Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

High Security Advisories from github Clear Filters

High
about 17 hours ago

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability GSA_kwCzR0hTQS12ZzQ0LWg3NTUtOWh3N84ABicb

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
about 18 hours ago

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability GSA_kwCzR0hTQS1meDRxLWdqcngtMmp3Ns4ABica

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
about 18 hours ago

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability GSA_kwCzR0hTQS1nZzhjLTMzMzgteHcyZs4ABicZ

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
about 18 hours ago

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability GSA_kwCzR0hTQS1qcWhwLTIzOHgtcWhnZs4ABicX

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
about 18 hours ago

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS1tOTNmLXdqOGMtcnA4cM4ABicW

nuget Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64
High
about 19 hours ago

Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability GSA_kwCzR0hTQS1jNDk0LW0yZnEtNTlteM4ABiTk

nuget Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64
High
5 days ago

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors GSA_kwCzR0hTQS1nbTM3LTUyYzYtMzdtd84ABiAg

pypi pymdown-extensions
High
5 days ago

CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames GSA_kwCzR0hTQS1oaG1jLXE5aHAtcjY2Ms4ABiAe

packagist codeigniter4/framework
High
5 days ago

jsii-diff: Command Injection via npm: package argument GSA_kwCzR0hTQS13Y3g0LXdwZnYtbWM1Y84ABiAb

npm jsii-diff
High
5 days ago

go-git: Worktree operations may follow symlinks GSA_kwCzR0hTQS1oYzh2LXd3Yzktdmd4bc4ABhvg

go github.com/go-git/go-git/v6, github.com/go-git/go-git/v5
High
5 days ago

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution GSA_kwCzR0hTQS13dnBwLThoeDktcDY2as4ABhvf

pypi GitPython
High
5 days ago

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE) GSA_kwCzR0hTQS1qbTc4LTlmdnYtbWhncs4ABhve

pypi GitPython
High
5 days ago

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython GSA_kwCzR0hTQS1obXEyLXc1OGYtMjdqY84ABhvd

pypi GitPython
High
5 days ago

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks GSA_kwCzR0hTQS05cmo3LXJmMnAtdzc3cs4ABhvb

pypi GitPython
High
5 days ago

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite GSA_kwCzR0hTQS00Z213LWdnMm0tdzQ2cM4ABhva

pypi GitPython
High
6 days ago

PHP_CodeSniffer gitblame report command injection via crafted filename GSA_kwCzR0hTQS1obXFnLWN4d3ctd3Focc4ABhoi

packagist squizlabs/php_codesniffer
High
6 days ago

ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633 GSA_kwCzR0hTQS13OWhtLTRtM20tZnhtbc4ABhof

npm ngx-extended-pdf-viewer
High
6 days ago

PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF GSA_kwCzR0hTQS1ocTY2LWNxd3Etdzk1as4ABhoe

npm pdfjs-dist
High
6 days ago

Craft CMS: Arbitrary user password reset leading to administrator account takeover GSA_kwCzR0hTQS1wOHg3LTl2ZnctcDd2Y84ABhoc

packagist craftcms/cms
High
6 days ago

Craft CMS: Authenticated RCE through Twig sandbox escape GSA_kwCzR0hTQS1mNXdtLTg4anYtZzVoeM4ABhob

packagist craftcms/cms
High
6 days ago

Craft CMS: Authenticated RCE via `condition.config` JSON cleanse bypass GSA_kwCzR0hTQS0yNjVtLTc4MjYtd2pxbc4ABhoZ

packagist craftcms/cms
High
6 days ago

league/commonmark: Denial of service via colliding heading slugs GSA_kwCzR0hTQS1taDI1LXg1aHEtd3JxcM4ABhoX

packagist league/commonmark
High
6 days ago

league/commonmark: Denial of service via duplicate footnote definitions GSA_kwCzR0hTQS1qZm0zLTk1anEtcTNyZs4ABhoW

packagist league/commonmark
High
6 days ago

league/commonmark: Denial of service via adjacent inline attribute blocks GSA_kwCzR0hTQS1nMmdwLTN3d3EtZjRwaM4ABhoV

