-29", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6854", "ecosystem": "PyPI", "package_name": "langchain-chatchat", "disclosure_at": "2025-06-29", "advisory_at": "2025-06-29", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6855", "ecosystem": "PyPI", "package_name": "langchain-chatchat", "disclosure_at": "2025-06-29", "advisory_at": "2025-06-29", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68613", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-12-19", "advisory_at": "2025-12-22", "lag_days": 3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-68614", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68616", "ecosystem": "PyPI", "package_name": "weasyprint", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68618", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-68619", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-68620", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-02", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68664", "ecosystem": "PyPI", "package_name": "langchain-core", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68665", "ecosystem": "npm", "package_name": "@langchain/core", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68668", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-68671", "ecosystem": "Go", "package_name": "github.com/treeverse/lakefs", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68675", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-68696", "ecosystem": "RubyGems", "package_name": "httparty", "disclosure_at": "2025-12-23", "advisory_at": "2025-12-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2025-68697", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-68698", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68701", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68702", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68703", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68704", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68705", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-68924", "ecosystem": "NuGet", "package_name": "UmbracoForms", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-13", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-68925", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68926", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-68927", "ecosystem": "Go", "package_name": "github.com/abhinavxd/libredesk", "disclosure_at": "2025-12-27", "advisory_at": "2025-12-16", "lag_days": -11, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-68931", "ecosystem": "Maven", "package_name": "net.gleske:jervis", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-68938", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-68939", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2025-68940", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-68941", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-68942", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-68943", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-68944", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-68945", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-68946", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2025-12-26", "advisory_at": "2025-12-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-68949", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-68950", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-68951", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": "2025-12-29", "advisory_at": "2025-12-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-68954", "ecosystem": "Go", "package_name": "pterodactyl/panel", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-68954", "ecosystem": "Packagist", "package_name": "pterodactyl/panel", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69196", "ecosystem": "PyPI", "package_name": "fastmcp", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69197", "ecosystem": "Packagist", "package_name": "pterodactyl/panel", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69198", "ecosystem": "Packagist", "package_name": "pterodactyl/panel", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69199", "ecosystem": "Go", "package_name": "github.com/pterodactyl/wings", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-69200", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": "2025-12-29", "advisory_at": "2025-12-30", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69202", "ecosystem": "npm", "package_name": "axios-cache-interceptor", "disclosure_at": "2025-12-29", "advisory_at": "2025-12-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-69203", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-02", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-69206", "ecosystem": "npm", "package_name": "hemmelig", "disclosure_at": "2025-12-29", "advisory_at": "2025-12-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-69207", "ecosystem": "PyPI", "package_name": "khoj", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6921", "ecosystem": "PyPI", "package_name": "transformers", "disclosure_at": "2025-09-23", "advisory_at": "2025-09-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69210", "ecosystem": "Packagist", "package_name": "facturascripts/facturascripts", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69211", "ecosystem": "npm", "package_name": "@nestjs/platform-fastify", "disclosure_at": "2025-12-29", "advisory_at": "2025-12-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-69212", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69213", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69214", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69215", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69216", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69219", "ecosystem": "PyPI", "package_name": "apache-airflow-providers-http", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69223", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69224", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69225", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-05", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69226", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69227", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69228", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69229", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69230", "ecosystem": "PyPI", "package_name": "aiohttp", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-05", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69255", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-69256", "ecosystem": "npm", "package_name": "serverless", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-31", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-69257", "ecosystem": "crates.io", "package_name": "theshit", "disclosure_at": "2025-12-30", "advisory_at": "2025-12-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-69262", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-69263", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-69264", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-69277", "ecosystem": "Packagist", "package_name": "paragonie/sodium_compat", "disclosure_at": "2025-12-31", "advisory_at": "2025-12-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-69277", "ecosystem": "PyPI", "package_name": "paragonie/sodium_compat", "disclosure_at": "2025-12-31", "advisory_at": "2025-12-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69287", "ecosystem": "npm", "package_name": "@bsv/sdk", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-69413", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2026-01-01", "advisory_at": "2026-01-01", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-69534", "ecosystem": "PyPI", "package_name": "markdown", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6965", "ecosystem": "NuGet", "package_name": "SQLitePCLRaw.lib.e_sqlite3", "disclosure_at": "2025-07-15", "advisory_at": "2025-07-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-69662", "ecosystem": "PyPI", "package_name": "geopandas", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69725", "ecosystem": "Go", "package_name": "github.com/go-chi/chi/v5", "disclosure_at": "2026-02-19", "advisory_at": "2026-01-14", "lag_days": -36, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-6984", "ecosystem": "PyPI", "package_name": "langchain-community", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-6985", "ecosystem": "PyPI", "package_name": "langchain-text-splitters", "disclosure_at": "2025-10-06", "advisory_at": "2025-10-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69872", "ecosystem": "PyPI", "package_name": "diskcache", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69873", "ecosystem": "npm", "package_name": "ajv", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 2.899999999999999911182158029987476766109466552734375, "source_registry": "npm" }, { "cve_id": "CVE-2025-69874", "ecosystem": "npm", "package_name": "nanotar", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-69970", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-69971", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-6998", "ecosystem": "PyPI", "package_name": "calibreweb", "disclosure_at": "2025-07-24", "advisory_at": "2025-07-24", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-69981", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-69983", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-69985", "ecosystem": "npm", "package_name": "@frangoteam/fuxa", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-70050", "ecosystem": "PyPI", "package_name": "lesspass", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-70058", "ecosystem": "npm", "package_name": "yapi-vendor", "disclosure_at": "2026-02-23", "advisory_at": "2026-02-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2025-7030", "ecosystem": "Packagist", "package_name": "drupal/tfa", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-02", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7031", "ecosystem": "Packagist", "package_name": "drupal/config_pages_viewer", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-02", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7053", "ecosystem": "Packagist", "package_name": "cockpit-hq/cockpit", "disclosure_at": "2025-07-04", "advisory_at": "2025-07-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7054", "ecosystem": "crates.io", "package_name": "quiche", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-70559", "ecosystem": "PyPI", "package_name": "pdfminer-six", "disclosure_at": "2026-02-03", "advisory_at": "2025-11-07", "lag_days": -88, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-70560", "ecosystem": "PyPI", "package_name": "boltz", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-70791", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-70792", "ecosystem": "Packagist", "package_name": "microweber/microweber", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-70849", "ecosystem": "Go", "package_name": "github.com/stefanprodan/podinfo", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-70887", "ecosystem": "PyPI", "package_name": "signify", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-70948", "ecosystem": "npm", "package_name": "@perfood/couch-auth", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-70949", "ecosystem": "npm", "package_name": "@perfood/couch-auth", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-70952", "ecosystem": "Maven", "package_name": "org.pf4j:pf4j", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-70958", "ecosystem": "Packagist", "package_name": "intelliants/subrion", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-70959", "ecosystem": "PyPI", "package_name": "tendenci", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-70960", "ecosystem": "PyPI", "package_name": "tendenci", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-70963", "ecosystem": "Go", "package_name": "github.com/gophish/gophish", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-70974", "ecosystem": "Maven", "package_name": "com.alibaba:fastjson", "disclosure_at": "2026-01-09", "advisory_at": "2026-01-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Maven" }, { "cve_id": "CVE-2025-71176", "ecosystem": "PyPI", "package_name": "pytest", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71177", "ecosystem": "Packagist", "package_name": "lavalite/cms", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-71319", "ecosystem": "npm", "package_name": "image-size", "disclosure_at": null, "advisory_at": "2025-04-02", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71320", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71321", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71322", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71323", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71324", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-09-15", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71325", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-12", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71327", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-11-17", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71328", "ecosystem": "npm", "package_name": "flowise-ui", "disclosure_at": null, "advisory_at": "2025-11-14", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71331", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-10-03", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71332", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-04-07", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71334", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-09-15", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71335", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-11-14", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71336", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2025-09-15", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71337", "ecosystem": "npm", "package_name": "flowise-ui", "disclosure_at": null, "advisory_at": "2025-11-14", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71339", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71340", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71341", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71342", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71343", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71344", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71345", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71347", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71348", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71349", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71350", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71351", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-04-07", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71352", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71353", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71354", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71355", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-04-07", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71356", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71357", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71358", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71359", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71360", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71361", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71362", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71363", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71364", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71365", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71366", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71367", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71368", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71369", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71370", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-22", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71371", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71372", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71373", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71374", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71375", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-12-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71376", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71378", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2025-08-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71379", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": null, "advisory_at": "2025-05-28", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-71380", "ecosystem": "npm", "package_name": "n8n-nodes-base", "disclosure_at": null, "advisory_at": "2025-10-09", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71381", "ecosystem": "npm", "package_name": "hono", "disclosure_at": null, "advisory_at": "2025-10-24", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71391", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-10", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71392", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-11", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71393", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-10", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71394", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-10", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71395", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-11", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71396", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-11", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71397", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-11", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71398", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2025-04-11", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-71399", "ecosystem": "npm", "package_name": "better-auth", "disclosure_at": null, "advisory_at": "2025-12-16", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71400", "ecosystem": "npm", "package_name": "@better-auth/passkey", "disclosure_at": null, "advisory_at": "2025-11-25", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71401", "ecosystem": "npm", "package_name": "better-auth", "disclosure_at": null, "advisory_at": "2025-12-01", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-71402", "ecosystem": "npm", "package_name": "better-auth", "disclosure_at": null, "advisory_at": "2025-11-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-7195", "ecosystem": "Go", "package_name": "github.com/operator-framework/operator-sdk", "disclosure_at": "2025-08-07", "advisory_at": "2025-08-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-7338", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-7339", "ecosystem": "npm", "package_name": "on-headers", "disclosure_at": "2025-07-17", "advisory_at": "2025-07-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3.399999999999999911182158029987476766109466552734375, "source_registry": "npm" }, { "cve_id": "CVE-2025-7346", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2025-07-08", "advisory_at": "2025-07-08", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-7365", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-07-10", "advisory_at": "2025-07-30", "lag_days": 20, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2025-7392", "ecosystem": "Packagist", "package_name": "drupal/cookies_addons", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-09", "lag_days": -12, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7393", "ecosystem": "Packagist", "package_name": "drupal/mail_login", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-09", "lag_days": -12, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7404", "ecosystem": "PyPI", "package_name": "calibreweb", "disclosure_at": "2025-07-24", "advisory_at": "2025-07-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-7445", "ecosystem": "Go", "package_name": "sigs.k8s.io/secrets-store-sync-controller", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-7453", "ecosystem": "Go", "package_name": "github.com/saltbo/zpan", "disclosure_at": "2025-07-11", "advisory_at": "2025-07-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-7647", "ecosystem": "PyPI", "package_name": "llama-index-core", "disclosure_at": "2025-09-27", "advisory_at": "2025-09-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-7707", "ecosystem": "PyPI", "package_name": "llama-index", "disclosure_at": "2025-10-13", "advisory_at": "2025-10-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-7715", "ecosystem": "Packagist", "package_name": "drupal/block_attributes", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-16", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7716", "ecosystem": "Packagist", "package_name": "drupal/yoast_seo", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-16", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7717", "ecosystem": "Packagist", "package_name": "drupal/file_download", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-16", "lag_days": -5, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7783", "ecosystem": "npm", "package_name": "form-data", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-21", "lag_days": 3, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-7784", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-30", "lag_days": 12, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-7787", "ecosystem": "Maven", "package_name": "com.xuxueli:xxl-job-core", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-7789", "ecosystem": "Maven", "package_name": "com.xuxueli:xxl-job-admin", "disclosure_at": "2025-07-18", "advisory_at": "2025-07-18", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2025-7885", "ecosystem": "PyPI", "package_name": "webssh", "disclosure_at": "2025-07-20", "advisory_at": "2025-07-20", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-7899", "ecosystem": "Packagist", "package_name": "in2code/powermail", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7900", "ecosystem": "Packagist", "package_name": "in2code/femanager", "disclosure_at": "2025-07-22", "advisory_at": "2025-07-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7954", "ecosystem": "Packagist", "package_name": "shopware/platform", "disclosure_at": "2025-08-06", "advisory_at": "2025-08-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-7962", "ecosystem": "Maven", "package_name": "org.eclipse.angus:smtp", "disclosure_at": "2025-07-21", "advisory_at": "2025-07-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-8020", "ecosystem": "npm", "package_name": "private-ip", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-8021", "ecosystem": "npm", "package_name": "files-bucket-server", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-8022", "ecosystem": "npm", "package_name": "bun", "disclosure_at": "2025-07-23", "advisory_at": "2025-07-23", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-8023", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-8077", "ecosystem": "Go", "package_name": "github.com/neuvector/neuvector", "disclosure_at": "2025-09-17", "advisory_at": "2025-08-28", "lag_days": -20, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-8082", "ecosystem": "npm", "package_name": "vuetify", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-8083", "ecosystem": "npm", "package_name": "vuetify", "disclosure_at": "2025-12-12", "advisory_at": "2025-12-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-8092", "ecosystem": "Packagist", "package_name": "drupal/cookies", "disclosure_at": "2025-08-15", "advisory_at": "2025-07-23", "lag_days": -23, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8093", "ecosystem": "Packagist", "package_name": "drupal/alogin", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8101", "ecosystem": "npm", "package_name": "linkifyjs", "disclosure_at": "2025-07-25", "advisory_at": "2025-07-26", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-8110", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2025-12-10", "advisory_at": "2025-12-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2025-8129", "ecosystem": "npm", "package_name": "koa", "disclosure_at": "2025-07-25", "advisory_at": "2025-07-29", "lag_days": 4, "severity": "LOW", "cvss_score": 3.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-8183", "ecosystem": "PyPI", "package_name": "pyd3tn", "disclosure_at": "2025-07-25", "advisory_at": "2025-07-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-8264", "ecosystem": "Packagist", "package_name": "z-push/z-push-dev", "disclosure_at": "2025-07-29", "advisory_at": "2025-07-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 9, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8267", "ecosystem": "npm", "package_name": "ssrfcheck", "disclosure_at": "2025-07-28", "advisory_at": "2025-07-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2025-8283", "ecosystem": "crates.io", "package_name": "netavark", "disclosure_at": "2025-07-28", "advisory_at": "2025-07-28", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-8285", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-confluence", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "Go" }, { "cve_id": "CVE-2025-8341", "ecosystem": "Go", "package_name": "github.com/grafana/grafana-infinity-datasource", "disclosure_at": "2025-08-04", "advisory_at": "2025-08-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2025-8361", "ecosystem": "Packagist", "package_name": "drupal/config_pages", "disclosure_at": "2025-08-15", "advisory_at": "2025-07-30", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8362", "ecosystem": "Packagist", "package_name": "drupal/gtm", "disclosure_at": "2025-08-15", "advisory_at": "2025-07-30", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8396", "ecosystem": "Go", "package_name": "go.temporal.io/server", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2025-8402", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2025-8406", "ecosystem": "PyPI", "package_name": "zenml", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-8419", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2025-08-06", "advisory_at": "2025-09-17", "lag_days": 42, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-8556", "ecosystem": "Go", "package_name": "github.com/cloudflare/circl", "disclosure_at": "2025-08-06", "advisory_at": "2025-06-10", "lag_days": -57, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2025-8571", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-06", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8573", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2025-08-05", "advisory_at": "2025-08-06", "lag_days": 1, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8671", "ecosystem": "crates.io", "package_name": "pingora-core", "disclosure_at": "2025-08-13", "advisory_at": "2025-09-17", "lag_days": 35, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2025-8675", "ecosystem": "Packagist", "package_name": "drupal/ai_seo_link_advisor", "disclosure_at": "2025-08-15", "advisory_at": "2025-08-06", "lag_days": -9, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8678", "ecosystem": "Packagist", "package_name": "johnbillion/wp-crontrol", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-19", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8709", "ecosystem": "PyPI", "package_name": "langgraph-checkpoint-sqlite", "disclosure_at": "2025-10-26", "advisory_at": "2025-10-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-8747", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2025-08-11", "advisory_at": "2025-08-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-8869", "ecosystem": "PyPI", "package_name": "pip", "disclosure_at": "2025-09-24", "advisory_at": "2025-09-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-8885", "ecosystem": "Maven", "package_name": "org.bouncycastle:bcprov-jdk14", "disclosure_at": "2025-08-12", "advisory_at": "2025-08-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-8916", "ecosystem": "Maven", "package_name": "org.bouncycastle:bcpkix-jdk15on", "disclosure_at": "2025-08-13", "advisory_at": "2025-08-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-8917", "ecosystem": "PyPI", "package_name": "clearml", "disclosure_at": "2025-10-05", "advisory_at": "2025-10-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-8943", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2025-8959", "ecosystem": "Go", "package_name": "github.com/hashicorp/go-getter", "disclosure_at": "2025-08-15", "advisory_at": "2025-08-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-8995", "ecosystem": "Packagist", "package_name": "drupal/alogin", "disclosure_at": "2025-08-15", "advisory_at": "2025-08-13", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-8996", "ecosystem": "Packagist", "package_name": "drupal/layout_builder_perms", "disclosure_at": "2025-08-15", "advisory_at": "2025-08-13", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9039", "ecosystem": "Go", "package_name": "github.com/aws/amazon-ecs-agent", "disclosure_at": "2025-08-14", "advisory_at": "2025-08-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-9072", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-9076", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2025-9078", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2025-9079", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2025-9081", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-boards", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-9084", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2025-09-15", "advisory_at": "2025-09-15", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2025-9092", "ecosystem": "Maven", "package_name": "org.bouncycastle:bc-fips", "disclosure_at": "2025-08-16", "advisory_at": "2025-08-16", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9095", "ecosystem": "npm", "package_name": "express-gateway", "disclosure_at": "2025-08-17", "advisory_at": "2025-08-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 3.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-9096", "ecosystem": "npm", "package_name": "express-gateway", "disclosure_at": "2025-08-18", "advisory_at": "2025-08-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-9141", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": null, "advisory_at": "2025-08-21", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-9162", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-model-storage-services", "disclosure_at": "2025-08-21", "advisory_at": "2025-10-08", "lag_days": 48, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9262", "ecosystem": "npm", "package_name": "@wong2/mcp-cli", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-21", "lag_days": 1, "severity": "LOW", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-9263", "ecosystem": "Maven", "package_name": "com.xuxueli:xxl-job-admin", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-21", "lag_days": 1, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9264", "ecosystem": "Maven", "package_name": "com.xuxueli:xxl-job-admin", "disclosure_at": "2025-08-21", "advisory_at": "2025-08-21", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9287", "ecosystem": "npm", "package_name": "cipher-base", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-21", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-9288", "ecosystem": "npm", "package_name": "sha.js", "disclosure_at": "2025-08-20", "advisory_at": "2025-08-21", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2025-9340", "ecosystem": "Maven", "package_name": "org.bouncycastle:bc-fips", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9341", "ecosystem": "Maven", "package_name": "org.bouncycastle:bc-fips", "disclosure_at": "2025-08-22", "advisory_at": "2025-08-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9467", "ecosystem": "Maven", "package_name": "com.vaadin:vaadin-server", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9549", "ecosystem": "Packagist", "package_name": "drupal/facets", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9550", "ecosystem": "Packagist", "package_name": "drupal/facets", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9551", "ecosystem": "Packagist", "package_name": "drupal/protected_pages", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9552", "ecosystem": "Packagist", "package_name": "drupal/sync_composer_with_contrib", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9553", "ecosystem": "Packagist", "package_name": "drupal/api_key_manager", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9554", "ecosystem": "Packagist", "package_name": "drupal/owlcarousel2", "disclosure_at": "2025-10-10", "advisory_at": "2025-08-27", "lag_days": -44, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9566", "ecosystem": "Go", "package_name": "github.com/containers/podman/v5", "disclosure_at": "2025-09-05", "advisory_at": "2025-09-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2025-9611", "ecosystem": "npm", "package_name": "@playwright/mcp", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2025-9624", "ecosystem": "Maven", "package_name": "org.opensearch:opensearch-common", "disclosure_at": "2025-11-25", "advisory_at": "2025-11-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9636", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2025-09-04", "advisory_at": "2025-09-05", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-9654", "ecosystem": "npm", "package_name": "@aiondadotcom/mcp-ssh", "disclosure_at": "2025-08-29", "advisory_at": "2025-08-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2025-9708", "ecosystem": "NuGet", "package_name": "KubernetesClient", "disclosure_at": "2025-09-16", "advisory_at": "2025-09-17", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2025-9784", "ecosystem": "Maven", "package_name": "io.undertow:undertow-core", "disclosure_at": "2025-09-02", "advisory_at": "2025-09-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2025-9821", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9822", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9823", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9824", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2025-09-03", "advisory_at": "2025-09-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2025-9862", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2025-09-17", "advisory_at": "2025-09-15", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2025-9905", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-9906", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2025-09-19", "advisory_at": "2025-09-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2025-9910", "ecosystem": "npm", "package_name": "jsondiffpatch", "disclosure_at": "2025-09-11", "advisory_at": "2025-09-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2025-9954", "ecosystem": "Packagist", "package_name": "drupal/acquia_dam", "disclosure_at": "2025-10-30", "advisory_at": "2025-09-03", "lag_days": -57, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0528", "ecosystem": "Go", "package_name": "github.com/elastic/beats/v7", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-0540", "ecosystem": "npm", "package_name": "dompurify", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-0558", "ecosystem": "PyPI", "package_name": "lollms", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-29", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0560", "ecosystem": "PyPI", "package_name": "lollms", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0562", "ecosystem": "PyPI", "package_name": "lollms", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0596", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0599", "ecosystem": "PyPI", "package_name": "text-generation", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0603", "ecosystem": "Maven", "package_name": "org.hibernate:hibernate-core", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-0621", "ecosystem": "npm", "package_name": "@modelcontextprotocol/sdk", "disclosure_at": "2026-01-05", "advisory_at": "2026-01-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-0650", "ecosystem": "Go", "package_name": "github.com/openflagr/flagr", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-0707", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-parent", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-0770", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0775", "ecosystem": "npm", "package_name": "npm", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "npm" }, { "cve_id": "CVE-2026-0798", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "LOW", "cvss_score": 3.