Know your dependencies.
Find your exposure.

PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute

Delinea Privilege Manager agent unauthenticated remote code execution vulnerability

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft S

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microso

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

Enforce maximum recursion depth in encoding/asn1

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Quadratic complexity in WordDecoder.DecodeHeader in mime

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass

Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config

Golang-fips: golang fips zeroed buffer

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure of postgresql data via insecure backup permissions

Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tampering

GraphQL-core: Denial of service via memory leak in aborted validations

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt

Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field

SOCFortress CoPilot: Stored case-report template injection permits backend code execution

WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover

WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes

Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

Docat has Arbitrary File Upload exists in Upload API

ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder

ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM

ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder

ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob

n8n before 1.123.76 Improper Authorization via Source Control Push

n8n before 1.123.76 Sandbox Escape via Git Relative URL

LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload

ImageMagick before 7.1.2-30 Heap-use-after-free via Layer

ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race

ImageMagick before 7.1.2-30 Heap-use-after-free via GetList

ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

ImageMagick before 7.1.2-30 Memory Leak via MSL decoder

ImageMagick before 7.1.2-30 Denial of Service Memory Budget

n8n before 2.36.2 Missing Authorization via Insights API

n8n before 2.34.1 SSRF via Request Helper URI Validation Bypass

n8n before 1.123.73 Credential Exposure via Error Logging

n8n before 1.123.73 Local File Read and SSRF via Gmail and Brevo nodes

n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n before 1.123.73 Remote Code Execution via Git Node

n8n before 2.36.2 Query Injection via Elasticsearch Firestore Nodes

n8n before 2.36.2 Credential Exfiltration via Workflow Tool Node

n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

Kimai before 2.65.0 Authentication Bypass via Team Creation

Nodemailer before 8.0.4 SMTP Command Injection via envelope.size

openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command

CodeWhale before 0.8.64 Argument Injection via git_show

CodeWhale before 0.8.64 Privilege Escalation via exec_shell_interact

SiYuan v3.7.4-alpha.2 Authorization Bypass via getAttributeViewSearchTarget

actix-http before 3.12.1 HTTP Request Smuggling via CL.TE

Grav before 2.0.13 Stored XSS via quoted-attribute bypass

Grav through 2.0.11 Authentication Bypass via Flex Objects

Grav API Plugin before 1.0.13 Scope Bypass via createApiKey

Grav API Plugin before 1.0.13 API-key scope cap bypass via ReportsController

actix-files before 0.6.10 Information Disclosure via Files

actix-files before 0.6.10 Denial of Service via empty Range header

SiYuan v3.7.4-alpha.1 Information Disclosure via getAttributeViewFieldViews

n8n before 1.123.67 SQL Injection via PostgresTrigger Node

n8n before 1.123.67 Authentication Bypass via HTTP Request Node

n8n before 2.32.1 Path Traversal via computer-use search_files

n8n before 2.32.1 Authentication Bypass via Token Exchange

n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes

n8n before 1.123.67 Path Traversal via Git Node Operations

n8n before 1.123.67 Prototype Pollution via VM Expression Engine

n8n before 2.32.1 SSRF Protection Bypass via MCP Client

n8n before 1.123.67 Remote Code Execution via Git node

n8n before 1.123.67 Arbitrary File Read via Send Email Node

n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape

n8n before 1.123.67 Module Cache Poisoning via Code Node

n8n before 1.123.67 Credential Exfiltration via Sub-Workflow

n8n before 1.123.67 Arbitrary File Write via Edit Image Node

n8n before 1.123.67 SQL Injection via executeQuery Operation

n8n before 1.123.67 Prototype Pollution via Edit Fields

llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp

llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp

radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass

Taubyte Tau v1.1.10 Missing Authorization via GET and DELETE /projects/{id}

axios 0.28.0 before 0.33.0 and 1.0.0 before 1.18.0 Denial of Service via formToJSON

nanoid Infinite Loop via Negative Size in non-secure module

DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n before 1.123.64 Remote Code Execution via Git Clone