packagist league/commonmark
High
6 days ago

league/commonmark: Quadratic-time denial of service when parsing crafted Markdown GSA_kwCzR0hTQS0ycTRwLWc3aHYtNXJnds4ABhoU

packagist league/commonmark
High
6 days ago

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported GSA_kwCzR0hTQS01cDRtLTJ3Zm0teG1xas4ABhoS

npm js-yaml
High
6 days ago

Nx: Zip-Slip in the self-hosted remote cache GSA_kwCzR0hTQS12cDNoLWdoZ2gtanI3Z84ABhoP

npm nx, @nx/powerpack-shared-fs-cache, @nx/powerpack-azure-cache, @nx/powerpack-gcs-cache, @nx/powerpack-s3-cache, @nx/shared-fs-cache, @nx/azure-cache, @nx/gcs-cache, @nx/s3-cache
High
6 days ago

Statamic: Account takeover via OAuth email matching without email-verification check GSA_kwCzR0hTQS05M3FoLTUyNjktOXdjZs4ABhoD

packagist statamic/cms
High
6 days ago

Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth GSA_kwCzR0hTQS14Njc3LTlmeGctdjVjNc4ABhnp

go github.com/traefik/traefik/v3, github.com/traefik/traefik/v2
High
6 days ago

Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass GSA_kwCzR0hTQS04cnh2LWpnN3Atd3ZnM84ABhnf

go github.com/traefik/traefik/v3
High
6 days ago

Traefik: Gateway API route identity collision allows cross-namespace backend hijacking GSA_kwCzR0hTQS1mZ2pqLXB4M3ctNjd4eM4ABhnb

go github.com/traefik/traefik/v3
High
6 days ago

Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool GSA_kwCzR0hTQS0zY2NwLTQycGctaGd2Ns4ABhnZ

go github.com/traefik/traefik, github.com/traefik/traefik/v3, github.com/traefik/traefik/v2
High
7 days ago

Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation GSA_kwCzR0hTQS05cGdmLTM4NGctcDdtds4ABhh2

npm nuxt
High
7 days ago

Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props GSA_kwCzR0hTQS05NDczLTVmOWotOTR3cc4ABhhI

npm nuxt
High
7 days ago

Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients GSA_kwCzR0hTQS13bTh3LTZxam0tY3Y0M84ABhhF

npm nuxt
High
7 days ago

Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721) GSA_kwCzR0hTQS1oeHZoLTRoM3ctcHJwOc4ABhhE

npm nuxt
High
7 days ago

Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering GSA_kwCzR0hTQS1oeGNyLWhtODgtbXBxNs4ABhhD

npm nuxt
High
7 days ago

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories GSA_kwCzR0hTQS1mcWo5LTY5cGYtNnBqZ84ABhg_

go github.com/rclone/rclone
High
7 days ago

rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution GSA_kwCzR0hTQS0ybThtLWpocm0tdzZqMs4ABhgy

go github.com/rclone/rclone
High
7 days ago

rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote GSA_kwCzR0hTQS1jZjQ0LTlwZ3YtbTR4Y84ABhgc

go github.com/rclone/rclone
High
7 days ago

rclone: Incomplete path validation allows backend root escape in serve restic GSA_kwCzR0hTQS00NXBxLTg4OWctZmNnaM4ABhgb

go github.com/rclone/rclone
High
7 days ago

Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path GSA_kwCzR0hTQS05ZjRjLTkzYzgtamM4Z84ABhaR

npm electron
High
7 days ago

Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads GSA_kwCzR0hTQS12M2o3LXI5Z3EtM2dqd84ABhZ1

npm electron
High
7 days ago

Electron: Context isolation bypass via Function.prototype.bind hijack GSA_kwCzR0hTQS1oN3JwLWNmOGgtajk4eM4ABhZy

npm electron
High
8 days ago

XSS in Ghost's ActivityPub client GSA_kwCzR0hTQS14cHA3LTkzeDYtdjI5bc4ABhTo

npm @tryghost/activitypub
High
8 days ago

Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder GSA_kwCzR0hTQS0zY2c1LTQ4ajMtdjRnds4ABhS5

pypi open-webui
High
8 days ago

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages GSA_kwCzR0hTQS1wd3hoLTczNTgtanEyeM4ABhS3