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-0810", "ecosystem": "crates.io", "package_name": "gix-date", "disclosure_at": "2026-01-26", "advisory_at": "2025-12-29", "lag_days": -28, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-0824", "ecosystem": "npm", "package_name": "@questdb/web-console", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-10", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-0846", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0847", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0848", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0858", "ecosystem": "Maven", "package_name": "net.sourceforge.plantuml:plantuml", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-0859", "ecosystem": "Packagist", "package_name": "typo3/cms-core", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0871", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-server-spi-private", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-0895", "ecosystem": "Packagist", "package_name": "cpsit/typo3-mailqueue", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-21", "lag_days": 1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0897", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0933", "ecosystem": "npm", "package_name": "wrangler", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-21", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-0944", "ecosystem": "Packagist", "package_name": "drupal/ginvite", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-14", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0945", "ecosystem": "Packagist", "package_name": "drupal/role_delegation", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-14", "lag_days": -21, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0946", "ecosystem": "Packagist", "package_name": "drupal/atsmarttag", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-14", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0947", "ecosystem": "Packagist", "package_name": "drupal/pianoanalytics", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-14", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0948", "ecosystem": "Packagist", "package_name": "drupal/social_auth_entra_id", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-14", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-0969", "ecosystem": "npm", "package_name": "next-mdx-remote", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-0976", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-quarkus-server", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-0980", "ecosystem": "RubyGems", "package_name": "rubyipmi", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-0994", "ecosystem": "PyPI", "package_name": "protobuf", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-0997", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-zoom", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-0998", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-zoom", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-0999", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-1002", "ecosystem": "Maven", "package_name": "io.vertx:vertx-core", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1035", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1050", "ecosystem": "Maven", "package_name": "net.risesoft:risenet-y9boot-support-platform-service", "disclosure_at": "2026-01-17", "advisory_at": "2026-01-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1117", "ecosystem": "PyPI", "package_name": "lollms", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1180", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-adapter-core", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1190", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1193", "ecosystem": "Packagist", "package_name": "mineadmin/mineadmin", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1194", "ecosystem": "Packagist", "package_name": "mineadmin/mineadmin", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1195", "ecosystem": "Packagist", "package_name": "mineadmin/mineadmin", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "LOW", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1196", "ecosystem": "Packagist", "package_name": "mineadmin/mineadmin", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1207", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1213", "ecosystem": "PyPI", "package_name": "askbot", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1217", "ecosystem": "Packagist", "package_name": "yoast/duplicate-post", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1225", "ecosystem": "Maven", "package_name": "ch.qos.logback:logback-core", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1229", "ecosystem": "Go", "package_name": "github.com/cloudflare/circl", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-25", "lag_days": 1, "severity": "LOW", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-1237", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-29", "lag_days": 1, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-1245", "ecosystem": "npm", "package_name": "binary-parser", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-1260", "ecosystem": "PyPI", "package_name": "sentencepiece", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1285", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1287", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1312", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1323", "ecosystem": "Packagist", "package_name": "cpsit/typo3-mailqueue", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-18", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1337", "ecosystem": "Maven", "package_name": "org.neo4j:neo4j", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1470", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-1486", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1513", "ecosystem": "npm", "package_name": "billboard.js", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-1518", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-parent", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1525", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-1526", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-1527", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-1528", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-1529", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1530", "ecosystem": "RubyGems", "package_name": "fog-kubevirt", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-1531", "ecosystem": "RubyGems", "package_name": "foreman_kubevirt", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-1553", "ecosystem": "Packagist", "package_name": "drupal/canvas", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-28", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1554", "ecosystem": "Packagist", "package_name": "drupal/cas_server", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-28", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-1580", "ecosystem": "Go", "package_name": "k8s.io/ingress-nginx", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-1605", "ecosystem": "Maven", "package_name": "org.eclipse.jetty:jetty-server", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1615", "ecosystem": "npm", "package_name": "jsonpath", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-1622", "ecosystem": "Maven", "package_name": "org.neo4j:neo4j", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1664", "ecosystem": "npm", "package_name": "agents", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-1669", "ecosystem": "PyPI", "package_name": "keras", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-12", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1703", "ecosystem": "PyPI", "package_name": "pip", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1707", "ecosystem": "PyPI", "package_name": "pgadmin4", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1709", "ecosystem": "PyPI", "package_name": "keylime", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1721", "ecosystem": "npm", "package_name": "agents", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-1770", "ecosystem": "Maven", "package_name": "org.craftercms:craftercms", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1774", "ecosystem": "npm", "package_name": "@casl/ability", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-1776", "ecosystem": "RubyGems", "package_name": "camaleon_cms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-1777", "ecosystem": "PyPI", "package_name": "sagemaker", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-1778", "ecosystem": "PyPI", "package_name": "sagemaker", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-18401", "ecosystem": "Maven", "package_name": "tools.jackson.core:jackson-core", "disclosure_at": null, "advisory_at": "2026-02-28", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-1917", "ecosystem": "Packagist", "package_name": "drupal/login_disable", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-04", "lag_days": -49, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2033", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-21", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-20719", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-20736", "ecosystem": "Go", "package_name": "code.gitea.io/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "LOW", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-20750", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-20796", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2026-20800", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-20883", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-20888", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-20897", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-20904", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-20912", "ecosystem": "Go", "package_name": "github.com/go-gitea/gitea", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-23", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-2092", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-saml-adapter-core", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-21218", "ecosystem": "NuGet", "package_name": "System.Security.Cryptography.Cose", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-21226", "ecosystem": "PyPI", "package_name": "azure-core", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2130", "ecosystem": "npm", "package_name": "mcp-maigret", "disclosure_at": "2026-02-08", "advisory_at": "2026-02-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-21386", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-21434", "ecosystem": "Go", "package_name": "github.com/quic-go/webtransport-go", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-21435", "ecosystem": "Go", "package_name": "github.com/quic-go/webtransport-go", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-21438", "ecosystem": "Go", "package_name": "github.com/quic-go/webtransport-go", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-21439", "ecosystem": "PyPI", "package_name": "badkeys", "disclosure_at": "2026-01-06", "advisory_at": "2026-01-05", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21440", "ecosystem": "npm", "package_name": "@adonisjs/bodyparser", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-21441", "ecosystem": "PyPI", "package_name": "urllib3", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21445", "ecosystem": "PyPI", "package_name": "langflow-base", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21446", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21447", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21448", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21449", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21450", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21451", "ecosystem": "Packagist", "package_name": "bagisto/bagisto", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21452", "ecosystem": "Maven", "package_name": "org.msgpack:msgpack-core", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-05", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-21483", "ecosystem": "Go", "package_name": "github.com/knadh/listmonk", "disclosure_at": "2026-01-02", "advisory_at": "2026-01-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-21531", "ecosystem": "PyPI", "package_name": "azure-ai-language-conversations-authoring", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21696", "ecosystem": "Go", "package_name": "github.com/pterodactyl/wings", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-21724", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-2178", "ecosystem": "npm", "package_name": "xcode-mcp-server", "disclosure_at": "2026-02-08", "advisory_at": "2026-02-08", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-21851", "ecosystem": "PyPI", "package_name": "monai", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21852", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-21857", "ecosystem": "Packagist", "package_name": "redaxo/source", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-05", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21858", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-21859", "ecosystem": "Go", "package_name": "github.com/axllent/mailpit", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-06", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-21860", "ecosystem": "PyPI", "package_name": "werkzeug", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21861", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-21862", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-21871", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21872", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21873", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21874", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21877", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-06", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-21882", "ecosystem": "crates.io", "package_name": "theshit", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-21883", "ecosystem": "PyPI", "package_name": "bokeh", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-06", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21884", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-21885", "ecosystem": "Go", "package_name": "miniflux.app/v2", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-21886", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21887", "ecosystem": "PyPI", "package_name": "pycti", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21889", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21892", "ecosystem": "PyPI", "package_name": "parsl", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-06", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-21893", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-21894", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-21895", "ecosystem": "crates.io", "package_name": "rsa", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-06", "lag_days": -2, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-21896", "ecosystem": "Packagist", "package_name": "getkirby/cms", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-22022", "ecosystem": "Maven", "package_name": "org.apache.solr:solr-core", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22028", "ecosystem": "npm", "package_name": "preact", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22029", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "HIGH", "cvss_score": 8, "source_registry": "npm" }, { "cve_id": "CVE-2026-22030", "ecosystem": "npm", "package_name": "react-router", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22031", "ecosystem": "npm", "package_name": "@fastify/middie", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-22032", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-06", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-22033", "ecosystem": "PyPI", "package_name": "label-studio", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22036", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-22037", "ecosystem": "npm", "package_name": "@fastify/express", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-22039", "ecosystem": "Go", "package_name": "github.com/kyverno/kyverno", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-22041", "ecosystem": "PyPI", "package_name": "loggingredactor", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22042", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22043", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22045", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-22168", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-02", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22169", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22170", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-04", "lag_days": -14, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22171", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-22172", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-13", "lag_days": -7, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-22174", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-22175", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-02", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22176", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22177", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22178", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-02", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22179", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22180", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-22181", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22186", "ecosystem": "Maven", "package_name": "ome:pom-bio-formats", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22187", "ecosystem": "Maven", "package_name": "ome:pom-bio-formats", "disclosure_at": "2026-01-07", "advisory_at": "2026-01-07", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22217", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22218", "ecosystem": "PyPI", "package_name": "chainlit", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22219", "ecosystem": "PyPI", "package_name": "chainlit", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22242", "ecosystem": "Packagist", "package_name": "coreshop/core-shop", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-22243", "ecosystem": "Packagist", "package_name": "egroupware/egroupware", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-22244", "ecosystem": "Maven", "package_name": "org.open-metadata:platform", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-07", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22250", "ecosystem": "PyPI", "package_name": "wlc", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "LOW", "cvss_score": 2.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22251", "ecosystem": "PyPI", "package_name": "wlc", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22253", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-22254", "ecosystem": "Packagist", "package_name": "winter/wn-cms-module", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-04", "lag_days": -2, "severity": "LOW", "cvss_score": 0, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-22256", "ecosystem": "crates.io", "package_name": "salvo", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22257", "ecosystem": "crates.io", "package_name": "salvo", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-2229", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22444", "ecosystem": "Maven", "package_name": "org.apache.solr:solr-core", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22545", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2026-2256", "ecosystem": "PyPI", "package_name": "ms-agent", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22584", "ecosystem": "PyPI", "package_name": "uni2ts", "disclosure_at": "2026-01-09", "advisory_at": "2026-01-10", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22588", "ecosystem": "RubyGems", "package_name": "spree_api", "disclosure_at": "2026-01-08", "advisory_at": "2026-01-08", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-22589", "ecosystem": "RubyGems", "package_name": "spree_core", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-22592", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-22594", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22595", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22596", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22597", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-08", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22606", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22607", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22608", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22609", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22610", "ecosystem": "npm", "package_name": "@angular/compiler", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22611", "ecosystem": "NuGet", "package_name": "AWSSDK.Core", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-22612", "ecosystem": "PyPI", "package_name": "fickling", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22686", "ecosystem": "npm", "package_name": "enclave-vm", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-22687", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-22688", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-22689", "ecosystem": "Go", "package_name": "github.com/axllent/mailpit", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-22690", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22691", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22696", "ecosystem": "PyPI", "package_name": "dcap-qvl", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22696", "ecosystem": "crates.io", "package_name": "dcap-qvl", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22696", "ecosystem": "npm", "package_name": "dcap-qvl", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-22698", "ecosystem": "crates.io", "package_name": "sm2", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22699", "ecosystem": "crates.io", "package_name": "sm2", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22700", "ecosystem": "crates.io", "package_name": "sm2", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22701", "ecosystem": "PyPI", "package_name": "filelock", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22702", "ecosystem": "PyPI", "package_name": "virtualenv", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22703", "ecosystem": "Go", "package_name": "github.com/sigstore/cosign/v3", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-22704", "ecosystem": "npm", "package_name": "@haxtheweb/haxcms-nodejs", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 8, "source_registry": "npm" }, { "cve_id": "CVE-2026-22705", "ecosystem": "crates.io", "package_name": "ml-dsa", "disclosure_at": "2026-01-10", "advisory_at": "2025-12-12", "lag_days": -29, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22709", "ecosystem": "npm", "package_name": "vm2", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22723", "ecosystem": "Maven", "package_name": "org.cloudfoundry.identity:cloudfoundry-identity-server", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22728", "ecosystem": "Go", "package_name": "github.com/bitnami-labs/sealed-secrets", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-22729", "ecosystem": "Maven", "package_name": "org.springframework.ai:spring-ai-vector-store", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22730", "ecosystem": "Maven", "package_name": "org.springframework.ai:spring-ai-mariadb-store", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22731", "ecosystem": "Maven", "package_name": "org.springframework.boot:spring-boot-starter-actuator", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22732", "ecosystem": "Maven", "package_name": "org.springframework.security:spring-security-web", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-20", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22733", "ecosystem": "Maven", "package_name": "org.springframework.boot:spring-boot-starter-actuator", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22735", "ecosystem": "Maven", "package_name": "org.springframework:spring-webmvc", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "LOW", "cvss_score": 2.600000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22737", "ecosystem": "Maven", "package_name": "org.springframework:spring-webmvc", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22738", "ecosystem": "Maven", "package_name": "org.springframework.ai:spring-ai-vector-store", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22739", "ecosystem": "Maven", "package_name": "org.springframework.cloud:spring-cloud-config-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22742", "ecosystem": "Maven", "package_name": "org.springframework.ai:spring-ai-bedrock-converse", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22743", "ecosystem": "Maven", "package_name": "org.springframework.ai:spring-ai-neo4j-store", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22744", "ecosystem": "Maven", "package_name": "org.springframework.ai:spring-ai-redis-store", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-22770", "ecosystem": "NuGet", "package_name": "Magick.NET-Q8-x64", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-22771", "ecosystem": "Go", "package_name": "github.com/envoyproxy/gateway", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-22772", "ecosystem": "Go", "package_name": "github.com/sigstore/fulcio", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-22773", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22774", "ecosystem": "npm", "package_name": "devalue", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22775", "ecosystem": "npm", "package_name": "devalue", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22777", "ecosystem": "PyPI", "package_name": "comfy-cli", "disclosure_at": "2026-01-10", "advisory_at": "2026-01-13", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22778", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22779", "ecosystem": "PyPI", "package_name": "blacksheep", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22782", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22785", "ecosystem": "npm", "package_name": "@orval/mcp", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22786", "ecosystem": "Go", "package_name": "github.com/flipped-aurora/gin-vue-admin", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-22787", "ecosystem": "npm", "package_name": "html2pdf.js", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22798", "ecosystem": "PyPI", "package_name": "hermes", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22803", "ecosystem": "npm", "package_name": "@sveltejs/kit", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22807", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22808", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-22809", "ecosystem": "npm", "package_name": "tarteaucitronjs", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-22812", "ecosystem": "npm", "package_name": "opencode-ai", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22813", "ecosystem": "npm", "package_name": "opencode-ai", "disclosure_at": "2026-01-12", "advisory_at": "2026-01-13", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-22814", "ecosystem": "npm", "package_name": "@adonisjs/lucid", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-22817", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-22818", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-22819", "ecosystem": "npm", "package_name": "outray", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-13", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-22820", "ecosystem": "npm", "package_name": "outray", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-13", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-22822", "ecosystem": "Go", "package_name": "github.com/external-secrets/external-secrets", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-20", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-22860", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-22862", "ecosystem": "Go", "package_name": "github.com/ethereum/go-ethereum", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-22863", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-16", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22864", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-16", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-22866", "ecosystem": "npm", "package_name": "@ensdomains/ens-contracts", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-22868", "ecosystem": "Go", "package_name": "github.com/ethereum/go-ethereum", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-22870", "ecosystem": "PyPI", "package_name": "guarddog", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22871", "ecosystem": "PyPI", "package_name": "guarddog", "disclosure_at": "2026-01-13", "advisory_at": "2026-01-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-22892", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-22922", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2293", "ecosystem": "npm", "package_name": "@nestjs/platform-fastify", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-02", "lag_days": 3, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-2303", "ecosystem": "Go", "package_name": "go.mongodb.org/mongo-driver", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-2327", "ecosystem": "npm", "package_name": "markdown-it", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-23476", "ecosystem": "Packagist", "package_name": "facturascripts/facturascripts", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2348", "ecosystem": "Packagist", "package_name": "drupal/quickedit", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-11", "lag_days": -42, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2349", "ecosystem": "Packagist", "package_name": "drupal/ui_icons", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-11", "lag_days": -42, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23490", "ecosystem": "PyPI", "package_name": "pyasn1", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23492", "ecosystem": "Packagist", "package_name": "pimcore/pimcore", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23493", "ecosystem": "Packagist", "package_name": "pimcore/pimcore", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23494", "ecosystem": "Packagist", "package_name": "pimcore/pimcore", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23495", "ecosystem": "Packagist", "package_name": "pimcore/admin-ui-classic-bundle", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23496", "ecosystem": "Packagist", "package_name": "pimcore/web2print-tools-bundle", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23498", "ecosystem": "Packagist", "package_name": "shopware/shopware", "disclosure_at": "2026-01-14", "advisory_at": "2026-01-14", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23511", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23515", "ecosystem": "npm", "package_name": "@signalk/set-system-time", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-23517", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-20", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-23518", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-20", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-23519", "ecosystem": "crates.io", "package_name": "cmov", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-14", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-23520", "ecosystem": "Go", "package_name": "github.com/getarcaneapp/arcane/backend", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2026-23522", "ecosystem": "npm", "package_name": "@lobehub/chat", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-23524", "ecosystem": "Packagist", "package_name": "laravel/reverb", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23527", "ecosystem": "npm", "package_name": "h3", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-23528", "ecosystem": "PyPI", "package_name": "distributed", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23535", "ecosystem": "PyPI", "package_name": "wlc", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23552", "ecosystem": "Maven", "package_name": "org.apache.camel:camel-keycloak", "disclosure_at": "2026-02-23", "advisory_at": "2026-02-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2359", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23622", "ecosystem": "Packagist", "package_name": "alextselegidis/easyappointments", "disclosure_at": "2026-01-15", "advisory_at": "2026-01-15", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23626", "ecosystem": "Packagist", "package_name": "kimai/kimai", "disclosure_at": "2026-01-18", "advisory_at": "2026-01-20", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23632", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-23633", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-23634", "ecosystem": "npm", "package_name": "pepr", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-15", "lag_days": -1, "severity": "LOW", "cvss_score": 0, "source_registry": "npm" }, { "cve_id": "CVE-2026-23643", "ecosystem": "Packagist", "package_name": "cakephp/cakephp", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23644", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2026-01-18", "advisory_at": "2026-01-20", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-23645", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-2366", "ecosystem": "Maven", "package_name": "@keycloak/keycloak-admin-client", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2366", "ecosystem": "npm", "package_name": "@keycloak/keycloak-admin-client", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2026-23733", "ecosystem": "npm", "package_name": "@lobehub/chat", "disclosure_at": "2026-01-18", "advisory_at": "2026-01-20", "lag_days": 2, "severity": "CRITICAL", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-23735", "ecosystem": "npm", "package_name": "graphql-modules", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-23736", "ecosystem": "npm", "package_name": "seroval", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-23737", "ecosystem": "npm", "package_name": "seroval", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23742", "ecosystem": "Go", "package_name": "github.com/zalando/skipper", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-23744", "ecosystem": "npm", "package_name": "@mcpjam/inspector", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-23745", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2026-01-16", "advisory_at": "2026-01-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-23794", "ecosystem": "Maven", "package_name": "org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-23795", "ecosystem": "Maven", "package_name": "org.apache.syncope.client.idrepo:syncope-client-idrepo-console", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-23829", "ecosystem": "Go", "package_name": "github.com/axllent/mailpit", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23830", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-27", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-23831", "ecosystem": "Go", "package_name": "github.com/sigstore/rekor", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23833", "ecosystem": "PyPI", "package_name": "esphome", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23835", "ecosystem": "npm", "package_name": "@lobehub/chat", "disclosure_at": "2026-01-30", "advisory_at": "2026-02-01", "lag_days": 2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-23842", "ecosystem": "PyPI", "package_name": "chatterbot", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23845", "ecosystem": "Go", "package_name": "github.com/axllent/mailpit", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23847", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-23849", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23850", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-23851", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-23864", "ecosystem": "npm", "package_name": "react-server-dom-parcel", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-29", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23874", "ecosystem": "NuGet", "package_name": "Magick.NET-Q8-x64", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-21", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-23877", "ecosystem": "PyPI", "package_name": "swingmusic", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23881", "ecosystem": "Go", "package_name": "github.com/kyverno/kyverno", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-23885", "ecosystem": "RubyGems", "package_name": "alchemy_cms", "disclosure_at": "2026-01-19", "advisory_at": "2026-01-21", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-23888", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23889", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23890", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23892", "ecosystem": "PyPI", "package_name": "octoprint", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23897", "ecosystem": "npm", "package_name": "apollo-server", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23901", "ecosystem": "Maven", "package_name": "org.apache.shiro:shiro-core", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "LOW", "cvss_score": 2.