Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_rustsec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_android
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_linux
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulncheck_kev
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| ghsa-v653-r55g-hcmg | uv has ZIP payload obfuscation through parsing differentials | UNKNOWN | 6.3 | ghsa | unknown |
| ghsa-c8jx-96c9-8xrp | SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths | UNKNOWN | 4.3 | ghsa | unknown |
| ghsa-f82j-v89j-mf86 | SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission | UNKNOWN | 4.3 | ghsa | unknown |
| ghsa-cc8f-fcx3-gpjr | SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filter | UNKNOWN | 7.7 | ghsa | unknown |
| ghsa-65rj-r9fh-jp2v | SurrealDB vulnerable to pre-auth memory amplification via unbounded `/sql` WebSocket frames | UNKNOWN | 5.3 | ghsa | unknown |
| ghsa-jv2j-mqmw-xvv5 | SurrealDB: Denial of Service via deep operator chains | UNKNOWN | 6.5 | ghsa | unknown |
| ghsa-wjjj-24cx-f28g | SurrealDB has unauthenticated remote DoS via malformed RPC `use` call | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-q8qp-67f9-wr3f | SurrealDB vulnerable to Denial of Service due to nested types annotations | UNKNOWN | 6.5 | ghsa | unknown |
| ghsa-4vgr-h27g-cf9p | SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation | UNKNOWN | 8.1 | ghsa | unknown |
| ghsa-6wqw-vhfr-9999 | SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions | UNKNOWN | 4.3 | ghsa | unknown |
| ghsa-6vg3-hgrw-p5gf | SurrealDB has an Authorization Bypass via Composite Record-id Paths | UNKNOWN | 5.4 | ghsa | unknown |
| ghsa-4m82-p8cx-f94j | SurrealDB: LIVE query subscriptions survive session state changes, bypassing access controls | UNKNOWN | 4.3 | ghsa | unknown |
| ghsa-h5rg-8p7f-47g2 | SurrealDB: SSRF via JWKS URL — Redirect Following in JWT Key Fetch | UNKNOWN | 4.1 | ghsa | unknown |
| ghsa-h4h3-3rfj-x6fq | SurrealDB: Indexed ORDER BY leaks the value ordering of a SELECT-restricted field | UNKNOWN | 4.3 | ghsa | unknown |
| ghsa-5qfp-32cf-69jh | SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers | UNKNOWN | 8.8 | ghsa | unknown |
| ghsa-wp87-mgvq-5j93 | SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization | UNKNOWN | 6.5 | ghsa | unknown |
| ghsa-4v76-cw68-4vc9 | SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required | UNKNOWN | 6.5 | ghsa | unknown |
| rustsec-2026-0377 | `wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook | UNKNOWN | 3.7 | osv_rustsec | unknown |
| rustsec-2026-0376 | `wasi-http`: Guests can add conflicting content lengths to messages | UNKNOWN | 3.7 | osv_rustsec | unknown |
| rustsec-2026-0375 | `wasi-http` p3: Guests can set incorrect content-length for spliced response bodies | UNKNOWN | 5.3 | osv_rustsec | unknown |
| ghsa-29hf-rm4x-xxph | Mise's local credential_command executes untrusted config | UNKNOWN | 6.3 | ghsa | unknown |
| rustsec-2026-0436 | Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0435 | Unbounded memory allocation in `thrift` binary protocol `read_bytes` | UNKNOWN | 7.5 | osv_rustsec | unknown |
| ghsa-2f9f-gq7v-9h6m | Apache Thrift has a Memory Allocation with Excessive Size Value Vulnerability | UNKNOWN | 5.3 | ghsa | unknown |
| rustsec-2026-0434 | `ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip) | UNKNOWN | 8.2 | osv_rustsec | unknown |
| rustsec-2026-0433 | Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS` | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0432 | `codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service) | UNKNOWN | 5.3 | osv_rustsec | unknown |
| rustsec-2026-0431 | Unbounded memory allocation in `evtx` parsing a `.wevtcache` file | UNKNOWN | 5.5 | osv_rustsec | unknown |
| rustsec-2026-0430 | Path traversal in `rio-vt` Kitty graphics protocol handler allows out-of-bounds file delete (and read) | UNKNOWN | 4.7 | osv_rustsec | unknown |
| ghsa-q7v9-x93c-xqv3 | zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction | UNKNOWN | 7.5 | ghsa | unknown |