pypi open-webui
High
8 days ago

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin GSA_kwCzR0hTQS0zeHBmLXhxN3ItdjhjNc4ABhSw

pypi open-webui
High
8 days ago

Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs GSA_kwCzR0hTQS04eDV2LWNwdjctOGpqcM4ABhSv

pypi open-webui
High
8 days ago

Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client GSA_kwCzR0hTQS1ycTg0LXA2cnItdmY4Oc4ABhSr

pypi open-webui
High
8 days ago

Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader GSA_kwCzR0hTQS13MnJ4LTg0aHAtZ2c5Nc4ABhSp

pypi open-webui
High
8 days ago

Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation GSA_kwCzR0hTQS1nbW13LXFnOTgtNmo2cM4ABhSm

npm flowise
High
8 days ago

Flowise: Missing Authorization on Execution Update Endpoint GSA_kwCzR0hTQS1mbTJmLTQzMzktNHAyZs4ABhSk

npm flowise
High
8 days ago

Flowise: Cross-Workspace OAuth2 Credential Metadata Leak GSA_kwCzR0hTQS13Y2g1LXhwNzctZnhnNM4ABhRn

npm flowise
High
8 days ago

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history GSA_kwCzR0hTQS1mcjZnLTdjcTgtZmc4Ms4ABhRl

npm flowise
High
8 days ago

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store GSA_kwCzR0hTQS1jaG0zLXZxY2YtNTJyeM4ABhRk

npm flowise
High
8 days ago

Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys GSA_kwCzR0hTQS04OHByLTg3OGMtMjR3Zs4ABhRi

npm flowise, flowise-components
High
8 days ago

Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure GSA_kwCzR0hTQS04cjhoLTZ2Y2MteGhyds4ABhRh

npm flowise
High
8 days ago

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) GSA_kwCzR0hTQS14YzQ4LTg4OXgtNXFtd84ABhRe

npm flowise-components, flowise
High
8 days ago

Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type GSA_kwCzR0hTQS1wNXc4LW0yNDktNHI0ds4ABhRc

npm flowise
High
8 days ago

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API GSA_kwCzR0hTQS02dmgyLXdnNGgtNHZ3as4ABhRU

npm flowise
High
8 days ago

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses GSA_kwCzR0hTQS1jNnhoLXd2NGotcHB2Nc4ABhRG

npm flowise
High
8 days ago

Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization GSA_kwCzR0hTQS13cDc0LWY1aGgtNWYzcs4ABhLz

npm flowise
High
8 days ago

Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration GSA_kwCzR0hTQS1yNzQ1LThod3YtaDQ3M84ABhLx

npm flowise
High
9 days ago

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building GSA_kwCzR0hTQS1qd3YzLTVoZ2YtODJ3d84ABhHU

pypi cryptography
High
9 days ago

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing GSA_kwCzR0hTQS1nNmNqLXByNjQtMzV3Nc4ABhHT

pypi cryptography
High
9 days ago

Guzzle: Noncanonical host can bypass host-based checks GSA_kwCzR0hTQS12NW12LXA1OTQtMngzM84ABhHS

packagist guzzlehttp/guzzle
High
9 days ago

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) GSA_kwCzR0hTQS1jcTV2LThxMzYtNTI3M84ABhHP

pypi aiohttp
High
9 days ago

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read GSA_kwCzR0hTQS0zZjd3LThycjgtZjM3Zs4ABhHI

pypi GitPython
High
9 days ago

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass GSA_kwCzR0hTQS1td3A0LTU0ZjgtNWZocs4ABhHH

npm ip-address
High
9 days ago

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives GSA_kwCzR0hTQS00Y3d4LTd3ZjctMzI3Ms4ABhHA

npm undici
High
9 days ago

fast-uri vulnerable to host confusion via backslash authority introducer GSA_kwCzR0hTQS03cDhyLXgzbWMtcDh3N84ABhG_

npm fast-uri
High
9 days ago

Socket.IO: Zero-attachment Memory Exhaustion GSA_kwCzR0hTQS0ybTh2LWo3ODItZmh2cs4ABhG-

npm socket.io-parser
High
9 days ago

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation GSA_kwCzR0hTQS1yZ3c1LXJ2djkteDg5Nc4ABhGf