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-23903", "ecosystem": "Maven", "package_name": "org.apache.shiro:shiro-spring", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-23906", "ecosystem": "Maven", "package_name": "org.apache.druid.extensions:druid-basic-security", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-23907", "ecosystem": "Maven", "package_name": "org.apache.pdfbox:pdfbox-examples", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2391", "ecosystem": "npm", "package_name": "qs", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-23946", "ecosystem": "PyPI", "package_name": "tendenci", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23947", "ecosystem": "npm", "package_name": "@orval/core", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-21", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-23949", "ecosystem": "PyPI", "package_name": "jaraco-context", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-13", "lag_days": -7, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23950", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2026-01-20", "advisory_at": "2026-01-21", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-23952", "ecosystem": "NuGet", "package_name": "Magick.NET-Q8-x64", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-23953", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23954", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6/cmd/incusd", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23956", "ecosystem": "npm", "package_name": "seroval", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23957", "ecosystem": "npm", "package_name": "seroval", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23959", "ecosystem": "Packagist", "package_name": "coreshop/core-shop", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23960", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-workflows/v3", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-23965", "ecosystem": "npm", "package_name": "sm-crypto", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23966", "ecosystem": "npm", "package_name": "sm-crypto", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-23967", "ecosystem": "npm", "package_name": "sm-crypto", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-23968", "ecosystem": "PyPI", "package_name": "copier", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23969", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23980", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23982", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23983", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "LOW", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23984", "ecosystem": "PyPI", "package_name": "apache-superset", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23986", "ecosystem": "PyPI", "package_name": "copier", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23989", "ecosystem": "Go", "package_name": "github.com/opencloud-eu/reva/v2", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23990", "ecosystem": "Go", "package_name": "github.com/controlplaneio-fluxcd/flux-operator", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-23991", "ecosystem": "Go", "package_name": "github.com/theupdateframework/go-tuf/v2", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-23992", "ecosystem": "Go", "package_name": "github.com/theupdateframework/go-tuf/v2", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-23996", "ecosystem": "PyPI", "package_name": "fastapi-api-key", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-23997", "ecosystem": "Packagist", "package_name": "facturascripts/facturascripts", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-23999", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24001", "ecosystem": "npm", "package_name": "diff", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-14", "lag_days": -8, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24004", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-24005", "ecosystem": "Go", "package_name": "github.com/openkruise/kruise", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "LOW", "cvss_score": 0, "source_registry": "Go" }, { "cve_id": "CVE-2026-24006", "ecosystem": "npm", "package_name": "seroval", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24009", "ecosystem": "PyPI", "package_name": "docling-core", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24015", "ecosystem": "Maven", "package_name": "org.apache.iotdb:iotdb-core", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24040", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24043", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-24046", "ecosystem": "npm", "package_name": "@backstage/backend-defaults", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-24047", "ecosystem": "npm", "package_name": "@backstage/cli-common", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24048", "ecosystem": "npm", "package_name": "@backstage/backend-defaults", "disclosure_at": "2026-01-21", "advisory_at": "2026-01-21", "lag_days": 0, "severity": "LOW", "cvss_score": 3.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24049", "ecosystem": "PyPI", "package_name": "wheel", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24051", "ecosystem": "Go", "package_name": "go.opentelemetry.io/otel/sdk", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "Go" }, { "cve_id": "CVE-2026-24052", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-24053", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24056", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24058", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-21", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24098", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24116", "ecosystem": "crates.io", "package_name": "wasmtime", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-24117", "ecosystem": "Go", "package_name": "github.com/sigstore/rekor", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-24122", "ecosystem": "Go", "package_name": "github.com/sigstore/cosign", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24123", "ecosystem": "PyPI", "package_name": "bentoml", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24124", "ecosystem": "Go", "package_name": "d7y.io/dragonfly/v2", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24125", "ecosystem": "npm", "package_name": "@tinacms/graphql", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24126", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24128", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-web-templates", "disclosure_at": "2026-01-24", "advisory_at": "2026-01-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24130", "ecosystem": "PyPI", "package_name": "moonraker", "disclosure_at": "2026-01-22", "advisory_at": "2026-01-22", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24131", "ecosystem": "npm", "package_name": "pnpm", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24132", "ecosystem": "npm", "package_name": "@orval/mock", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-22", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-24133", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24134", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-27", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24135", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-24137", "ecosystem": "Go", "package_name": "github.com/sigstore/sigstore", "disclosure_at": "2026-01-23", "advisory_at": "2026-01-22", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2415", "ecosystem": "PyPI", "package_name": "pretix", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24157", "ecosystem": "PyPI", "package_name": "nemo-toolkit", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24159", "ecosystem": "PyPI", "package_name": "nemo-toolkit", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24281", "ecosystem": "Maven", "package_name": "org.apache.zookeeper:zookeeper", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24308", "ecosystem": "Maven", "package_name": "org.apache.zookeeper:zookeeper", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-07", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24398", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24400", "ecosystem": "Maven", "package_name": "org.assertj:assertj-core", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24408", "ecosystem": "PyPI", "package_name": "sigstore", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "LOW", "cvss_score": 0, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24415", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24416", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24417", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24418", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24419", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24420", "ecosystem": "Packagist", "package_name": "phpmyfaq/phpmyfaq", "disclosure_at": "2026-01-24", "advisory_at": "2026-01-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24421", "ecosystem": "Packagist", "package_name": "phpmyfaq/phpmyfaq", "disclosure_at": "2026-01-24", "advisory_at": "2026-01-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24422", "ecosystem": "Packagist", "package_name": "phpmyfaq/phpmyfaq", "disclosure_at": "2026-01-24", "advisory_at": "2026-01-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24458", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24470", "ecosystem": "Go", "package_name": "github.com/zalando/skipper", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-24472", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24473", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24481", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24484", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24485", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24486", "ecosystem": "PyPI", "package_name": "python-multipart", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24489", "ecosystem": "PyPI", "package_name": "gakido", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24490", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24512", "ecosystem": "Go", "package_name": "k8s.io/ingress-nginx", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-04", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24513", "ecosystem": "Go", "package_name": "k8s.io/ingress-nginx", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-04", "lag_days": 1, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2026-24514", "ecosystem": "Go", "package_name": "k8s.io/ingress-nginx", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24516", "ecosystem": "Go", "package_name": "github.com/digitalocean/droplet-agent", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-2455", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2456", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2457", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2458", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2461", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-boards", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2463", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-24656", "ecosystem": "Maven", "package_name": "org.apache.karaf.decanter.collector:org.apache.karaf.decanter.collector.log.socket", "disclosure_at": "2026-01-26", "advisory_at": "2026-01-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24686", "ecosystem": "Go", "package_name": "github.com/theupdateframework/go-tuf/v2", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24687", "ecosystem": "NuGet", "package_name": "Umbraco.Forms", "disclosure_at": "2026-01-29", "advisory_at": "2026-01-30", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24688", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2469", "ecosystem": "Packagist", "package_name": "directorytree/imapengine", "disclosure_at": "2026-02-14", "advisory_at": "2026-02-14", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24692", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-24708", "ecosystem": "PyPI", "package_name": "nova", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24713", "ecosystem": "Maven", "package_name": "org.apache.iotdb:iotdb-core", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2472", "ecosystem": "PyPI", "package_name": "google-cloud-aiplatform", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2473", "ecosystem": "PyPI", "package_name": "google-cloud-aiplatform", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-20", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24733", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-coyote", "disclosure_at": "2026-02-17", "advisory_at": "2026-02-17", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24734", "ecosystem": "Maven", "package_name": "org.apache.tomcat:tomcat-coyote", "disclosure_at": "2026-02-17", "advisory_at": "2026-02-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24735", "ecosystem": "Go", "package_name": "github.com/apache/answer", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24737", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-24738", "ecosystem": "Go", "package_name": "github.com/gmrtd/gmrtd", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24739", "ecosystem": "Packagist", "package_name": "symfony/process", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24740", "ecosystem": "Go", "package_name": "github.com/amir20/dozzle", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-24747", "ecosystem": "PyPI", "package_name": "pytorch", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24748", "ecosystem": "Go", "package_name": "github.com/akuity/kargo", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-2476", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-msteams", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-24762", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-24763", "ecosystem": "npm", "package_name": "clawdbot", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-24764", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-24765", "ecosystem": "Packagist", "package_name": "phpunit/phpunit", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24766", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-24767", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-24768", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-24769", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 9, "source_registry": "npm" }, { "cve_id": "CVE-2026-24771", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-24778", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-28", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-24779", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-28", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24780", "ecosystem": "PyPI", "package_name": "agpt", "disclosure_at": "2026-01-29", "advisory_at": "2026-01-29", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-24783", "ecosystem": "crates.io", "package_name": "soroban-fixed-point-math", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-28", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-24784", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24785", "ecosystem": "crates.io", "package_name": "clatter", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-24788", "ecosystem": "Packagist", "package_name": "billz/raspap-webgui", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-24802", "ecosystem": "Maven", "package_name": "com.github.briandilley.jsonrpc4j:jsonrpc4j", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24806", "ecosystem": "Maven", "package_name": "com.github.liuyueyi.media:batik-codec-fix", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24807", "ecosystem": "Maven", "package_name": "com.github.liuyueyi.media:batik-codec-fix", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24819", "ecosystem": "Maven", "package_name": "com.foxinmy:weixin4j-base", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-24834", "ecosystem": "Go", "package_name": "github.com/kata-containers/kata-containers/src/runtime", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24836", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24837", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24838", "ecosystem": "NuGet", "package_name": "DotNetNuke.Core", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-24842", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-24843", "ecosystem": "Go", "package_name": "chainguard.dev/melange", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-24844", "ecosystem": "Go", "package_name": "chainguard.dev/melange", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-24845", "ecosystem": "Go", "package_name": "github.com/chainguard-dev/malcontent", "disclosure_at": "2026-01-29", "advisory_at": "2026-01-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24846", "ecosystem": "Go", "package_name": "github.com/chainguard-dev/malcontent", "disclosure_at": "2026-01-29", "advisory_at": "2026-01-29", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24850", "ecosystem": "crates.io", "package_name": "ml-dsa", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-24851", "ecosystem": "Go", "package_name": "github.com/openfga/openfga", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24884", "ecosystem": "npm", "package_name": "compressing", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-24887", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-24888", "ecosystem": "npm", "package_name": "makerjs", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-29", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-24889", "ecosystem": "crates.io", "package_name": "soroban-sdk", "disclosure_at": "2026-01-28", "advisory_at": "2026-01-28", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-24894", "ecosystem": "Go", "package_name": "github.com/dunglas/frankenphp", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-24895", "ecosystem": "Go", "package_name": "github.com/dunglas/frankenphp", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-24909", "ecosystem": "npm", "package_name": "@vltpkg/tar", "disclosure_at": "2026-01-27", "advisory_at": "2026-01-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25041", "ecosystem": "npm", "package_name": "@budibase/server", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25047", "ecosystem": "npm", "package_name": "deephas", "disclosure_at": "2026-01-29", "advisory_at": "2026-01-29", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25048", "ecosystem": "PyPI", "package_name": "xgrammar", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25049", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25050", "ecosystem": "npm", "package_name": "@vendure/core", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-25051", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25052", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25053", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25054", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25055", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25056", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25059", "ecosystem": "Go", "package_name": "github.com/OpenListTeam/OpenList/v4", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25060", "ecosystem": "Go", "package_name": "github.com/OpenListTeam/OpenList/v4", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25087", "ecosystem": "PyPI", "package_name": "pyarrow", "disclosure_at": "2026-02-17", "advisory_at": "2026-02-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25115", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25120", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25121", "ecosystem": "Go", "package_name": "chainguard.dev/apko", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25122", "ecosystem": "Go", "package_name": "chainguard.dev/apko", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25128", "ecosystem": "npm", "package_name": "fast-xml-parser", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25129", "ecosystem": "Packagist", "package_name": "psy/psysh", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25130", "ecosystem": "PyPI", "package_name": "cai-framework", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25136", "ecosystem": "PyPI", "package_name": "rucio-webui", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25138", "ecosystem": "PyPI", "package_name": "rucio-webui", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25140", "ecosystem": "Go", "package_name": "chainguard.dev/apko", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-26", "lag_days": 22, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25141", "ecosystem": "npm", "package_name": "@orval/core", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25142", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-25143", "ecosystem": "Go", "package_name": "chainguard.dev/melange", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-25145", "ecosystem": "Go", "package_name": "chainguard.dev/melange", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25148", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25149", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25150", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25151", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25152", "ecosystem": "npm", "package_name": "@backstage/plugin-techdocs-node", "disclosure_at": "2026-01-30", "advisory_at": "2026-02-02", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-25153", "ecosystem": "npm", "package_name": "@backstage/plugin-techdocs-node", "disclosure_at": "2026-01-30", "advisory_at": "2026-02-02", "lag_days": 3, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25155", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25157", "ecosystem": "npm", "package_name": "clawdbot", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25160", "ecosystem": "Go", "package_name": "github.com/alist-org/alist/v3", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25161", "ecosystem": "Go", "package_name": "github.com/alist-org/alist/v3", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25198", "ecosystem": "PyPI", "package_name": "web2py", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25211", "ecosystem": "PyPI", "package_name": "llama-stack", "disclosure_at": "2026-01-30", "advisory_at": "2026-01-30", "lag_days": 0, "severity": "LOW", "cvss_score": 3.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25223", "ecosystem": "npm", "package_name": "fastify", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25224", "ecosystem": "npm", "package_name": "fastify", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25228", "ecosystem": "npm", "package_name": "signalk-server", "disclosure_at": "2026-02-02", "advisory_at": "2026-02-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25229", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25232", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25242", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25253", "ecosystem": "npm", "package_name": "clawdbot", "disclosure_at": "2026-02-01", "advisory_at": "2026-02-02", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-2531", "ecosystem": "PyPI", "package_name": "mindsdb", "disclosure_at": "2026-02-16", "advisory_at": "2026-02-16", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25474", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25475", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25478", "ecosystem": "PyPI", "package_name": "litestar", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25479", "ecosystem": "PyPI", "package_name": "litestar", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25480", "ecosystem": "PyPI", "package_name": "litestar", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25481", "ecosystem": "PyPI", "package_name": "langroid", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25482", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25483", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25484", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25485", "ecosystem": "Packagist", "package_name": "craftcms/composer", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25486", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25487", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25488", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25489", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25490", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25491", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25492", "ecosystem": "Packagist", "package_name": "craftcms/craft", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25493", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25494", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25495", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25496", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25497", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25498", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25499", "ecosystem": "Go", "package_name": "github.com/bpg/terraform-provider-proxmox", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25500", "ecosystem": "RubyGems", "package_name": "rack", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-25505", "ecosystem": "PyPI", "package_name": "bambuddy", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25509", "ecosystem": "Packagist", "package_name": "ci4-cms-erp/ci4ms", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25510", "ecosystem": "Packagist", "package_name": "ci4-cms-erp/ci4ms", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25513", "ecosystem": "Packagist", "package_name": "facturascripts/facturascripts", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25514", "ecosystem": "Packagist", "package_name": "facturascripts/facturascripts", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25516", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25517", "ecosystem": "PyPI", "package_name": "wagtail", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25518", "ecosystem": "Go", "package_name": "github.com/cert-manager/cert-manager", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-25520", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-25521", "ecosystem": "npm", "package_name": "locutus", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25522", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-02-03", "advisory_at": "2026-02-02", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25523", "ecosystem": "Packagist", "package_name": "openmage/magento-lts", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-02", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25526", "ecosystem": "Maven", "package_name": "com.hubspot.jinjava:jinjava", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-25527", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25528", "ecosystem": "PyPI", "package_name": "langsmith", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25528", "ecosystem": "npm", "package_name": "langsmith", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-25533", "ecosystem": "npm", "package_name": "enclave-vm", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25534", "ecosystem": "Maven", "package_name": "io.spinnaker.clouddriver:clouddriver-artifacts", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-16", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-25535", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25536", "ecosystem": "npm", "package_name": "@modelcontextprotocol/sdk", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25537", "ecosystem": "crates.io", "package_name": "jsonwebtoken", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-25538", "ecosystem": "Go", "package_name": "github.com/devtron-labs/devtron", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25539", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-02-04", "advisory_at": "2026-01-29", "lag_days": -6, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25541", "ecosystem": "crates.io", "package_name": "bytes", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-25543", "ecosystem": "NuGet", "package_name": "HtmlSanitizer", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25544", "ecosystem": "npm", "package_name": "@payloadcms/drizzle", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25545", "ecosystem": "npm", "package_name": "@astrojs/node", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25546", "ecosystem": "npm", "package_name": "@coding-solo/godot-mcp", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-25547", "ecosystem": "npm", "package_name": "@isaacs/brace-expansion", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-03", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-25574", "ecosystem": "npm", "package_name": "payload", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25576", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25577", "ecosystem": "PyPI", "package_name": "emmett-core", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25578", "ecosystem": "Go", "package_name": "github.com/navidrome/navidrome", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25579", "ecosystem": "Go", "package_name": "github.com/navidrome/navidrome", "disclosure_at": "2026-02-04", "advisory_at": "2026-02-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25580", "ecosystem": "PyPI", "package_name": "pydantic-ai", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25581", "ecosystem": "npm", "package_name": "sceditor", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25586", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-25587", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-25591", "ecosystem": "Go", "package_name": "github.com/QuantumNous/new-api", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25592", "ecosystem": "NuGet", "package_name": "semantic-kernel", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25592", "ecosystem": "PyPI", "package_name": "semantic-kernel", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25593", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25597", "ecosystem": "Packagist", "package_name": "prestashop