n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe

n8n before 1.123.64 Credential Exfiltration via GraphQL Node

n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange

n8n before 2.30.1 Missing OAuth Authorization Check

n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters

n8n before 1.123.64 Stored DOM XSS via cachedResultUrl

n8n before 1.123.64 Sanitizer Bypass Remote Code Execution

n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows

n8n before 1.123.64 Credential Exposure via LLM Node Execution Data

n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role

n8n before 2.30.1 Privilege Escalation via run_node_tool

n8n before 2.28.0 Authentication Bypass via test-webhook

Helm Files.Lines Denial of Service via Empty Chart Files

Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management

ImageMagick before 7.1.2-26 Memory Leak via TIFF Encoder

ImageMagick before 7.1.2-26 Memory Leak in ICON decoder

ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder

ImageMagick before 7.1.2-26 Memory Leak in MIFF Encoder

ImageMagick before 7.1.2-26 Memory Leak in YUV Decoder

ImageMagick before 7.1.2-26 Memory Leak in Hough Lines

ImageMagick before 7.1.2-26 Memory Leak in Log Colorspace

ImageMagick before 7.1.2-26 Memory Leak in TIFF Encoder

ImageMagick before 7.1.2-26 Information Disclosure via identify

ImageMagick before 7.1.2-26 Use-After-Free in FormatMagickCaption

ImageMagick before 7.1.2-26 Use-After-Free via freetype

ImageMagick before 7.1.2-26 Policy Bypass via script operation

ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder

ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP

Simple Machines Forum SSRF via image proxy

ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass

ImageMagick before 7.1.2-26 Heap Buffer Over-Write via X11

Grav API Plugin before 1.0.4 Password Reset Token Poisoning via admin_base_url

n8n - Permission Bypass via Expression Parser Mismatch in External Secrets

n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation

n8n - External Secrets Disclosure via Workflow Node Expressions

n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint

Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop

luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter

n8n - Authorization Bypass in Public API Execution Retry Endpoint

n8n - AST Validator Bypass in Python Code Node

n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint

n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints

ImageMagick - Command Injection via SVG Decoder

ImageMagick - Heap Out-of-Bounds Read in PCD Decoder

ImageMagick - Policy Bypass via Incorrect Path Validation

ImageMagick - Heap Use-After-Free in Meta Coder

ImageMagick - Use-After-Free Write in PDB Decoder

ImageMagick - Memory Leak in TXT File Processing via Texture Attribute

ImageMagick - Out-of-bounds Access in ConnectedComponentsImage via connected-components Artifact

ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage

ImageMagick - Memory Leak in Raw Pixel Data Coders

ImageMagick - Memory Leak in META Reader APP1JPEG Error Path

ImageMagick - Memory Leak in PNG Encoder via MNG Image Writing

ImageMagick - Division by Zero in Binomial Kernel Processing

ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing

n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL

n8n - Stored Cross-Site Scripting in Form Trigger Node

n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field

n8n - Cross-Site Scripting and Open Redirect in Form Node

Tinyproxy - Stathost Detection Bypass via Host Header Manipulation

JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering

Agent Zero < 1.15 Stored XSS via image_get API Endpoint

llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore

llama.cpp b3978–b9058 Integer Underflow via DRY Sampler

llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function

llama.cpp b1886–b7445 Double Free via llama-android.cpp

libyang - Heap Use-After-Free Write in XML Metadata Parsing

OpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects

OpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update

Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

OpenLDAP LMDB mdb_load Heap Buffer Underflow in readline()

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP Encoder

ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback

ZITADEL before 3.4.14 and 4.16.2 Account Takeover via Passkey Enrollment

ZITADEL before 4.17.1 Unauthenticated MFA Enrollment via Login V1 Init Handlers

ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment

ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL before 4.17.3 Account Takeover via External IdP Linking

ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName

Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length

odt2spip < 4.4.0 OS Command Injection via Document Filename

http4k before 6.48.0.0 Digest Authentication Replay Protection Bypass

http4k before 6.48.0.0 Cookie Scoping Bypass via BasicCookieStorage

http4k before 6.49.0.0 Host Header Routing Bypass via reverseProxy

Froxlor before 2.3.11 2FA Bypass via Namespace Confusion

SFTPGo < 2.7.4 Permission Bypass via Symbolic Link Creation

SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass

SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting

SurrealDB before 2.2.2 Memory Exhaustion via string::replace

SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER

SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions

SurrealDB before 2.2.2 SurrealQL Injection via export

SurrealDB before 2.2.2 Denial of Service via /sql endpoint

Hono - Vary Header Injection in CORS Middleware

Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

Sitecore XM and XP Hardcoded Credentials

WBCE CMS <= 1.6.3 Authenticated Remote Code Execution via Module Upload