npm brace-expansion
High
9 days ago

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes GSA_kwCzR0hTQS1qajI3LWg1aHEtOHg5Oc4ABhGe

npm @angular/core, @angular/compiler
High
9 days ago

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS) GSA_kwCzR0hTQS12cHg2LThwanItNGczds4ABhGd

npm @angular/platform-server
High
9 days ago

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning GSA_kwCzR0hTQS1qaHB3LTk3Nm0tNTQyas4ABhGc

npm @angular/common
High
12 days ago

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files GSA_kwCzR0hTQS12dnA3LWg0ZmotbTI4d84ABg_t

go github.com/gtsteffaniak/filebrowser/backend
High
12 days ago

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag GSA_kwCzR0hTQS13ZjQzLWZwcDMtY2Y2Nc4ABg_W

npm @apostrophecms/seo
High
12 days ago

Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers GSA_kwCzR0hTQS05OHBwLXZjY20tcW0yNc4ABg-4

packagist redaxo/source
High
12 days ago

Savon::Model evaluates WSDL operation names as Ruby source GSA_kwCzR0hTQS1teDVqLW1wNGYtZzhqZ84ABg-2

rubygems savon
High
12 days ago

Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier GSA_kwCzR0hTQS1yeGN3LW1jNmYtNmhyM84ABg-0

npm jodit
High
12 days ago

Thumbor has path traversal via post-validation URL decoding bypass in file_loader GSA_kwCzR0hTQS1jajU0LWhwY2MtZ2o2aM4ABg-x

pypi thumbor
High
12 days ago

Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS GSA_kwCzR0hTQS1waGozLTU5cGYtY3A4M84ABg-w

pypi thumbor
High
12 days ago

Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter GSA_kwCzR0hTQS01dmpjLTdjeHctNHc2as4ABg-v

pypi thumbor
High
12 days ago

Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS GSA_kwCzR0hTQS1jcWpwLWpmNHItaDVxOc4ABg-u

pypi thumbor
High
12 days ago

Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature GSA_kwCzR0hTQS1tdzNoLXFqeGotNnhnOc4ABg-t

pypi thumbor
High
12 days ago

Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot GSA_kwCzR0hTQS02eDI2LTZyNmYtbTUzN84ABg-s

pypi thumbor
High
12 days ago

@phun-ky/defaults-deep Has a Prototype Pollution issue via Unsafe Recursive Property Merging GSA_kwCzR0hTQS1tajNnLTd4Y2MteDR2aM4ABg-R

npm @phun-ky/defaults-deep
High
12 days ago

hashi-vault-js has a path traversal and query parameter injection GSA_kwCzR0hTQS1nOTU2LTJmNzQtcm12N84ABg-O

npm hashi-vault-js
High
12 days ago

dssrf: any users using 1.1.1.1 DNS is impacted by SSRF GSA_kwCzR0hTQS01ODQ2LTdxbTMtcjUyas4ABg-N

npm dssrf
High
12 days ago

Sylius Mollie Plugin vulnerable to payment status forgery via the payment webhook GSA_kwCzR0hTQS1yYzUyLWM0aHYtdzg5cM4ABg-G

packagist sylius/mollie-plugin
High
12 days ago

Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS) GSA_kwCzR0hTQS05M3d2LWp3OXYtNDk3Ms4ABg-F

maven io.netty:netty-codec-http2
High
12 days ago

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode GSA_kwCzR0hTQS1xdnY3LWNnOWMtdzR4M84ABg-E

pypi nltk
High
12 days ago

Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex GSA_kwCzR0hTQS1mZzdmLTIzODYtODg5N84ABg-D

pypi nltk
High
12 days ago

Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) GSA_kwCzR0hTQS02aG01LWpnY3AtcDgzOM4ABg-C

pypi nltk
High
12 days ago

Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) GSA_kwCzR0hTQS14aDk1LWY1NW0tODJmd84ABg-B

pypi nltk
High
12 days ago

Spring Data: Unbounded property-path cache keyed by externally-supplied path string GSA_kwCzR0hTQS04OGZ3LXY2eDQtM2Y1OM4ABg9_

maven org.springframework.data:spring-data-commons
High
12 days ago

Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service GSA_kwCzR0hTQS1naHJxLTV3cHAtaHh4Nc4ABg98

go github.com/pterodactyl/wings
High
12 days ago

`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation GSA_kwCzR0hTQS1wN3c3LTQ5MjktdnBqNc4ABg92

npm @dynatrace-oss/dynatrace-mcp-server

Filter by Severity

Moderate 14,586 High 11,972 Critical 4,422 Low 2,460

Filter by Source

CPAN Security Advisory Database 1,054 Erlang Ecosystem Foundation 170 GitHub Advisory Database 34,350