/prestashop", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-03", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25604", "ecosystem": "PyPI", "package_name": "apache-airflow-providers-amazon", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25628", "ecosystem": "crates.io", "package_name": "qdrant", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-25630", "ecosystem": "npm", "package_name": "survey-pdf", "disclosure_at": "2026-02-05", "advisory_at": "2026-02-04", "lag_days": -1, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-25631", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-04", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25632", "ecosystem": "PyPI", "package_name": "epyt-flow", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-04", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25633", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25637", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25638", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25639", "ecosystem": "npm", "package_name": "axios", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25640", "ecosystem": "PyPI", "package_name": "pydantic-ai", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25641", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-25645", "ecosystem": "PyPI", "package_name": "requests", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25650", "ecosystem": "PyPI", "package_name": "mcp-salesforce-connector", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25651", "ecosystem": "npm", "package_name": "client-certificate-auth", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25673", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25674", "ecosystem": "PyPI", "package_name": "django", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25679", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25722", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25723", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25724", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25725", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-25726", "ecosystem": "Go", "package_name": "github.com/cloudreve/Cloudreve/v4", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-25727", "ecosystem": "crates.io", "package_name": "time", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-25732", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25733", "ecosystem": "PyPI", "package_name": "rucio-webui", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25734", "ecosystem": "PyPI", "package_name": "rucio-webui", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25735", "ecosystem": "PyPI", "package_name": "rucio-webui", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25736", "ecosystem": "PyPI", "package_name": "rucio-webui", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25738", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25739", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25747", "ecosystem": "Maven", "package_name": "org.apache.camel:camel-leveldb", "disclosure_at": "2026-02-23", "advisory_at": "2026-02-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2575", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-saml-adapter-core", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-25751", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25752", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25754", "ecosystem": "npm", "package_name": "@adonisjs/bodyparser", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25755", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25757", "ecosystem": "RubyGems", "package_name": "spree_storefront", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-25758", "ecosystem": "RubyGems", "package_name": "spree_api", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-25759", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25760", "ecosystem": "Go", "package_name": "github.com/bishopfox/sliver", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25762", "ecosystem": "npm", "package_name": "@adonisjs/bodyparser", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25765", "ecosystem": "RubyGems", "package_name": "faraday", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-25766", "ecosystem": "Go", "package_name": "github.com/labstack/echo/v5", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2578", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-25780", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-25783", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-25791", "ecosystem": "Go", "package_name": "github.com/bishopfox/sliver", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-06", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25793", "ecosystem": "Go", "package_name": "github.com/slackhq/nebula", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25794", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25795", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25796", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25797", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25798", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25799", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25802", "ecosystem": "Go", "package_name": "github.com/QuantumNous/new-api", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25804", "ecosystem": "Go", "package_name": "antrea.io/antrea", "disclosure_at": "2026-02-06", "advisory_at": "2026-02-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-2581", "ecosystem": "npm", "package_name": "undici", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-25878", "ecosystem": "Packagist", "package_name": "frosh/adminer-platform", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25881", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "npm" }, { "cve_id": "CVE-2026-25882", "ecosystem": "Go", "package_name": "github.com/gofiber/fiber/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25889", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-25890", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-25891", "ecosystem": "Go", "package_name": "github.com/gofiber/fiber/v3", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25892", "ecosystem": "Packagist", "package_name": "vrana/adminer", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-25893", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-05", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25894", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-05", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25895", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-05", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25896", "ecosystem": "npm", "package_name": "fast-xml-parser", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-20", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25897", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25898", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25899", "ecosystem": "Go", "package_name": "github.com/gofiber/fiber/v3", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25903", "ecosystem": "Maven", "package_name": "org.apache.nifi:nifi-web-api", "disclosure_at": "2026-02-17", "advisory_at": "2026-02-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-25904", "ecosystem": "PyPI", "package_name": "mcp-run-python", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25905", "ecosystem": "PyPI", "package_name": "mcp-run-python", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25918", "ecosystem": "npm", "package_name": "@rage-against-the-pixel/unity-cli", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25921", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-25934", "ecosystem": "Go", "package_name": "github.com/go-git/go-git/v5", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-25935", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-25938", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25939", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25940", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-25949", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25951", "ecosystem": "npm", "package_name": "fuxa-server", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25957", "ecosystem": "npm", "package_name": "@cubejs-backend/server-core", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-25958", "ecosystem": "npm", "package_name": "@cubejs-backend/server-core", "disclosure_at": "2026-02-09", "advisory_at": "2026-02-10", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-25960", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-09", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25963", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-25965", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25966", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25967", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25968", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-03-12", "lag_days": 16, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25969", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25970", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-03-12", "lag_days": 16, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25971", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-03-12", "lag_days": 16, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25982", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-03-12", "lag_days": 16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25983", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25984", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-23", "advisory_at": "2026-02-25", "lag_days": 2, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25985", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25986", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-03-12", "lag_days": 16, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25987", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25988", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25989", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-25990", "ecosystem": "PyPI", "package_name": "pillow", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-25992", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-02-10", "advisory_at": "2026-01-28", "lag_days": -13, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26000", "ecosystem": "Maven", "package_name": "org.xwiki.platform:xwiki-platform-web", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-26007", "ecosystem": "PyPI", "package_name": "cryptography", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26010", "ecosystem": "Maven", "package_name": "org.open-metadata:openmetadata-sdk", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-26013", "ecosystem": "PyPI", "package_name": "langchain-core", "disclosure_at": "2026-02-10", "advisory_at": "2026-02-11", "lag_days": 1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26014", "ecosystem": "Go", "package_name": "github.com/pion/dtls/v3", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-26016", "ecosystem": "Packagist", "package_name": "pterodactyl/panel", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26017", "ecosystem": "Go", "package_name": "github.com/coredns/coredns", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26018", "ecosystem": "Go", "package_name": "github.com/coredns/coredns", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26019", "ecosystem": "npm", "package_name": "@langchain/community", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-26021", "ecosystem": "npm", "package_name": "set-in", "disclosure_at": "2026-02-11", "advisory_at": "2026-02-11", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26022", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-2603", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-26030", "ecosystem": "PyPI", "package_name": "semantic-kernel", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26045", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-21", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26047", "ecosystem": "Packagist", "package_name": "moodle/moodle", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-21", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26055", "ecosystem": "Go", "package_name": "github.com/yokecd/yoke", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26056", "ecosystem": "Go", "package_name": "github.com/yokecd/yoke", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26057", "ecosystem": "PyPI", "package_name": "cisco-ai-skill-scanner", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26060", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26061", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26063", "ecosystem": "npm", "package_name": "cedipay-core", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-12", "lag_days": -7, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-26066", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26118", "ecosystem": "NuGet", "package_name": "Azure.Mcp", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26118", "ecosystem": "PyPI", "package_name": "Azure.Mcp", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26118", "ecosystem": "npm", "package_name": "Azure.Mcp", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26127", "ecosystem": "NuGet", "package_name": "Microsoft.Bcl.Memory", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26130", "ecosystem": "NuGet", "package_name": "Microsoft.AspNetCore.App.Runtime.linux-arm", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26131", "ecosystem": "NuGet", "package_name": "Microsoft.NetCore.App.Runtime.linux-arm", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26185", "ecosystem": "npm", "package_name": "directus", "disclosure_at": "2026-02-12", "advisory_at": "2026-02-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-26186", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26187", "ecosystem": "Go", "package_name": "github.com/treeverse/lakefs", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-26188", "ecosystem": "Packagist", "package_name": "solspace/craft-freeform", "disclosure_at": "2026-02-12", "advisory_at": "2026-01-22", "lag_days": -21, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26190", "ecosystem": "Go", "package_name": "github.com/milvus-io/milvus", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-11", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26194", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26195", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-26196", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26198", "ecosystem": "PyPI", "package_name": "ormar", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26201", "ecosystem": "Go", "package_name": "github.com/jm33-m0/emp3r0r/core", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26205", "ecosystem": "Go", "package_name": "github.com/open-policy-agent/opa-envoy-plugin", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-26209", "ecosystem": "PyPI", "package_name": "cbor2", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26216", "ecosystem": "PyPI", "package_name": "crawl4ai", "disclosure_at": "2026-02-12", "advisory_at": "2026-01-16", "lag_days": -27, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26217", "ecosystem": "PyPI", "package_name": "crawl4ai", "disclosure_at": "2026-02-12", "advisory_at": "2026-01-16", "lag_days": -27, "severity": "CRITICAL", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26226", "ecosystem": "npm", "package_name": "beautiful-mermaid", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-26233", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26246", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26267", "ecosystem": "crates.io", "package_name": "soroban-sdk-macros", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-26273", "ecosystem": "Packagist", "package_name": "idno/known", "disclosure_at": "2026-02-13", "advisory_at": "2026-02-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26275", "ecosystem": "crates.io", "package_name": "httpsig-hyper", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-26276", "ecosystem": "Go", "package_name": "gogs.io/gogs", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26278", "ecosystem": "npm", "package_name": "fast-xml-parser", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26279", "ecosystem": "Packagist", "package_name": "froxlor/froxlor", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26280", "ecosystem": "npm", "package_name": "systeminformation", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-26283", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26284", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-03-12", "lag_days": 16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26304", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-plugin-playbooks", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26308", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26309", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26310", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-26311", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-26313", "ecosystem": "Go", "package_name": "github.com/ethereum/go-ethereum", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26314", "ecosystem": "Go", "package_name": "github.com/ethereum/go-ethereum", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26315", "ecosystem": "Go", "package_name": "github.com/ethereum/go-ethereum", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26316", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26317", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-26318", "ecosystem": "npm", "package_name": "systeminformation", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26319", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26320", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26321", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26322", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-26323", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26324", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26325", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26326", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-26327", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26328", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26329", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26330", "ecosystem": "Go", "package_name": "github.com/envoyproxy/envoy", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-26331", "ecosystem": "PyPI", "package_name": "yt-dlp", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2635", "ecosystem": "PyPI", "package_name": "mlflow", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-21", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2653", "ecosystem": "PyPI", "package_name": "admesh", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2654", "ecosystem": "PyPI", "package_name": "smolagents", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2666", "ecosystem": "Maven", "package_name": "net.mingsoft:ms-mcms", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "LOW", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-26717", "ecosystem": "PyPI", "package_name": "richie", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26801", "ecosystem": "npm", "package_name": "pdfmake", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26830", "ecosystem": "npm", "package_name": "pdf-image", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26831", "ecosystem": "npm", "package_name": "textract", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26832", "ecosystem": "npm", "package_name": "node-tesseract-ocr", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26833", "ecosystem": "npm", "package_name": "thumbler", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26861", "ecosystem": "npm", "package_name": "clevertap-web-sdk", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26862", "ecosystem": "npm", "package_name": "clevertap-web-sdk", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26929", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-26931", "ecosystem": "Go", "package_name": "github.com/elastic/beats/v7", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26933", "ecosystem": "Go", "package_name": "github.com/elastic/beats/v7", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-26954", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-26957", "ecosystem": "Go", "package_name": "github.com/abhinavxd/libredesk", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-26958", "ecosystem": "Go", "package_name": "filippo.io/edwards25519", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-17", "lag_days": -2, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-26960", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-26963", "ecosystem": "Go", "package_name": "github.com/cilium/cilium", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-26972", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26974", "ecosystem": "npm", "package_name": "@tygo-van-den-hurk/slyde", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-26980", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-26983", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-26987", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26988", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26989", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26990", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26991", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26992", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-26994", "ecosystem": "Go", "package_name": "github.com/refraction-networking/utls", "disclosure_at": "2026-02-20", "advisory_at": "2025-04-23", "lag_days": -303, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-26995", "ecosystem": "Go", "package_name": "github.com/refraction-networking/utls", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "LOW", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-26996", "ecosystem": "npm", "package_name": "minimatch", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-26998", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v2", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-26999", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v2", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27001", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27002", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27003", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27004", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27007", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27008", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27009", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27012", "ecosystem": "Packagist", "package_name": "devcode-it/openstamanager", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27013", "ecosystem": "npm", "package_name": "fabric", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-18", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27016", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27017", "ecosystem": "Go", "package_name": "github.com/refraction-networking/utls", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-27018", "ecosystem": "Go", "package_name": "github.com/gotenberg/gotenberg/v8", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27022", "ecosystem": "npm", "package_name": "@langchain/langgraph-checkpoint-redis", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27024", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27025", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27026", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27099", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2026-27100", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2026-02-18", "advisory_at": "2026-02-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-27111", "ecosystem": "Go", "package_name": "github.com/akuity/kargo", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27112", "ecosystem": "Go", "package_name": "github.com/akuity/kargo", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-27116", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27118", "ecosystem": "npm", "package_name": "@sveltejs/adapter-vercel", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-27119", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27121", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27122", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27124", "ecosystem": "PyPI", "package_name": "fastmcp", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27125", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27126", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27127", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27128", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27129", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27131", "ecosystem": "Packagist", "package_name": "putyourlightson/craft-sprig", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27137", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27138", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-27139", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "LOW", "cvss_score": 2.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27141", "ecosystem": "Go", "package_name": "golang.org/x/net", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27142", "ecosystem": "Go", "package_name": "stdlib", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27148", "ecosystem": "npm", "package_name": "storybook", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27156", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27167", "ecosystem": "PyPI", "package_name": "gradio", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "NONE", "cvss_score": 0, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27183", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-09", "lag_days": -14, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27190", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27191", "ecosystem": "npm", "package_name": "@feathersjs/authentication-oauth", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27192", "ecosystem": "npm", "package_name": "@feathersjs/authentication-oauth", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27193", "ecosystem": "npm", "package_name": "@feathersjs/authentication-oauth", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27194", "ecosystem": "PyPI", "package_name": "dtale", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27195", "ecosystem": "crates.io", "package_name": "wasmtime", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27196", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27198", "ecosystem": "Packagist", "package_name": "getformwork/formwork", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27199", "ecosystem": "PyPI", "package_name": "werkzeug", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27203", "ecosystem": "npm", "package_name": "ebay-mcp", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27204", "ecosystem": "crates.io", "package_name": "wasmtime", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27205", "ecosystem": "PyPI", "package_name": "flask", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27206", "ecosystem": "Packagist", "package_name": "zumba/json-serializer", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27210", "ecosystem": "npm", "package_name": "pannellum", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27212", "ecosystem": "npm", "package_name": "swiper", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-19", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-2733", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-02-19", "advisory_at": "2026-02-19", "lag_days": 0, "severity": "LOW", "cvss_score": 3.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2739", "ecosystem": "npm", "package_name": "bn.js", "disclosure_at": "2026-02-20", "advisory_at": "2026-02-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-2741", "ecosystem": "Maven", "package_name": "com.vaadin:flow-project", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "LOW", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-2742", "ecosystem": "Maven", "package_name": "com.vaadin:flow-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-27446", "ecosystem": "Maven", "package_name": "org.apache.activemq:artemis-server", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-27448", "ecosystem": "PyPI", "package_name": "pyopenssl", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27449", "ecosystem": "NuGet", "package_name": "Umbraco.Engage.Forms", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-27457", "ecosystem": "PyPI", "package_name": "weblate", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27459", "ecosystem": "PyPI", "package_name": "pyopenssl", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27461", "ecosystem": "Packagist", "package_name": "pimcore/pimcore", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27465", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27469", "ecosystem": "PyPI", "package_name": "isso", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-24", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27480", "ecosystem": "crates.io", "package_name": "static-web-server", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27482", "ecosystem": "PyPI", "package_name": "ray", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27483", "ecosystem": "PyPI", "package_name": "mindsdb", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27484", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27485", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27486", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-18", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27487", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-18", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27488", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27489", "ecosystem": "PyPI", "package_name": "onnx", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27492", "ecosystem": "npm", "package_name": "lettermint", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27493", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "npm" }, { "cve_id": "CVE-2026-27494", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27495", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27496", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27497", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27498", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27522", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-02", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27523", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27524", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-03", "lag_days": -15, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27545", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-02", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27566", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27567", "ecosystem": "npm", "package_name": "payload", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27568", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-20", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27571", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-27572", "ecosystem": "crates.io", "package_name": "wasmtime", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27574", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-24", "lag_days": 