Filter by Ecosystem

npm 2,895 maven 2,672 pypi 2,540 packagist 1,933 go 1,844 nuget 1,393 cargo 557 rubygems 374 hex 48 actions 23 swift 22 pub 6

Filter by Package

Microsoft.ChakraCore 234 openclaw 217 tensorflow 122 tensorflow-cpu 110 tensorflow-gpu 110 magento/community-edition 104 open-webui 73 moodle/moodle 68 flowise 62 org.jenkins-ci.main:jenkins-core 61 wwbn/avideo 56 n8n 53 parse-server 49 com.fasterxml.jackson.core:jackson-databind 45 Django 43 mlflow 42 apache-airflow 41 craftcms/cms 41 magento/project-community-edition 41 org.apache.tomcat:tomcat 40 dolibarr/dolibarr 38 pimcore/pimcore 38 github.com/rancher/rancher 36 librenms/librenms 36 drupal/core 32 typo3/cms 32 getgrav/grav 32 thorsten/phpmyfaq 32 salt 31 gogs.io/gogs 31 code.gitea.io/gitea 31 typo3/cms-core 31 Plone 28 pillow 28 phpmyadmin/phpmyadmin 28 microweber/microweber 27 nokogiri 26 symfony/symfony 26 praisonai 26 next 26 org.keycloak:keycloak-services 26 org.apache.tomcat.embed:tomcat-embed-core 25 com.liferay.portal:release.portal.bom 25 @budibase/server 25 Magick.NET-Q16-AnyCPU 25 org.apache.struts:struts2-core 25 drupal/drupal 24 ansible 24 github.com/siyuan-note/siyuan/kernel 24 github.com/mattermost/mattermost-server 24 Magick.NET-Q16-HDRI-AnyCPU 24 opencv-python 23 github.com/traefik/traefik/v2 23 opencv-contrib-python 23 github.com/hashicorp/vault 23 @anthropic-ai/claude-code 22 Magick.NET-Q16-HDRI-x86 22 Magick.NET-Q16-HDRI-OpenMP-arm64 22 com.thoughtworks.xstream:xstream 22 Magick.NET-Q8-AnyCPU 21 Magick.NET-Q16-x86 21 matrix-synapse 21 com.jfinal:jfinal 21 Pillow 21 electron 21 django 21 github.com/filebrowser/filebrowser/v2 21 Magick.NET-Q8-x86 21 Magick.NET-Q16-HDRI-arm64 21 github.com/traefik/traefik/v3 21 github.com/zitadel/zitadel 21 Magick.NET-Q8-OpenMP-arm64 20 Magick.NET-Q16-OpenMP-arm64 20 picklescan 20 Magick.NET-Q16-arm64 20 Magick.NET-Q16-x64 20 Magick.NET-Q16-OpenMP-x64 20 Magick.NET-Q16-HDRI-x64 20 pocketmine/pocketmine-mp 20 mantisbt/mantisbt 20 froxlor/froxlor 19 Microsoft.NetCore.App.Runtime.win-arm64 19 gradio 19 Magick.NET-Q8-arm64 19 Magick.NET-Q8-OpenMP-x64 19 Microsoft.AspNetCore.App.Runtime.win-x64 19 io.undertow:undertow-core 19 directus 19 org.jenkins-ci.plugins:script-security 19 Microsoft.NetCore.App.Runtime.win-arm 19 GitPython 19 vllm 19 Microsoft.NetCore.App.Runtime.win-x86 19 Microsoft.NetCore.App.Runtime.win-x64 19 deno 18 Magick.NET-Q8-x64 18 pyload-ng 18 com.liferay.portal:release.dxp.bom 18 axios 18 rdiffweb 18 keystone 18 rack 18 org.xwiki.platform:xwiki-platform-oldcore 17 mautic/core 17 getkirby/cms 17 shopware/platform 17 Microsoft.AspNetCore.App.Runtime.win-arm 