3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27575", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27576", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-20", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "npm" }, { "cve_id": "CVE-2026-27577", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27578", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27584", "ecosystem": "npm", "package_name": "@actual-app/sync-server", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27585", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27586", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27587", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27588", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27589", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27590", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-27591", "ecosystem": "Packagist", "package_name": "winter/wn-backend-module", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27593", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-24", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27595", "ecosystem": "npm", "package_name": "parse-dashboard", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27597", "ecosystem": "npm", "package_name": "@enclave-vm/core", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-27598", "ecosystem": "Go", "package_name": "github.com/dagu-org/dagu", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27599", "ecosystem": "Packagist", "package_name": "ci4-cms-erp/ci4ms", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27601", "ecosystem": "npm", "package_name": "underscore", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27602", "ecosystem": "PyPI", "package_name": "modoboa", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27606", "ecosystem": "npm", "package_name": "rollup", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27607", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27608", "ecosystem": "npm", "package_name": "parse-dashboard", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27609", "ecosystem": "npm", "package_name": "parse-dashboard", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27610", "ecosystem": "npm", "package_name": "parse-dashboard", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27611", "ecosystem": "Go", "package_name": "github.com/gtsteffaniak/filebrowser/backend", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27612", "ecosystem": "npm", "package_name": "repostat", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27614", "ecosystem": "PyPI", "package_name": "bugsink", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27616", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-27621", "ecosystem": "Packagist", "package_name": "typicms/core", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27622", "ecosystem": "PyPI", "package_name": "openexr", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-02", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27626", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-27628", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27638", "ecosystem": "npm", "package_name": "@actual-app/sync-server", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27641", "ecosystem": "PyPI", "package_name": "flask-reuploaded", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27645", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27646", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-09", "lag_days": -14, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27656", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-27659", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-27670", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27695", "ecosystem": "PyPI", "package_name": "zae-limiter", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27696", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27697", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27699", "ecosystem": "npm", "package_name": "basic-ftp", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27700", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27702", "ecosystem": "npm", "package_name": "budibase", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27727", "ecosystem": "Maven", "package_name": "com.mchange:mchange-commons-java", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-27728", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27729", "ecosystem": "npm", "package_name": "@astrojs/node", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27730", "ecosystem": "Go", "package_name": "github.com/esm-dev/esm.sh", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27732", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27734", "ecosystem": "Go", "package_name": "github.com/henrygd/beszel", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27735", "ecosystem": "PyPI", "package_name": "mcp-server-git", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27738", "ecosystem": "npm", "package_name": "@angular/ssr", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-27739", "ecosystem": "npm", "package_name": "@angular/ssr", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-27794", "ecosystem": "PyPI", "package_name": "langgraph-checkpoint", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27795", "ecosystem": "npm", "package_name": "@langchain/community", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27798", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-27799", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-27801", "ecosystem": "crates.io", "package_name": "vaultwarden", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27802", "ecosystem": "crates.io", "package_name": "vaultwarden", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27803", "ecosystem": "crates.io", "package_name": "vaultwarden", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27804", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-25", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27808", "ecosystem": "Go", "package_name": "github.com/axllent/mailpit", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-27809", "ecosystem": "PyPI", "package_name": "psd-tools", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27818", "ecosystem": "npm", "package_name": "terriajs-server", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27819", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-27822", "ecosystem": "crates.io", "package_name": "rustfs", "disclosure_at": "2026-02-25", "advisory_at": "2026-02-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27825", "ecosystem": "PyPI", "package_name": "mcp-atlassian", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27826", "ecosystem": "PyPI", "package_name": "mcp-atlassian", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27829", "ecosystem": "npm", "package_name": "@astrojs/node", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27830", "ecosystem": "Maven", "package_name": "com.mchange:c3p0", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8, "source_registry": "Maven" }, { "cve_id": "CVE-2026-27835", "ecosystem": "PyPI", "package_name": "wger", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27836", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27837", "ecosystem": "npm", "package_name": "dottie", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27838", "ecosystem": "PyPI", "package_name": "wger", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27839", "ecosystem": "PyPI", "package_name": "wger", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27840", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-27877", "ecosystem": "Go", "package_name": "github.com/grafana/grafana", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27888", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27889", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27893", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27896", "ecosystem": "Go", "package_name": "github.com/modelcontextprotocol/go-sdk", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27898", "ecosystem": "crates.io", "package_name": "vaultwarden", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-27899", "ecosystem": "Go", "package_name": "github.com/h44z/wg-portal", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-27900", "ecosystem": "Go", "package_name": "github.com/linode/terraform-provider-linode/v3", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27901", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27902", "ecosystem": "npm", "package_name": "svelte", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27903", "ecosystem": "npm", "package_name": "minimatch", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27904", "ecosystem": "npm", "package_name": "minimatch", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27905", "ecosystem": "PyPI", "package_name": "bentoml", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27932", "ecosystem": "PyPI", "package_name": "joserfc", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-02", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27939", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-27941", "ecosystem": "PyPI", "package_name": "openlit", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27942", "ecosystem": "npm", "package_name": "fast-xml-parser", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27944", "ecosystem": "Go", "package_name": "github.com/0xJacky/Nginx-UI", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-27945", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel/v2", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27946", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-27948", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27952", "ecosystem": "PyPI", "package_name": "agenta", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27953", "ecosystem": "PyPI", "package_name": "ormar", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27959", "ecosystem": "npm", "package_name": "koa", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27961", "ecosystem": "PyPI", "package_name": "agenta", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27962", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27965", "ecosystem": "Go", "package_name": "vitess.io/vitess", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-27966", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-27969", "ecosystem": "Go", "package_name": "vitess.io/vitess", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-27970", "ecosystem": "npm", "package_name": "@angular/core", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-27971", "ecosystem": "npm", "package_name": "@builder.io/qwik", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-02", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-27977", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-27978", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-27979", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27980", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-27982", "ecosystem": "PyPI", "package_name": "django-allauth", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2808", "ecosystem": "Go", "package_name": "github.com/hashicorp/consul", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-28208", "ecosystem": "Maven", "package_name": "com.github.junrar:junrar", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-28222", "ecosystem": "PyPI", "package_name": "wagtail", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-03", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28223", "ecosystem": "PyPI", "package_name": "wagtail", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-03", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28229", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-workflows/v3", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-28231", "ecosystem": "PyPI", "package_name": "pi-heif", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28268", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-28", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-28277", "ecosystem": "PyPI", "package_name": "langgraph", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28279", "ecosystem": "Go", "package_name": "github.com/jmpsec/osctrl", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-28", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-28280", "ecosystem": "Go", "package_name": "github.com/jmpsec/osctrl", "disclosure_at": "2026-02-26", "advisory_at": "2026-02-28", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-28292", "ecosystem": "npm", "package_name": "simple-git", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-2833", "ecosystem": "crates.io", "package_name": "pingora-core", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-28338", "ecosystem": "Maven", "package_name": "net.sourceforge.pmd:pmd-core", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-28342", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-28343", "ecosystem": "npm", "package_name": "@ckeditor/ckeditor5-html-support", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28348", "ecosystem": "PyPI", "package_name": "lxml-html-clean", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2835", "ecosystem": "crates.io", "package_name": "pingora-core", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-28350", "ecosystem": "PyPI", "package_name": "lxml-html-clean", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28351", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28352", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28356", "ecosystem": "PyPI", "package_name": "multipart", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28357", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28358", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28359", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-2836", "ecosystem": "crates.io", "package_name": "pingora-cache", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-28360", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28361", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28363", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28367", "ecosystem": "Maven", "package_name": "io.undertow:undertow-parent", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-28368", "ecosystem": "Maven", "package_name": "io.undertow:undertow-parent", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-28369", "ecosystem": "Maven", "package_name": "io.undertow:undertow-parent", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-28370", "ecosystem": "PyPI", "package_name": "vitrage", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28377", "ecosystem": "Go", "package_name": "github.com/grafana/tempo", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-28391", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28392", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28393", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-03", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28394", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-19", "lag_days": -14, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28395", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28396", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28397", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28398", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28399", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28401", "ecosystem": "npm", "package_name": "nocodb", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-03", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28406", "ecosystem": "Go", "package_name": "github.com/chainguard-dev/kaniko", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-28407", "ecosystem": "Go", "package_name": "github.com/chainguard-dev/malcontent", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-28", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-28413", "ecosystem": "PyPI", "package_name": "products-isurlinportal", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28414", "ecosystem": "PyPI", "package_name": "gradio", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28415", "ecosystem": "PyPI", "package_name": "gradio", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28416", "ecosystem": "PyPI", "package_name": "gradio", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28423", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28424", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28425", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "HIGH", "cvss_score": 8, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28426", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28438", "ecosystem": "PyPI", "package_name": "cocoindex", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28446", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28447", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28448", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28449", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28450", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28451", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28452", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28453", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28454", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28456", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28457", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28458", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28459", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28460", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28461", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28462", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28463", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28464", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28465", "ecosystem": "npm", "package_name": "@openclaw/voice-call", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28466", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28467", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28468", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28469", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28470", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28471", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28472", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "CRITICAL", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28473", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28474", "ecosystem": "npm", "package_name": "@openclaw/nextcloud-talk", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28475", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28476", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28477", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28478", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28479", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-19", "lag_days": -14, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28480", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28481", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-28482", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28486", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28490", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28492", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-28493", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28494", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28498", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28500", "ecosystem": "PyPI", "package_name": "onnx", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28501", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28502", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28507", "ecosystem": "Packagist", "package_name": "idno/known", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28508", "ecosystem": "Packagist", "package_name": "idno/known", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28512", "ecosystem": "Go", "package_name": "github.com/pocket-id/pocket-id/backend", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-28513", "ecosystem": "Go", "package_name": "github.com/pocket-id/pocket-id/backend", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-28518", "ecosystem": "PyPI", "package_name": "openviking", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28563", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28681", "ecosystem": "PyPI", "package_name": "irrd", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28682", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-28683", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-28685", "ecosystem": "Packagist", "package_name": "kimai/kimai", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28686", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28687", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28688", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28689", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28690", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28691", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28692", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28693", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-28695", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28696", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28697", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28779", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28781", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28782", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28783", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28784", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-03", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-28786", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28787", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-28788", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28789", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-28790", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-02", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-28791", "ecosystem": "npm", "package_name": "tinacms", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28792", "ecosystem": "npm", "package_name": "@tinacms/cli", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28793", "ecosystem": "npm", "package_name": "@tinacms/cli", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-28794", "ecosystem": "npm", "package_name": "@orpc/client", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-28795", "ecosystem": "PyPI", "package_name": "openchatbi", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2880", "ecosystem": "npm", "package_name": "@fastify/middie", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-28", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-28802", "ecosystem": "PyPI", "package_name": "authlib", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-28804", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2894", "ecosystem": "Packagist", "package_name": "funadmin/funadmin", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-22", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2895", "ecosystem": "Packagist", "package_name": "funadmin/funadmin", "disclosure_at": "2026-02-21", "advisory_at": "2026-02-22", "lag_days": 1, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2896", "ecosystem": "Packagist", "package_name": "funadmin/funadmin", "disclosure_at": "2026-02-22", "advisory_at": "2026-02-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2897", "ecosystem": "Packagist", "package_name": "funadmin/funadmin", "disclosure_at": "2026-02-22", "advisory_at": "2026-02-22", "lag_days": 0, "severity": "LOW", "cvss_score": 2.399999999999999911182158029987476766109466552734375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2898", "ecosystem": "Packagist", "package_name": "funadmin/funadmin", "disclosure_at": "2026-02-22", "advisory_at": "2026-02-22", "lag_days": 0, "severity": "LOW", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29000", "ecosystem": "Maven", "package_name": "org.pac4j:pac4j-jwt", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-05", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-29038", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29039", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29042", "ecosystem": "Go", "package_name": "github.com/nuclio/nuclio", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-29045", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29049", "ecosystem": "Go", "package_name": "chainguard.dev/melange", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-02", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-29053", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-03", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-29054", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v2", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29057", "ecosystem": "npm", "package_name": "next", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29058", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-03", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29060", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29061", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-29062", "ecosystem": "Maven", "package_name": "tools.jackson.core:jackson-core", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-29063", "ecosystem": "npm", "package_name": "immutable", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29064", "ecosystem": "Go", "package_name": "github.com/zarf-dev/zarf/src/pkg/archive", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-29065", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29066", "ecosystem": "npm", "package_name": "@tinacms/cli", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29067", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2026-03-07", "advisory_at": "2025-12-08", "lag_days": -89, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-29069", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29070", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29071", "ecosystem": "PyPI", "package_name": "open-webui", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29073", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-03", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-29074", "ecosystem": "npm", "package_name": "svgo", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29084", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-29085", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29086", "ecosystem": "npm", "package_name": "hono", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-29087", "ecosystem": "npm", "package_name": "@hono/node-server", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29091", "ecosystem": "npm", "package_name": "locutus", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-29093", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29112", "ecosystem": "npm", "package_name": "@dicebear/converter", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29113", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29172", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29173", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29174", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29175", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29176", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29177", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29178", "ecosystem": "crates.io", "package_name": "lemmy_routes", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-29180", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-29182", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29183", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-04", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-29184", "ecosystem": "npm", "package_name": "@backstage/plugin-scaffolder-backend", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "LOW", "cvss_score": 2, "source_registry": "npm" }, { "cve_id": "CVE-2026-29185", "ecosystem": "npm", "package_name": "@backstage/integration", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29186", "ecosystem": "npm", "package_name": "@backstage/plugin-techdocs-node", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29188", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-04", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-29191", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-04", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-29192", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel/v2", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-04", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-29193", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel/v2", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-04", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-29194", "ecosystem": "Go", "package_name": "github.com/gravitl/netmaker", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-29195", "ecosystem": "Go", "package_name": "github.com/gravitl/netmaker", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29196", "ecosystem": "Go", "package_name": "github.com/gravitl/netmaker", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "HIGH", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-29606", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29607", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-29608", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29609", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29610", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29611", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29612", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-18", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29613", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-05", "advisory_at": "2026-02-17", "lag_days": -16, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-2969", "ecosystem": "PyPI", "package_name": "datapizza-ai-core", "disclosure_at": "2026-02-23", "advisory_at": "2026-02-23", "lag_days": 0, "severity": "LOW", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-2970", "ecosystem": "PyPI", "package_name": "datapizza-ai-core", "disclosure_at": "2026-02-23", "advisory_at": "2026-02-23", "lag_days": 0, "severity": "LOW", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29771", "ecosystem": "Go", "package_name": "github.com/gravitl/netmaker", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-04", "lag_days": -3, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29772", "ecosystem": "npm", "package_name": "@astrojs/node", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-29773", "ecosystem": "Go", "package_name": "github.com/kubewarden/kubewarden-controller", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-29777", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29778", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29780", "ecosystem": "PyPI", "package_name": "eml-parser", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29781", "ecosystem": "Go", "package_name": "github.com/bishopfox/sliver", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "LOW", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29783", "ecosystem": "npm", "package_name": "@github/copilot", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-29784", "ecosystem": "npm", "package_name": "ghost", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-29785", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-29786", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-29787", "ecosystem": "PyPI", "package_name": "mcp-memory-service", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29788", "ecosystem": "Packagist", "package_name": "miraheze/ts-portal", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-27", "lag_days": 21, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-29790", "ecosystem": "PyPI", "package_name": "dbt-common", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-29791", "ecosystem": "Go", "package_name": "github.com/agentgateway/agentgateway", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-29792", "ecosystem": "npm", "package_name": "@feathersjs/authentication-oauth", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29793", "ecosystem": "npm", "package_name": "@feathersjs/mongodb", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-29794", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-29795", "ecosystem": "crates.io", "package_name": "stellar-xdr", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-29905", "ecosystem": "Packagist", "package_name": "getkirby/cms", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-2994", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "LOW", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30048", "ecosystem": "npm", "package_name": "@developer.notchatbot/webchat", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-3009", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-30223", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-30224", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-30225", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-30226", "ecosystem": "npm", "package_name": "devalue", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30227", "ecosystem": "NuGet", "package_name": "MimeKit", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30228", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-30229", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30233", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30241", "ecosystem": "npm", "package_name": "mercurius", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "LOW", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-30242", "ecosystem": "PyPI", "package_name": "plane", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30244", "ecosystem": "PyPI", "package_name": "plane", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30247", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-05", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-3029", "ecosystem": "PyPI", "package_name": "pymupdf", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30405", "ecosystem": "Go", "package_name": "github.com/osrg/gobgp/v4", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-3047", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-broker-saml", "disclosure_at": "2026-03-05", "advisory_at": "2026-03-05", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-30587", "ecosystem": "npm", "package_name": "@seafile/sdoc-editor", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-3059", "ecosystem": "PyPI", "package_name": "sglang", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3060", "ecosystem": "PyPI", "package_name": "sglang", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30662", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30820", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30821", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30822", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30823", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30824", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30827", "ecosystem": "npm", "package_name": "express-rate-limit", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30830", "ecosystem": "npm", "package_name": "defuddle", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-30832", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-30834", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab/cmd/pinchtab", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30835", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-06", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-30836", "ecosystem": "Go", "package_name": "github.com/smallstep/certificates", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2026-30837", "ecosystem": "npm", "package_name": "elysia", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30838", "ecosystem": "Packagist", "package_name": "league/commonmark", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30848", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30849", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30850", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-30851", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2/modules/caddyhttp/reverseproxy", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-30852", "ecosystem": "Go", "package_name": "github.com/caddyserver/caddy/v2/modules/caddyhttp", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30854", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-30855", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-30856", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-30857", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-30858", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30859", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-30860", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-06", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-30861", "ecosystem": "Go", "package_name": "github.com/Tencent/WeKnora", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-07", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-30863", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-07", "advisory_at": "2026-03-09", "lag_days": 2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30869", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-07", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-30870", "ecosystem": "npm", "package_name": "@powersync/service-core", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-07", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30877", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30878", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30879", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30880", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30883", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30885", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-07", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30886", "ecosystem": "Go", "package_name": "github.com/QuantumNous/new-api", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30887", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-07", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-3089", "ecosystem": "npm", "package_name": "@actual-app/sync-server", "disclosure_at": "2026-03-09", "advisory_at": "2026-03-10", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30911", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30913", "ecosystem": "Packagist", "package_name": "flarum/nicknames", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30914", "ecosystem": "Go", "package_name": "github.com/drakkan/sftpgo/v2", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-30915", "ecosystem": "Go", "package_name": "github.com/drakkan/sftpgo/v2", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-30916", "ecosystem": "npm", "package_name": "shescape", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-07", "lag_days": -3, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-30920", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-30921", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-07", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-30922", "ecosystem": "PyPI", "package_name": "pyasn1", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30924", "ecosystem": "Go", "package_name": "github.com/autobrr/qui", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-30925", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30926", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-30927", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30928", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30929", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30930", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-30931", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30932", "ecosystem": "Packagist", "package_name": "froxlor/froxlor", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30933", "ecosystem": "Go", "package_name": "github.com/gtsteffaniak/filebrowser/backend", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30934", "ecosystem": "Go", "package_name": "github.com/gtsteffaniak/filebrowser", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-30935", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30936", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30937", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-12", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-30938", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-30939", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30940", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30941", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30943", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-30944", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30945", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-30946", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30947", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30948", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-30949", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30951", "ecosystem": "npm", "package_name": "sequelize", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30952", "ecosystem": "npm", "package_name": "liquidjs", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30955", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-30956", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-30957", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-30959", "ecosystem": "npm", "package_name": "@oneuptime/common", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30960", "ecosystem": "crates.io", "package_name": "rssn", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-08", "lag_days": -2, "severity": "UNKNOWN", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-30961", "ecosystem": "Go", "package_name": "github.com/forceu/gokapi", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-30962", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30964", "ecosystem": "Packagist", "package_name": "web-auth/webauthn-framework", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-30965", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-30966", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "npm" }, { "cve_id": "CVE-2026-30967", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-30972", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30973", "ecosystem": "npm", "package_name": "@appium/support", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-30974", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3105", "ecosystem": "Packagist", "package_name": "mautic/core", "disclosure_at": "2026-02-24", "advisory_at": "2026-02-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3108", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 8, "source_registry": "Go" }, { "cve_id": "CVE-2026-3112", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-3113", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost-server", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2026-3114", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-3115", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-3121", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-31800", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31801", "ecosystem": "Go", "package_name": "zotregistry.dev/zot/v2", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-31802", "ecosystem": "npm", "package_name": "tar", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-31807", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-31808", "ecosystem": "npm", "package_name": "file-type", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-31809", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-10", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-31812", "ecosystem": "crates.io", "package_name": "quinn-proto", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-09", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-31814", "ecosystem": "crates.io", "package_name": "yamux", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-31815", "ecosystem": "PyPI", "package_name": "django-unicorn", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-31817", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-31819", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31820", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31821", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31822", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31823", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31824", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31825", "ecosystem": "Packagist", "package_name": "sylius/sylius", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31826", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-31828", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31829", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31830", "ecosystem": "RubyGems", "package_name": "sigstore", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-31832", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-31833", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-31834", "ecosystem": "NuGet", "package_name": "Umbraco.Cms", "disclosure_at": "2026-03-10", "advisory_at": "2026-03-11", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-31839", "ecosystem": "npm", "package_name": "@striae-org/striae", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-31840", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-10", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31841", "ecosystem": "npm", "package_name": "hyperterse", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-31853", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-10", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-31856", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31857", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31858", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31859", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31860", "ecosystem": "npm", "package_name": "unhead", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31861", "ecosystem": "npm", "package_name": "@siteboon/claude-code-ui", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-10", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31862", "ecosystem": "npm", "package_name": "@siteboon/claudecodeui", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31863", "ecosystem": "Go", "package_name": "github.com/anyproto/anytype-heart", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.600000000000000088817841970012523233890533447265625, "source_registry": "Go" }, { "cve_id": "CVE-2026-31865", "ecosystem": "npm", "package_name": "elysia", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-31866", "ecosystem": "Go", "package_name": "github.com/open-feature/flagd/flagd", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-31867", "ecosystem": "Packagist", "package_name": "craftcms/commerce", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-10", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31868", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31871", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31872", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-31873", "ecosystem": "npm", "package_name": "unhead", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "LOW", "cvss_score": 0, "source_registry": "npm" }, { "cve_id": "CVE-2026-31875", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-31882", "ecosystem": "npm", "package_name": "dagu", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-31886", "ecosystem": "Go", "package_name": "github.com/dagu-org/dagu", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-31887", "ecosystem": "Packagist", "package_name": "shopware/core", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31888", "ecosystem": "Packagist", "package_name": "shopware/platform", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31889", "ecosystem": "Packagist", "package_name": "shopware/platform", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31891", "ecosystem": "Packagist", "package_name": "cockpit-hq/cockpit", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-31892", "ecosystem": "Go", "package_name": "github.com/argoproj/argo-workflows/v4", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-31898", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31899", "ecosystem": "PyPI", "package_name": "cairosvg", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3190", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-server-spi-private", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-31900", "ecosystem": "PyPI", "package_name": "black", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-31901", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-31938", "ecosystem": "npm", "package_name": "jspdf", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31958", "ecosystem": "PyPI", "package_name": "tornado", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-31959", "ecosystem": "Go", "package_name": "github.com/anchore/quill", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-31960", "ecosystem": "Go", "package_name": "github.com/anchore/quill", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-31961", "ecosystem": "Go", "package_name": "github.com/anchore/quill", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-31975", "ecosystem": "npm", "package_name": "@siteboon/claude-code-ui", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31988", "ecosystem": "npm", "package_name": "yauzl", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-31989", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-31990", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31991", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-31992", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31993", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "LOW", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-31994", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31995", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-31996", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-02-19", "lag_days": -28, "severity": "LOW", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-31997", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "HIGH", "cvss_score": 6, "source_registry": "npm" }, { "cve_id": "CVE-2026-31998", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-31999", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "CRITICAL", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32000", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32001", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32002", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-04", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32003", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32004", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32005", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-04", "lag_days": -15, "severity": "HIGH", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32006", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32007", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32008", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32009", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32010", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32011", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32013", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32014", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 8, "source_registry": "npm" }, { "cve_id": "CVE-2026-32015", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32016", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32017", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32018", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 3.600000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32019", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-04", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32020", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32021", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32022", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32023", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32024", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32025", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32026", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32027", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32028", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32029", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32030", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32031", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-12", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32032", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32033", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32034", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32035", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32036", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32037", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "HIGH", "cvss_score": 6, "source_registry": "npm" }, { "cve_id": "CVE-2026-32038", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32039", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32040", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-03", "lag_days": -16, "severity": "LOW", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32041", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-02", "lag_days": -17, "severity": "HIGH", "cvss_score": 6.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32042", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32043", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32044", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32045", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32046", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32048", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-02", "lag_days": -19, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32049", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-02", "lag_days": -19, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32050", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32051", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-02", "lag_days": -19, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32052", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32053", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32054", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-02", "lag_days": -19, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32055", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-12", "lag_days": -9, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32056", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32057", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32058", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-02", "lag_days": -19, "severity": "LOW", "cvss_score": 2.600000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32060", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-11", "advisory_at": "2026-02-19", "lag_days": -20, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32061", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-03", "lag_days": -8, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32062", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-02", "lag_days": -9, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32063", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-03", "lag_days": -8, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32064", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32065", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-02", "lag_days": -19, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32067", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-04", "lag_days": -17, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32094", "ecosystem": "npm", "package_name": "shescape", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32098", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-3210", "ecosystem": "Packagist", "package_name": "drupal/material_icons", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32101", "ecosystem": "npm", "package_name": "@studiocms/s3-storage", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32102", "ecosystem": "Go", "package_name": "github.com/OliveTin/OliveTin", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32103", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32104", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32106", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32108", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32109", "ecosystem": "PyPI", "package_name": "copyparty", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3211", "ecosystem": "Packagist", "package_name": "drupal/theme_rule", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32110", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32111", "ecosystem": "PyPI", "package_name": "ha-mcp", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32112", "ecosystem": "PyPI", "package_name": "ha-mcp", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32116", "ecosystem": "PyPI", "package_name": "magic-wormhole", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3212", "ecosystem": "Packagist", "package_name": "drupal/tagify", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32129", "ecosystem": "crates.io", "package_name": "soroban-poseidon", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-3213", "ecosystem": "Packagist", "package_name": "drupal/cleantalk", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32136", "ecosystem": "Go", "package_name": "github.com/AdguardTeam/AdGuardHome", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-3214", "ecosystem": "Packagist", "package_name": "drupal/captcha", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32141", "ecosystem": "npm", "package_name": "flatted", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-3215", "ecosystem": "Packagist", "package_name": "drupal/islandora", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3216", "ecosystem": "Packagist", "package_name": "drupal/canvas", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3217", "ecosystem": "Packagist", "package_name": "drupal/miniorange_saml", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3218", "ecosystem": "Packagist", "package_name": "drupal/responsive_favicons", "disclosure_at": "2026-03-25", "advisory_at": "2026-02-25", "lag_days": -28, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32230", "ecosystem": "npm", "package_name": "uptime-kuma", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32231", "ecosystem": "crates.io", "package_name": "zeptoclaw", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-32232", "ecosystem": "crates.io", "package_name": "zeptoclaw", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-32234", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-12", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32235", "ecosystem": "npm", "package_name": "@backstage/plugin-auth-backend", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32236", "ecosystem": "npm", "package_name": "@backstage/plugin-auth-backend", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "LOW", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32237", "ecosystem": "npm", "package_name": "@backstage/plugin-scaffolder-backend", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32241", "ecosystem": "Go", "package_name": "github.com/flannel-io/flannel", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32242", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32245", "ecosystem": "Go", "package_name": "github.com/steveiliop56/tinyauth", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32246", "ecosystem": "Go", "package_name": "github.com/steveiliop56/tinyauth", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32247", "ecosystem": "PyPI", "package_name": "graphiti-core", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32248", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32254", "ecosystem": "Go", "package_name": "github.com/cloudnativelabs/kube-router/v2", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32256", "ecosystem": "npm", "package_name": "music-metadata", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32260", "ecosystem": "crates.io", "package_name": "deno", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-32261", "ecosystem": "Packagist", "package_name": "craftcms/webhooks", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32262", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32263", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32264", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32265", "ecosystem": "Packagist", "package_name": "craftcms/aws-s3", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32266", "ecosystem": "Packagist", "package_name": "craftcms/google-cloud", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32267", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32268", "ecosystem": "Packagist", "package_name": "craftcms/azure-blob", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32269", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-13", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32274", "ecosystem": "PyPI", "package_name": "black", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32276", "ecosystem": "Packagist", "package_name": "opensource-workshop/connect-cms", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32277", "ecosystem": "Packagist", "package_name": "opensource-workshop/connect-cms", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32278", "ecosystem": "Packagist", "package_name": "opensource-workshop/connect-cms", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32279", "ecosystem": "Packagist", "package_name": "opensource-workshop/connect-cms", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32284", "ecosystem": "Go", "package_name": "github.com/shamaton/msgpack", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-16", "lag_days": -10, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32285", "ecosystem": "Go", "package_name": "github.com/buger/jsonparser", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-16", "lag_days": -10, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32286", "ecosystem": "Go", "package_name": "github.com/jackc/pgproto3/v2", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-16", "lag_days": -10, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32287", "ecosystem": "Go", "package_name": "github.com/antchfx/xpath", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-17", "lag_days": -9, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32299", "ecosystem": "Packagist", "package_name": "opensource-workshop/connect-cms", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32300", "ecosystem": "Packagist", "package_name": "opensource-workshop/connect-cms", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32301", "ecosystem": "Go", "package_name": "github.com/centrifugal/centrifugo/v6", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32302", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-12", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32304", "ecosystem": "npm", "package_name": "locutus", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32305", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-32306", "ecosystem": "npm", "package_name": "oneuptime", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32308", "ecosystem": "npm", "package_name": "oneuptime", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32313", "ecosystem": "Packagist", "package_name": "robrichards/xmlseclibs", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32314", "ecosystem": "crates.io", "package_name": "yamux", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-32319", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-12", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32320", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-12", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32322", "ecosystem": "crates.io", "package_name": "soroban-sdk", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-3240", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3241", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3242", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3244", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32594", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32595", "ecosystem": "Go", "package_name": "github.com/traefik/traefik", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32596", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32597", "ecosystem": "PyPI", "package_name": "pyjwt", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32598", "ecosystem": "npm", "package_name": "oneuptime", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-3260", "ecosystem": "Maven", "package_name": "io.undertow:undertow-core", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Maven" }, { "cve_id": "CVE-2026-32600", "ecosystem": "Packagist", "package_name": "simplesamlphp/xml-security", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32606", "ecosystem": "Go", "package_name": "github.com/lxc/incus-os/incus-osd", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32608", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32609", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32610", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32611", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32612", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32614", "ecosystem": "Go", "package_name": "github.com/emmansun/gmsm", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32621", "ecosystem": "npm", "package_name": "@apollo/federation-internals", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32629", "ecosystem": "Packagist", "package_name": "thorsten/phpmyfaq", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32630", "ecosystem": "npm", "package_name": "file-type", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32632", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32633", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32634", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32635", "ecosystem": "npm", "package_name": "@angular/core", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "HIGH", "cvss_score": 9, "source_registry": "npm" }, { "cve_id": "CVE-2026-32636", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-32638", "ecosystem": "npm", "package_name": "studiocms", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32640", "ecosystem": "PyPI", "package_name": "simpleeval", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32642", "ecosystem": "Maven", "package_name": "org.apache.artemis:artemis-openwire-protocol", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-3269", "ecosystem": "Maven", "package_name": "com.github.psi-probe:psi-probe-core", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-32691", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-19", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-32692", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-19", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32693", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-19", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32694", "ecosystem": "Go", "package_name": "github.com/juju/juju", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-19", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32695", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v3", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-3270", "ecosystem": "Maven", "package_name": "com.github.psi-probe:psi-probe-core", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-32700", "ecosystem": "RubyGems", "package_name": "devise", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-32701", "ecosystem": "npm", "package_name": "@builder.io/qwik-city", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32704", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32711", "ecosystem": "PyPI", "package_name": "pydicom", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32714", "ecosystem": "PyPI", "package_name": "scitokens", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32716", "ecosystem": "PyPI", "package_name": "scitokens", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32720", "ecosystem": "Go", "package_name": "github.com/ctfer-io/monitoring", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-13", "lag_days": -3, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-32722", "ecosystem": "PyPI", "package_name": "memray", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "LOW", "cvss_score": 3.600000000000000088817841970012523233890533447265625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32723", "ecosystem": "npm", "package_name": "@nyariv/sandboxjs", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32727", "ecosystem": "PyPI", "package_name": "scitokens", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32728", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32730", "ecosystem": "npm", "package_name": "apostrophe", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32731", "ecosystem": "npm", "package_name": "@apostrophecms/import-export", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32732", "ecosystem": "npm", "package_name": "@leanprover/unicode-input-component", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-32734", "ecosystem": "Packagist", "package_name": "baserproject/basercms", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32737", "ecosystem": "Go", "package_name": "github.com/ctfer-io/romeo/environment/deploy", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2026-32742", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32747", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-32749", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32750", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-32751", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2026-32755", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32756", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32757", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32758", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32759", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32760", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32761", "ecosystem": "Go", "package_name": "https://github.com/filebrowser/filebrowser", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32763", "ecosystem": "npm", "package_name": "kysely", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32766", "ecosystem": "crates.io", "package_name": "astral-tokio-tar", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-32767", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32768", "ecosystem": "Go", "package_name": "github.com/ctfer-io/chall-manager/deploy", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-32769", "ecosystem": "Go", "package_name": "github.com/ctfer-io/fullchain", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32770", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32771", "ecosystem": "Go", "package_name": "github.com/ctfer-io/monitoring", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32774", "ecosystem": "npm", "package_name": "vulnogram", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32794", "ecosystem": "PyPI", "package_name": "apache-airflow", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-31", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32805", "ecosystem": "Go", "package_name": "github.com/ctfer-io/romeo/webserver", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-16", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32811", "ecosystem": "Go", "package_name": "github.com/dadrus/heimdall", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-32812", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32813", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "HIGH", "cvss_score": 8, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32815", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32816", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32817", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32818", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-16", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32828", "ecosystem": "Go", "package_name": "github.com/akuity/kargo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-32829", "ecosystem": "crates.io", "package_name": "lz4_flex", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-16", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-32846", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32871", "ecosystem": "PyPI", "package_name": "fastmcp", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32874", "ecosystem": "PyPI", "package_name": "ujson", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32875", "ecosystem": "PyPI", "package_name": "ujson", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32878", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32879", "ecosystem": "Go", "package_name": "github.com/QuantumNous/new-api", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-32886", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32887", "ecosystem": "npm", "package_name": "effect", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32889", "ecosystem": "PyPI", "package_name": "tinytag", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32895", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-12", "lag_days": -9, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32896", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32897", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32898", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-02-27", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32899", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-03", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32913", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-09", "lag_days": -14, "severity": "HIGH", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32914", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32915", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32916", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32917", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-16", "lag_days": -15, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32918", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32919", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32920", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32921", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-12", "lag_days": -19, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32922", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32923", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32924", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-3293", "ecosystem": "Maven", "package_name": "net.snowflake:snowflake-jdbc", "disclosure_at": "2026-02-27", "advisory_at": "2026-02-27", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-32933", "ecosystem": "NuGet", "package_name": "AutoMapper", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-13", "lag_days": -7, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-32935", "ecosystem": "Packagist", "package_name": "phpseclib/phpseclib", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-32937", "ecosystem": "Go", "package_name": "github.com/free5gc/chf", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32938", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-32940", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-32941", "ecosystem": "Go", "package_name": "github.com/bishopfox/sliver", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-32943", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "npm" }, { "cve_id": "CVE-2026-32944", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32948", "ecosystem": "Maven", "package_name": "org.scala-sbt:sbt", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-32953", "ecosystem": "Go", "package_name": "github.com/tillitis/tkeyclient", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-32970", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "LOW", "cvss_score": 2.