17 Microsoft.AspNetCore.App.Runtime.win-x86 17 litellm 17 phpoffice/phpspreadsheet 17 github.com/grafana/grafana 17 Microsoft.NetCore.App.Runtime.linux-arm 16 github.com/usememos/memos 16 openssl-src 16 surrealdb 16 github.com/nats-io/nats-server/v2 16 openbabel 16 Microsoft.NetCore.App.Runtime.linux-arm64 16 org.apache.solr:solr-core 16 shopware/core 16 Microsoft.AspNetCore.App.Runtime.linux-arm 16 PraisonAI 16 Microsoft.NetCore.App.Runtime.linux-musl-arm64 16 Microsoft.AspNetCore.App.Runtime.linux-x64 16 Microsoft.NetCore.App.Runtime.linux-musl-arm 16 yeswiki/yeswiki 16 Microsoft.NetCore.App.Runtime.linux-x64 15 github.com/hashicorp/consul 15 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 15 org.apache.tomcat:tomcat-catalina 15 apache-superset 15 nilsteampassnet/teampass 15 praisonaiagents 15 github.com/mattermost/mattermost/server/v8 15 Microsoft.NetCore.App.Runtime.linux-musl-x64 15 statamic/cms 15 Microsoft.AspNetCore.App.Runtime.osx-x64 15 Microsoft.AspNetCore.App.Runtime.linux-arm64 15 baserproject/basercms 15 Magick.NET-Q16-HDRI-OpenMP-x64 15 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 15 Microsoft.AspNetCore.App.Runtime.win-arm64 15 github.com/kyverno/kyverno 15 concrete5/concrete5 15 tar 14 org.apache.openmeetings:openmeetings-parent 14 org.keycloak:keycloak-core 14 Microsoft.NetCore.App.Runtime.osx-x64 14 Microsoft.NetCore.App.Runtime.osx-arm64 14 vyper 14 nltk 14 mindsdb 14 net.mingsoft:ms-mcms 14 centreon/centreon 14 langflow 14 phpmyfaq/phpmyfaq 14 devcode-it/openstamanager 14 pnpm 14 snipe/snipe-it 14 pgadmin4 13 github.com/coder/coder/v2 13 better-auth 13 github.com/gotenberg/gotenberg/v8 13 github.com/hashicorp/nomad 13 golang.org/x/net 13 rubygems-update 13 cockpit-hq/cockpit 13 openmage/magento-lts 12 praisonai-platform 12 github.com/argoproj/argo-cd 12 cryptography 12 activerecord 12 composer/composer 12 github.com/argoproj/argo-cd/v2 12 github.com/ethereum/go-ethereum 12 silverstripe/framework 12 org.apache.tomcat:tomcat-coyote 11 intelliants/subrion 11 datamodel-code-generator 11 github.com/zitadel/zitadel/v2 11 laravel/framework 11 keras 11 org.keycloak:keycloak-parent 11 org.springframework.security:spring-security-core 11 github.com/ollama/ollama 11 actionpack 11 react-router 11 flowise-components 11 github.com/traefik/traefik 11 System.Security.Cryptography.Xml 10 Magick.NET-Q16-OpenMP-x86 10 handlebars 10 Microsoft.NETCore.App.Runtime.win-arm64 10 github.com/minio/minio 10 Microsoft.WindowsDesktop.App.Runtime.win-x64 10 k8s.io/ingress-nginx 10 Microsoft.NETCore.App.Runtime.win-x64 10 fickling 10 @haxtheweb/haxcms-nodejs 10 funadmin/funadmin 10