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32971", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32972", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32973", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32974", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-32975", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32976", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32977", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32978", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 8, "source_registry": "npm" }, { "cve_id": "CVE-2026-32979", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-32980", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-16", "lag_days": -13, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32981", "ecosystem": "PyPI", "package_name": "ray", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-32982", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-16", "lag_days": -15, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-32987", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-16", "lag_days": -13, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-32988", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33001", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33002", "ecosystem": "Maven", "package_name": "org.jenkins-ci.main:jenkins-core", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33003", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:loadninja", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33004", "ecosystem": "Maven", "package_name": "org.jenkins-ci.plugins:loadninja", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33010", "ecosystem": "PyPI", "package_name": "mcp-memory-service", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-07", "lag_days": -13, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33011", "ecosystem": "npm", "package_name": "@nestjs/platform-fastify", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33012", "ecosystem": "Maven", "package_name": "io.micronaut:micronaut-http-server", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33013", "ecosystem": "Maven", "package_name": "io.micronaut:micronaut-json-core", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33017", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33022", "ecosystem": "Go", "package_name": "github.com/tektoncd/pipeline", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33026", "ecosystem": "Go", "package_name": "github.com/0xJacky/Nginx-UI", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33027", "ecosystem": "Go", "package_name": "github.com/0xJacky/Nginx-UI", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33028", "ecosystem": "Go", "package_name": "github.com/0xJacky/Nginx-UI", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33029", "ecosystem": "Go", "package_name": "github.com/0xJacky/Nginx-UI", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33030", "ecosystem": "Go", "package_name": "github.com/0xJacky/nginx-ui", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33032", "ecosystem": "Go", "package_name": "github.com/0xJacky/Nginx-UI", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33035", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33036", "ecosystem": "npm", "package_name": "fast-xml-parser", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33038", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33039", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3304", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2026-02-27", "advisory_at": "2026-03-01", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33040", "ecosystem": "crates.io", "package_name": "libp2p-gossipsub", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33041", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33042", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-17", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33043", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-17", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33044", "ecosystem": "PyPI", "package_name": "homeassistant", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33045", "ecosystem": "PyPI", "package_name": "homeassistant", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "LOW", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33046", "ecosystem": "PyPI", "package_name": "indico", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33051", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33053", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33054", "ecosystem": "PyPI", "package_name": "mesop", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33055", "ecosystem": "crates.io", "package_name": "tar", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33056", "ecosystem": "crates.io", "package_name": "tar", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33057", "ecosystem": "PyPI", "package_name": "mesop", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33060", "ecosystem": "npm", "package_name": "@aborruso/ckan-mcp-server", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33062", "ecosystem": "Go", "package_name": "github.com/free5gc/nrf", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33063", "ecosystem": "Go", "package_name": "github.com/free5gc/ausf", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33064", "ecosystem": "Go", "package_name": "github.com/free5gc/udm", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33065", "ecosystem": "Go", "package_name": "github.com/free5gc/udm", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33066", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2026-33067", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2026-33068", "ecosystem": "npm", "package_name": "@anthropic-ai/claude-code", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33080", "ecosystem": "Packagist", "package_name": "filament/tables", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33081", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33123", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33125", "ecosystem": "PyPI", "package_name": "frigate", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33128", "ecosystem": "npm", "package_name": "h3", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33129", "ecosystem": "npm", "package_name": "h3", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33131", "ecosystem": "npm", "package_name": "h3", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33132", "ecosystem": "Go", "package_name": "github.com/zitadel/zitadel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33139", "ecosystem": "PyPI", "package_name": "pyspector", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33140", "ecosystem": "PyPI", "package_name": "pyspector", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33142", "ecosystem": "npm", "package_name": "oneuptime", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33143", "ecosystem": "npm", "package_name": "oneuptime", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33151", "ecosystem": "npm", "package_name": "socket.io-parser", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33154", "ecosystem": "PyPI", "package_name": "dynaconf", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33155", "ecosystem": "PyPI", "package_name": "deepdiff", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33157", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33158", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33159", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33160", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33161", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33162", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33163", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-18", "advisory_at": "2026-03-18", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33166", "ecosystem": "Maven", "package_name": "io.qameta.allure:allure-generator", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33167", "ecosystem": "RubyGems", "package_name": "actionpack", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33168", "ecosystem": "RubyGems", "package_name": "actionview", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "LOW", "cvss_score": null, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33169", "ecosystem": "RubyGems", "package_name": "activesupport", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33170", "ecosystem": "RubyGems", "package_name": "activesupport", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33171", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33172", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33173", "ecosystem": "RubyGems", "package_name": "activestorage", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33174", "ecosystem": "RubyGems", "package_name": "activestorage", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33176", "ecosystem": "RubyGems", "package_name": "activesupport", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33177", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33180", "ecosystem": "Maven", "package_name": "ca.uhn.hapi.fhir:org.hl7.fhir.utilities", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33182", "ecosystem": "Packagist", "package_name": "saloonphp/saloon", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33183", "ecosystem": "Packagist", "package_name": "saloonphp/saloon", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33186", "ecosystem": "Go", "package_name": "google.golang.org/grpc", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33191", "ecosystem": "Go", "package_name": "github.com/free5gc/udm", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33192", "ecosystem": "Go", "package_name": "github.com/free5gc/udm", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33194", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33195", "ecosystem": "RubyGems", "package_name": "activestorage", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33202", "ecosystem": "RubyGems", "package_name": "activestorage", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-23", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33203", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33204", "ecosystem": "Packagist", "package_name": "kelvinmo/simplejwt", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33209", "ecosystem": "RubyGems", "package_name": "avo", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33210", "ecosystem": "RubyGems", "package_name": "json", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33211", "ecosystem": "Go", "package_name": "github.com/tektoncd/pipeline", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-18", "lag_days": -6, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33215", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33216", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33217", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33218", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33219", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33221", "ecosystem": "Go", "package_name": "github.com/nhost/nhost", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33222", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33223", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33226", "ecosystem": "npm", "package_name": "budibase", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33228", "ecosystem": "npm", "package_name": "flatted", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33230", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-18", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33231", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33236", "ecosystem": "PyPI", "package_name": "nltk", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-19", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33237", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-19", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33238", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-21", "advisory_at": "2026-03-19", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33241", "ecosystem": "crates.io", "package_name": "salvo", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33242", "ecosystem": "crates.io", "package_name": "salvo", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33246", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33247", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33248", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33249", "ecosystem": "Go", "package_name": "github.com/nats-io/nats-server/v2", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-24", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33252", "ecosystem": "Go", "package_name": "github.com/modelcontextprotocol/go-sdk", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33281", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33282", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33283", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33285", "ecosystem": "npm", "package_name": "liquidjs", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33286", "ecosystem": "RubyGems", "package_name": "graphiti", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33287", "ecosystem": "npm", "package_name": "liquidjs", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33292", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-19", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33293", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-19", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33294", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-19", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33295", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-19", "lag_days": -3, "severity": "HIGH", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33296", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-19", "lag_days": -3, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33297", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-19", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33306", "ecosystem": "RubyGems", "package_name": "bcrypt", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33309", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33310", "ecosystem": "PyPI", "package_name": "intake", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33311", "ecosystem": "npm", "package_name": "@dicebear/core", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33312", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33313", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33314", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33315", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33316", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33319", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-19", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33320", "ecosystem": "Go", "package_name": "github.com/tomwright/dasel/v3", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33322", "ecosystem": "Go", "package_name": "github.com/minio/minio", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33323", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33326", "ecosystem": "npm", "package_name": "@keystone-6/core", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33331", "ecosystem": "npm", "package_name": "@orpc/openapi", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33332", "ecosystem": "PyPI", "package_name": "nicegui", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33343", "ecosystem": "Go", "package_name": "go.etcd.io/etcd/v3", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "LOW", "cvss_score": 0, "source_registry": "Go" }, { "cve_id": "CVE-2026-33344", "ecosystem": "Go", "package_name": "github.com/dagu-org/dagu", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33347", "ecosystem": "Packagist", "package_name": "league/commonmark", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33349", "ecosystem": "npm", "package_name": "fast-xml-parser", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33351", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-19", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33352", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-19", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33353", "ecosystem": "Go", "package_name": "github.com/charmbracelet/soft-serve", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33354", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-19", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3336", "ecosystem": "crates.io", "package_name": "aws-lc-sys", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-3337", "ecosystem": "crates.io", "package_name": "aws-lc-fips-sys", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-3338", "ecosystem": "crates.io", "package_name": "aws-lc-sys", "disclosure_at": "2026-03-02", "advisory_at": "2026-03-02", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33397", "ecosystem": "npm", "package_name": "@angular/ssr", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-19", "lag_days": -7, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33409", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-19", "lag_days": -5, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33413", "ecosystem": "Go", "package_name": "go.etcd.io/etcd/v3", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33418", "ecosystem": "npm", "package_name": "@dicebear/converter", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33419", "ecosystem": "Go", "package_name": "github.com/minio/minio", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33421", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33429", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33430", "ecosystem": "PyPI", "package_name": "briefcase", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-23", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33433", "ecosystem": "Go", "package_name": "github.com/traefik/traefik/v2", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33442", "ecosystem": "npm", "package_name": "kysely", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33468", "ecosystem": "npm", "package_name": "kysely", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33473", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 5.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33474", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33476", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-20", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33478", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33479", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33480", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33481", "ecosystem": "Go", "package_name": "github.com/anchore/syft", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33482", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33483", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33484", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33485", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33486", "ecosystem": "Packagist", "package_name": "roadiz/documents", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-23", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33487", "ecosystem": "Go", "package_name": "github.com/russellhaering/goxmldsig", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-18", "lag_days": -8, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33488", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33490", "ecosystem": "npm", "package_name": "h3", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33492", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33493", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33494", "ecosystem": "Go", "package_name": "github.com/ory/oathkeeper", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "CRITICAL", "cvss_score": 10, "source_registry": "Go" }, { "cve_id": "CVE-2026-33495", "ecosystem": "Go", "package_name": "github.com/ory/oathkeeper", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33496", "ecosystem": "Go", "package_name": "github.com/ory/oathkeeper", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33497", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33498", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33499", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33500", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33501", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33502", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33503", "ecosystem": "Go", "package_name": "github.com/ory/kratos", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33504", "ecosystem": "Go", "package_name": "github.com/ory/hydra", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33505", "ecosystem": "Go", "package_name": "github.com/ory/keto", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-20", "lag_days": -6, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33507", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33508", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33509", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-20", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3351", "ecosystem": "Go", "package_name": "github.com/canonical/lxd", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-04", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33512", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33513", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-20", "lag_days": -3, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33517", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33525", "ecosystem": "Go", "package_name": "github.com/authelia/authelia/v4", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33527", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33528", "ecosystem": "Go", "package_name": "github.com/yusing/godoxy", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33529", "ecosystem": "Go", "package_name": "github.com/tobychui/zoraxy", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33532", "ecosystem": "npm", "package_name": "yaml", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33533", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33535", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-33536", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.0999999999999996447286321199499070644378662109375, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-33538", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33539", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33541", "ecosystem": "Packagist", "package_name": "miraheze/ts-portal", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33542", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6/client", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33545", "ecosystem": "PyPI", "package_name": "mobsf", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33548", "ecosystem": "Packagist", "package_name": "mantisbt/mantisbt", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33572", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-16", "lag_days": -13, "severity": "MEDIUM", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33573", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33574", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-12", "lag_days": -17, "severity": "MEDIUM", "cvss_score": 6.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33575", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-29", "advisory_at": "2026-03-13", "lag_days": -16, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33576", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33579", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33580", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33581", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33619", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33620", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33621", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33622", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab/cmd/pinchtab", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33623", "ecosystem": "Go", "package_name": "github.com/pinchtab/pinchtab/cmd/pinchtab", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.70000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33624", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33627", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-24", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33628", "ecosystem": "Packagist", "package_name": "invoiceninja/invoiceninja", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33634", "ecosystem": "Go", "package_name": "github.com/aquasecurity/trivy", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-24", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33635", "ecosystem": "RubyGems", "package_name": "icalendar", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33638", "ecosystem": "Go", "package_name": "github.com/lin-snow/ech0", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-24", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33641", "ecosystem": "PyPI", "package_name": "glances", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33647", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33648", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33649", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33650", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33651", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33658", "ecosystem": "RubyGems", "package_name": "activestorage", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "LOW", "cvss_score": 6.5, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33660", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33661", "ecosystem": "Packagist", "package_name": "yansongda/pay", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33663", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33665", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33668", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33669", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33670", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33671", "ecosystem": "npm", "package_name": "picomatch", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33672", "ecosystem": "npm", "package_name": "picomatch", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33673", "ecosystem": "Packagist", "package_name": "prestashop/prestashop", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33674", "ecosystem": "Packagist", "package_name": "prestashop/prestashop", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "LOW", "cvss_score": 2, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33675", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33676", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33677", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33678", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33679", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33680", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33681", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33682", "ecosystem": "PyPI", "package_name": "streamlit", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33683", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33685", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33686", "ecosystem": "Packagist", "package_name": "code16/sharp", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33687", "ecosystem": "Packagist", "package_name": "code16/sharp", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-25", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33688", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33690", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33693", "ecosystem": "crates.io", "package_name": "activitypub_federation", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-25", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-33696", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-26", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33699", "ecosystem": "PyPI", "package_name": "pypdf", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-25", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33700", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-25", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33701", "ecosystem": "Maven", "package_name": "io.opentelemetry.javaagent:opentelemetry-javaagent", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-25", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33711", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33713", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-26", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33716", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33717", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33718", "ecosystem": "PyPI", "package_name": "openhands-ai", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-25", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33719", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 8.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33720", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33722", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33723", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33724", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33726", "ecosystem": "Go", "package_name": "github.com/cilium/cilium", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33728", "ecosystem": "Maven", "package_name": "com.datadoghq:dd-java-agent", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33729", "ecosystem": "Go", "package_name": "github.com/openfga/openfga", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33732", "ecosystem": "npm", "package_name": "srvx", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33743", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33744", "ecosystem": "PyPI", "package_name": "bentoml", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33747", "ecosystem": "Go", "package_name": "github.com/moby/buildkit", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33748", "ecosystem": "Go", "package_name": "github.com/moby/buildkit", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33749", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 9, "source_registry": "npm" }, { "cve_id": "CVE-2026-33750", "ecosystem": "npm", "package_name": "brace-expansion", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33751", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-26", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 4.79999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33757", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33758", "ecosystem": "Go", "package_name": "github.com/openbao/openbao", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-33759", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33761", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33762", "ecosystem": "Go", "package_name": "github.com/go-git/go-git/v5", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "LOW", "cvss_score": 2.