Filter by Repository

https://github.com/chakra-core/ChakraCore 204 https://github.com/tensorflow/tensorflow 122 https://github.com/xwiki/xwiki-platform 64 https://github.com/django/django 52 https://github.com/FasterXML/jackson-databind 44 https://github.com/jenkinsci/jenkins 43 https://github.com/apache/tomcat 42 https://github.com/apache/airflow 39 https://github.com/python-pillow/Pillow 35 https://github.com/moodle/moodle 34 https://github.com/keycloak/keycloak 32 https://github.com/librenms/librenms 28 https://github.com/pimcore/pimcore 28 https://github.com/dotnet/runtime 28 https://github.com/rancher/rancher 27 https://github.com/microweber/microweber 25 https://github.com/opencv/opencv 25 https://github.com/symfony/symfony 23 https://github.com/x-stream/xstream 22 https://github.com/Dolibarr/dolibarr 21 https://github.com/sparklemotion/nokogiri 20 https://github.com/apache/struts 20 https://github.com/spring-projects/spring-framework 19 https://github.com/ansible/ansible 19 https://github.com/thorsten/phpmyfaq 18 https://github.com/zitadel/zitadel 18 https://github.com/TYPO3/typo3 18 https://github.com/pmmp/PocketMine-MP 18 https://github.com/ikus060/rdiffweb 17 https://github.com/parse-community/parse-server 17 https://github.com/mlflow/mlflow 16 https://github.com/gradio-app/gradio 16 https://github.com/plone/Products.CMFPlone 16 https://github.com/rails/rails 15 https://github.com/getgrav/grav 15 https://github.com/kubernetes/kubernetes 15 https://github.com/apache/inlong 15 https://github.com/github/advisory-database 15 https://github.com/usememos/memos 14 https://github.com/argoproj/argo-cd 14 https://github.com/openstack/keystone 14 https://github.com/vyperlang/vyper 14 https://github.com/jenkinsci/script-security-plugin 14 https://github.com/grafana/grafana 14 https://github.com/undertow-io/undertow 13 https://github.com/mindsdb/mindsdb 13 https://github.com/mautic/mautic 13 https://github.com/liferay/liferay-portal 13 https://github.com/matrix-org/synapse 13 https://github.com/saltstack/salt 13 https://github.com/PHPOffice/PhpSpreadsheet 12 https://github.com/electron/electron 12 https://github.com/directus/directus 12 https://github.com/denoland/deno 12 https://github.com/hashicorp/consul 12 https://github.com/silverstripe/silverstripe-framework 11 https://github.com/hashicorp/vault 11 https://github.com/strapi/strapi 11 https://github.com/run-llama/llama_index 11 https://github.com/dotnet/aspnetcore 11 https://github.com/apache/nifi 11 https://github.com/FlowiseAI/Flowise 10 https://github.com/OpenMage/magento-lts 10 https://github.com/funadmin/funadmin 10 https://github.com/netty/netty 10 https://github.com/rack/rack 10 https://github.com/go-gitea/gitea 10 https://github.com/centreon/centreon 10 https://github.com/golang/go 10 https://github.com/surrealdb/surrealdb 10 https://github.com/octobercms/october 10 https://github.com/apache/cxf 9 https://github.com/cloudfoundry/uaa 9 https://github.com/h2oai/h2o-3 9 https://github.com/spring-projects/spring-security 9 https://github.com/apache/camel 9 https://github.com/snipe/snipe-it 9 https://github.com/anthropics/claude-code 9 https://github.com/opencontainers/runc 9 https://github.com/rusqlite/rusqlite 9 https://github.com/apollographql/router 9 https://github.com/nilsteampassnet/teampass 9 https://github.com/pyload/pyload 9 https://github.com/traefik/traefik 9 https://github.com/geoserver/geoserver 9 https://github.com/vercel/next.js 9 https://github.com/cui2shark/cms 9 https://github.com/openstack/nova 9 https://github.com/nervosnetwork/ckb 9 https://github.com/laravel/framework 9 https://github.com/shopware/platform 8 https://github.com/nats-io/nats-server 8 https://github.com/dnnsoftware/Dnn.Platform 8 https://github.com/TYPO3/TYPO3.CMS 8 