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33763", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33764", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33766", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33767", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33768", "ecosystem": "npm", "package_name": "@astrojs/vercel", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-26", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33769", "ecosystem": "npm", "package_name": "astro", "disclosure_at": "2026-03-24", "advisory_at": "2026-03-26", "lag_days": 2, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33770", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33809", "ecosystem": "Go", "package_name": "golang.org/x/image", "disclosure_at": "2026-03-25", "advisory_at": "2026-03-25", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-33863", "ecosystem": "npm", "package_name": "convict", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-33864", "ecosystem": "npm", "package_name": "convict", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-33867", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33870", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-http", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33871", "ecosystem": "Maven", "package_name": "io.netty:netty-codec-http2", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Maven" }, { "cve_id": "CVE-2026-33873", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33882", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33883", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33884", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33885", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33886", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33887", "ecosystem": "Packagist", "package_name": "statamic/cms", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33891", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33894", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33895", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33896", "ecosystem": "npm", "package_name": "node-forge", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-33897", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33898", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6/cmd/incus", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33903", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33904", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33906", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Go" }, { "cve_id": "CVE-2026-33907", "ecosystem": "Go", "package_name": "github.com/ellanetworks/core", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-33916", "ecosystem": "npm", "package_name": "handlebars", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 4.70000000000000017763568394002504646778106689453125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33936", "ecosystem": "PyPI", "package_name": "ecdsa", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33937", "ecosystem": "npm", "package_name": "handlebars", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33938", "ecosystem": "npm", "package_name": "handlebars", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33939", "ecosystem": "npm", "package_name": "handlebars", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-33940", "ecosystem": "npm", "package_name": "handlebars", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33941", "ecosystem": "npm", "package_name": "handlebars", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33942", "ecosystem": "Packagist", "package_name": "saloonphp/saloon", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-33943", "ecosystem": "npm", "package_name": "happy-dom", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-26", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33945", "ecosystem": "Go", "package_name": "github.com/lxc/incus/v6", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-33946", "ecosystem": "RubyGems", "package_name": "mcp", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-33949", "ecosystem": "npm", "package_name": "@tinacms/graphql", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-33979", "ecosystem": "npm", "package_name": "express-xss-sanitizer", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-33980", "ecosystem": "PyPI", "package_name": "adx-mcp-server", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.300000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33981", "ecosystem": "PyPI", "package_name": "changedetection-io", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33989", "ecosystem": "npm", "package_name": "@mobilenext/mobile-mcp", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-33990", "ecosystem": "Go", "package_name": "github.com/docker/model-runner", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-33992", "ecosystem": "PyPI", "package_name": "pyload-ng", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 6.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-33993", "ecosystem": "npm", "package_name": "locutus", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33994", "ecosystem": "npm", "package_name": "locutus", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-33997", "ecosystem": "Go", "package_name": "github.com/docker/docker", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 6.79999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-34036", "ecosystem": "Packagist", "package_name": "dolibarr/dolibarr", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34040", "ecosystem": "Go", "package_name": "github.com/moby/moby", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-34041", "ecosystem": "Go", "package_name": "github.com/nektos/act", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-34042", "ecosystem": "Go", "package_name": "github.com/nektos/act", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Go" }, { "cve_id": "CVE-2026-34043", "ecosystem": "npm", "package_name": "serialize-javascript", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-34046", "ecosystem": "PyPI", "package_name": "langflow", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34060", "ecosystem": "RubyGems", "package_name": "ruby-lsp", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-34070", "ecosystem": "PyPI", "package_name": "langchain-core", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34073", "ecosystem": "PyPI", "package_name": "cryptography", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "LOW", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34076", "ecosystem": "npm", "package_name": "@clerk/backend", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-34156", "ecosystem": "npm", "package_name": "@nocobase/plugin-workflow-javascript", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-34165", "ecosystem": "Go", "package_name": "github.com/go-git/go-git/v5", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "Go" }, { "cve_id": "CVE-2026-34172", "ecosystem": "PyPI", "package_name": "giskard-agents", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3419", "ecosystem": "npm", "package_name": "fastify", "disclosure_at": "2026-03-06", "advisory_at": "2026-03-05", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-34202", "ecosystem": "crates.io", "package_name": "zebrad", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "CRITICAL", "cvss_score": 7.5, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-34203", "ecosystem": "PyPI", "package_name": "nautobot", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34204", "ecosystem": "Go", "package_name": "github.com/minio/minio", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-27", "lag_days": -4, "severity": "HIGH", "cvss_score": 7.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-34209", "ecosystem": "npm", "package_name": "mppx", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-34210", "ecosystem": "npm", "package_name": "mppx", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-34214", "ecosystem": "Maven", "package_name": "io.trino:trino-iceberg", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "HIGH", "cvss_score": 7.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-34215", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "HIGH", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-34219", "ecosystem": "crates.io", "package_name": "libp2p-gossipsub", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-34220", "ecosystem": "npm", "package_name": "@mikro-orm/core", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "CRITICAL", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-34221", "ecosystem": "npm", "package_name": "@mikro-orm/core", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "HIGH", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-34224", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-29", "lag_days": -2, "severity": "LOW", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-34226", "ecosystem": "npm", "package_name": "happy-dom", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-29", "lag_days": 2, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-34227", "ecosystem": "Go", "package_name": "github.com/bishopfox/sliver", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-34231", "ecosystem": "PyPI", "package_name": "slippers", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34237", "ecosystem": "Maven", "package_name": "io.modelcontextprotocol.sdk:mcp-core", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Maven" }, { "cve_id": "CVE-2026-34245", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-29", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34247", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-29", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3429", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-34359", "ecosystem": "Maven", "package_name": "ca.uhn.hapi.fhir:org.hl7.fhir.core", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-34360", "ecosystem": "Maven", "package_name": "ca.uhn.hapi.fhir:org.hl7.fhir.core", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 5.79999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-34361", "ecosystem": "Maven", "package_name": "ca.uhn.hapi.fhir:org.hl7.fhir.validation", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "CRITICAL", "cvss_score": 9.300000000000000710542735760100185871124267578125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-34362", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34363", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-34364", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34368", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34369", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34372", "ecosystem": "Packagist", "package_name": "sulu/sulu", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34373", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-34375", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "HIGH", "cvss_score": 8.199999999999999289457264239899814128875732421875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34377", "ecosystem": "crates.io", "package_name": "zebrad", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-30", "lag_days": -1, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-34381", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34382", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34383", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34384", "ecosystem": "Packagist", "package_name": "admidio/admidio", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34385", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-34386", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-34388", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-34389", "ecosystem": "Go", "package_name": "github.com/fleetdm/fleet/v4", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-30", "lag_days": 3, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-34394", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34395", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34396", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34400", "ecosystem": "PyPI", "package_name": "alerta-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34404", "ecosystem": "npm", "package_name": "nuxt-og-image", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-34405", "ecosystem": "npm", "package_name": "nuxt-og-image", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-34426", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-34448", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9, "source_registry": "Go" }, { "cve_id": "CVE-2026-34449", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.5999999999999996447286321199499070644378662109375, "source_registry": "Go" }, { "cve_id": "CVE-2026-34450", "ecosystem": "PyPI", "package_name": "anthropic", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.4000000000000003552713678800500929355621337890625, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34452", "ecosystem": "PyPI", "package_name": "anthropic", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34453", "ecosystem": "Go", "package_name": "github.com/siyuan-note/siyuan/kernel", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-3449", "ecosystem": "npm", "package_name": "@tootallnate/once", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-34503", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-34505", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-13", "lag_days": -18, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-34506", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-12", "lag_days": -19, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-34508", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-34512", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-3452", "ecosystem": "Packagist", "package_name": "concrete5/concrete5", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-04", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-34528", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-34529", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-34530", "ecosystem": "Go", "package_name": "github.com/filebrowser/filebrowser/v2", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-34531", "ecosystem": "PyPI", "package_name": "flask-httpauth", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-34532", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-3455", "ecosystem": "npm", "package_name": "mailparser", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "LOW", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-34573", "ecosystem": "npm", "package_name": "parse-server", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-3484", "ecosystem": "npm", "package_name": "mcp-nmap-server", "disclosure_at": "2026-03-03", "advisory_at": "2026-03-03", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-34881", "ecosystem": "PyPI", "package_name": "glance", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-31", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3490", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-3520", "ecosystem": "npm", "package_name": "multer", "disclosure_at": "2026-03-04", "advisory_at": "2026-03-05", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-3525", "ecosystem": "Packagist", "package_name": "drupal/file_access_fix", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3526", "ecosystem": "Packagist", "package_name": "drupal/file_access_fix", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3527", "ecosystem": "Packagist", "package_name": "drupal/ajax_dashboard", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3528", "ecosystem": "Packagist", "package_name": "drupal/calculation_fields", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3529", "ecosystem": "Packagist", "package_name": "drupal/ga4_google_analytics", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3530", "ecosystem": "Packagist", "package_name": "drupal/openid_connect", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3531", "ecosystem": "Packagist", "package_name": "drupal/openid_connect", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3532", "ecosystem": "Packagist", "package_name": "drupal/openid_connect", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-04", "lag_days": -22, "severity": "MEDIUM", "cvss_score": 4.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-35536", "ecosystem": "PyPI", "package_name": "tornado", "disclosure_at": null, "advisory_at": "2026-03-11", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-35617", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35618", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35619", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35620", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35621", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35622", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35623", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35624", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35625", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35626", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35627", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35628", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35629", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35631", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35632", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35633", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35634", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35635", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35636", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35637", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35638", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35639", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35640", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35641", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35642", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35643", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35644", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35645", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35646", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35647", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35648", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35649", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35650", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35651", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35652", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35653", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35654", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35655", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35656", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35657", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35658", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35659", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35660", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35661", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35662", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35663", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35664", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35665", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35666", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35667", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35668", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-30", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35669", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-35670", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-3573", "ecosystem": "Packagist", "package_name": "drupal/ai", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-11", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-3635", "ecosystem": "npm", "package_name": "fastify", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-25", "lag_days": 2, "severity": "MEDIUM", "cvss_score": 6.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-3689", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-02", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-3690", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-04", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-3691", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-3864", "ecosystem": "Go", "package_name": "github.com/kubernetes-csi/csi-driver-nfs", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-21", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 6.5, "source_registry": "Go" }, { "cve_id": "CVE-2026-3911", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-11", "advisory_at": "2026-03-11", "lag_days": 0, "severity": "LOW", "cvss_score": 2.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-3965", "ecosystem": "npm", "package_name": "@whyour/qinglong", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-3989", "ecosystem": "PyPI", "package_name": "sglang", "disclosure_at": "2026-03-12", "advisory_at": "2026-03-12", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.79999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-40035", "ecosystem": "PyPI", "package_name": "dfir-unfurl", "disclosure_at": null, "advisory_at": "2026-01-29", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-40036", "ecosystem": "PyPI", "package_name": "dfir-unfurl", "disclosure_at": null, "advisory_at": "2026-01-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4039", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-12", "advisory_at": "2026-02-27", "lag_days": -13, "severity": "MEDIUM", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-4040", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": "2026-03-12", "advisory_at": "2026-02-19", "lag_days": -21, "severity": "MEDIUM", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "npm" }, { "cve_id": "CVE-2026-4092", "ecosystem": "npm", "package_name": "@google/clasp", "disclosure_at": "2026-03-13", "advisory_at": "2026-03-13", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "npm" }, { "cve_id": "CVE-2026-41299", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41303", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41332", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41342", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41344", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41361", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41363", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41367", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41368", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41387", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41390", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41395", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-41399", "ecosystem": "npm", "package_name": "openclaw", "disclosure_at": null, "advisory_at": "2026-03-31", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-4175", "ecosystem": "Packagist", "package_name": "aureuserp/aureuserp", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4202", "ecosystem": "Packagist", "package_name": "ayacoo/redirect-tab", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "LOW", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4208", "ecosystem": "Packagist", "package_name": "ralffreit/mfa-email", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4229", "ecosystem": "PyPI", "package_name": "vanna", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 7.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4258", "ecosystem": "npm", "package_name": "sjcl", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-4265", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-4267", "ecosystem": "Packagist", "package_name": "johnbillion/query-monitor", "disclosure_at": "2026-03-31", "advisory_at": "2026-03-19", "lag_days": -12, "severity": "MEDIUM", "cvss_score": 7.20000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4269", "ecosystem": "PyPI", "package_name": "bedrock-agentcore-starter-toolkit", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-17", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 7.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4270", "ecosystem": "PyPI", "package_name": "awslabs-aws-api-mcp-server", "disclosure_at": "2026-03-16", "advisory_at": "2026-03-16", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.5, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4274", "ecosystem": "Go", "package_name": "github.com/mattermost/mattermost/server/v8", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-4324", "ecosystem": "RubyGems", "package_name": "katello", "disclosure_at": "2026-03-17", "advisory_at": "2026-03-17", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.4000000000000003552713678800500929355621337890625, "source_registry": "RubyGems" }, { "cve_id": "CVE-2026-4342", "ecosystem": "Go", "package_name": "k8s.io/ingress-nginx", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-20", "lag_days": 1, "severity": "HIGH", "cvss_score": 8.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-4393", "ecosystem": "Packagist", "package_name": "drupal/autologout", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-18", "lag_days": -8, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4404", "ecosystem": "Go", "package_name": "github.com/goharbor/harbor", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.4000000000000003552713678800500929355621337890625, "source_registry": "Go" }, { "cve_id": "CVE-2026-4427", "ecosystem": "Go", "package_name": "github.com/jackc/pgproto3/v2", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "HIGH", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-4428", "ecosystem": "crates.io", "package_name": "aws-lc-fips-sys", "disclosure_at": "2026-03-19", "advisory_at": "2026-03-19", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-4506", "ecosystem": "PyPI", "package_name": "mindsql", "disclosure_at": "2026-03-20", "advisory_at": "2026-03-21", "lag_days": 1, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4531", "ecosystem": "Go", "package_name": "github.com/free5gc/amf", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "Go" }, { "cve_id": "CVE-2026-4538", "ecosystem": "PyPI", "package_name": "torch", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-22", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 5.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4539", "ecosystem": "PyPI", "package_name": "pygments", "disclosure_at": "2026-03-22", "advisory_at": "2026-03-22", "lag_days": 0, "severity": "LOW", "cvss_score": 3.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-4587", "ecosystem": "Packagist", "package_name": "hybridauth/hybridauth", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4598", "ecosystem": "npm", "package_name": "jsrsasign", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-4599", "ecosystem": "npm", "package_name": "jsrsasign", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "CRITICAL", "cvss_score": 9.0999999999999996447286321199499070644378662109375, "source_registry": "npm" }, { "cve_id": "CVE-2026-4600", "ecosystem": "npm", "package_name": "jsrsasign", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.4000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-4601", "ecosystem": "npm", "package_name": "jsrsasign", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 8.699999999999999289457264239899814128875732421875, "source_registry": "npm" }, { "cve_id": "CVE-2026-4602", "ecosystem": "npm", "package_name": "jsrsasign", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-4603", "ecosystem": "npm", "package_name": "jsrsasign", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "LOW", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-4628", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 4.29999999999999982236431605997495353221893310546875, "source_registry": "Maven" }, { "cve_id": "CVE-2026-4633", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-23", "advisory_at": "2026-03-23", "lag_days": 0, "severity": "LOW", "cvss_score": 3.70000000000000017763568394002504646778106689453125, "source_registry": "Maven" }, { "cve_id": "CVE-2026-4789", "ecosystem": "Go", "package_name": "github.com/kyverno/kyverno", "disclosure_at": "2026-03-30", "advisory_at": "2026-03-30", "lag_days": 0, "severity": "MEDIUM", "cvss_score": 9.800000000000000710542735760100185871124267578125, "source_registry": "Go" }, { "cve_id": "CVE-2026-4874", "ecosystem": "Maven", "package_name": "org.keycloak:keycloak-services", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-26", "lag_days": 0, "severity": "LOW", "cvss_score": 3.100000000000000088817841970012523233890533447265625, "source_registry": "Maven" }, { "cve_id": "CVE-2026-4923", "ecosystem": "npm", "package_name": "path-to-regexp", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "MEDIUM", "cvss_score": 5.9000000000000003552713678800500929355621337890625, "source_registry": "npm" }, { "cve_id": "CVE-2026-4926", "ecosystem": "npm", "package_name": "path-to-regexp", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-27", "lag_days": 1, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "npm" }, { "cve_id": "CVE-2026-4933", "ecosystem": "Packagist", "package_name": "drupal/unpublished_node_permissions", "disclosure_at": "2026-03-26", "advisory_at": "2026-03-11", "lag_days": -15, "severity": "HIGH", "cvss_score": 7.5, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-4963", "ecosystem": "PyPI", "package_name": "smolagents", "disclosure_at": "2026-03-27", "advisory_at": "2026-03-27", "lag_days": 0, "severity": "LOW", "cvss_score": 6.29999999999999982236431605997495353221893310546875, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-53872", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-01-08", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-53873", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-53874", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-02-02", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-53875", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-02-18", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-54685", "ecosystem": "Go", "package_name": "github.com/gtsteffaniak/filebrowser/backend", "disclosure_at": null, "advisory_at": "2026-03-24", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-56236", "ecosystem": "npm", "package_name": "@capgo/cli", "disclosure_at": null, "advisory_at": "2026-03-18", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56267", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2026-03-05", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56272", "ecosystem": "npm", "package_name": "flowise", "disclosure_at": null, "advisory_at": "2026-03-05", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56294", "ecosystem": "npm", "package_name": "@capgo/capacitor-native-biometric", "disclosure_at": null, "advisory_at": "2026-02-10", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56304", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-02-02", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-56315", "ecosystem": "PyPI", "package_name": "picklescan", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-56340", "ecosystem": "PyPI", "package_name": "vllm", "disclosure_at": null, "advisory_at": "2026-01-08", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "PyPI" }, { "cve_id": "CVE-2026-56341", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": null, "advisory_at": "2026-03-29", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-56346", "ecosystem": "Packagist", "package_name": "wwbn/avideo", "disclosure_at": null, "advisory_at": "2026-03-19", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-56349", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56350", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56351", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56353", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56354", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56356", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56357", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56358", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56359", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56360", "ecosystem": "npm", "package_name": "n8n", "disclosure_at": null, "advisory_at": "2026-02-26", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56362", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56364", "ecosystem": "NuGet", "package_name": "Magick.NET-Q8-x64", "disclosure_at": null, "advisory_at": "2026-01-21", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56366", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56368", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56371", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56373", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56375", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56376", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56378", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56379", "ecosystem": "NuGet", "package_name": "Magick.NET-Q16-AnyCPU", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "NuGet" }, { "cve_id": "CVE-2026-56381", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": null, "advisory_at": "2026-03-11", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-56383", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": null, "advisory_at": "2026-02-25", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-56385", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-56393", "ecosystem": "Packagist", "package_name": "craftcms/cms", "disclosure_at": null, "advisory_at": "2026-03-03", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-56395", "ecosystem": "Go", "package_name": "siyuan", "disclosure_at": null, "advisory_at": "2026-03-16", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-56763", "ecosystem": "npm", "package_name": "hono", "disclosure_at": null, "advisory_at": "2026-03-11", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56764", "ecosystem": "npm", "package_name": "hono", "disclosure_at": null, "advisory_at": "2026-02-19", "lag_days": null, "severity": "LOW", "cvss_score": null, "source_registry": "npm" }, { "cve_id": "CVE-2026-56765", "ecosystem": "Go", "package_name": "code.vikunja.io/api", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "CRITICAL", "cvss_score": null, "source_registry": "Go" }, { "cve_id": "CVE-2026-6204", "ecosystem": "Packagist", "package_name": "librenms/librenms", "disclosure_at": null, "advisory_at": "2026-03-26", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-63762", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2026-02-12", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-63763", "ecosystem": "crates.io", "package_name": "surrealdb", "disclosure_at": null, "advisory_at": "2026-01-22", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "crates.io" }, { "cve_id": "CVE-2026-6409", "ecosystem": "Packagist", "package_name": "google/protobuf", "disclosure_at": null, "advisory_at": "2026-03-25", "lag_days": null, "severity": "HIGH", "cvss_score": null, "source_registry": "Packagist" }, { "cve_id": "CVE-2026-65914", "ecosystem": "npm", "package_name": "dompurify", "disclosure_at": null, "advisory_at": "2026-03-27", "lag_days": null, "severity": "MEDIUM", "cvss_score": null, "source_registry": "npm" } ]