https://github.com/vllm-project/vllm 8 https://github.com/PaddlePaddle/Paddle 8 https://github.com/backstage/backstage 8 https://github.com/phpmyadmin/phpmyadmin 8 https://github.com/pyca/cryptography 8 https://github.com/gogs/gogs 8 https://github.com/open-webui/open-webui 8 https://github.com/cockpit-hq/cockpit 8 https://github.com/OPCFoundation/UA-.NETStandard 8 https://github.com/craftcms/cms 8 https://github.com/OpenRefine/OpenRefine 8 https://github.com/apache/kylin 8 https://github.com/bcgit/bc-java 8 https://github.com/shopware/shopware 7 https://github.com/PHPMailer/PHPMailer 7 https://github.com/eclipse/jetty.project 7 https://github.com/magento/magento2 7 https://github.com/parisneo/lollms 7 https://github.com/composer/composer 7 https://github.com/contao/contao 7 https://github.com/mattermost/mattermost 7 https://github.com/DSpace/DSpace 7 https://github.com/MobSF/Mobile-Security-Framework-MobSF 7 https://github.com/xuxueli/xxl-job 7 https://github.com/YesWiki/yeswiki 7 https://github.com/cobbler/cobbler 7 https://github.com/rubygems/rubygems 7 https://github.com/faucetsdn/ryu 7 https://github.com/apache/activemq 7 https://github.com/mantisbt/mantisbt 7 https://github.com/smarty-php/smarty 7 https://github.com/filebrowser/filebrowser 7 https://github.com/kiwitcms/Kiwi 6 https://github.com/intelliants/subrion 6 https://github.com/quarkusio/quarkus 6 https://github.com/haxtheweb/issues 6 https://github.com/aubio/aubio 6 https://github.com/cosmos/cosmos-sdk 6 https://github.com/kyverno/kyverno 6 https://github.com/guzzle/guzzle 6 https://github.com/CVEProject/cvelist 6 https://github.com/protocolbuffers/protobuf 6 https://github.com/WWBN/AVideo 6 https://github.com/sequelize/sequelize 6 https://github.com/pgadmin-org/pgadmin4 6 https://github.com/nilsteampassnet/TeamPass 6 https://github.com/mmaitre314/picklescan 6 https://github.com/cilium/cilium 6 https://github.com/gravitl/netmaker 6 https://github.com/bodil/sized-chunks 6 https://github.com/getsentry/sentry 6 https://github.com/goharbor/harbor 6 https://github.com/RaspAP/raspap-webgui 6 https://github.com/cefsharp/CefSharp 6 https://github.com/hyperledger/fabric 6 https://github.com/froxlor/froxlor 6 https://github.com/containers/podman 6 https://github.com/drupal/core 6 https://github.com/OpenZeppelin/openzeppelin-contracts 6 https://github.com/npm/node-tar 6 https://github.com/dromara/hutool 6 https://github.com/istio/istio 6 https://github.com/minio/minio 6 https://github.com/getkirby/kirby 6 https://github.com/DrunkenShells/Disclosures 6 https://github.com/ethyca/fides 6 https://github.com/opencast/opencast 6 https://github.com/Graylog2/graylog2-server 6 https://github.com/TYPO3-CMS/core 6 https://github.com/nautobot/nautobot 6 https://github.com/OpenNMS/opennms 6 https://github.com/matrix-org/matrix-js-sdk 6 https://github.com/ImageMagick/ImageMagick 6 https://github.com/langchain-ai/langchain 6 https://github.com/beego/beego 5 https://github.com/PrestaShop/PrestaShop 5 https://github.com/vantage6/vantage6 5 https://github.com/hashicorp/go-getter 5 https://github.com/cloudflare/cfrpki 5 https://github.com/n8n-io/n8n 5 https://github.com/apache/hadoop 5 https://github.com/apache/geode 5 https://github.com/BlackFan/client-side-prototype-pollution 5 https://github.com/docker/docker 5 https://github.com/IBAX-io/go-ibax 5 https://github.com/codeigniter4/CodeIgniter4 5 https://github.com/zendframework/zendframework 5 https://github.com/yiisoft/yii2 5 https://github.com/bolt/bolt 5 https://github.com/openstack/neutron 5 https://github.com/zopefoundation/Zope 5 https://github.com/apache/xmlgraphics-batik 5 https://github.com/cakephp/cakephp 5 https://sourceforge.net/projects/phpmyadmin.sourceforge.net 5 https://github.com/cri-o/cri-o 5 https://github.com/element-hq/synapse 5 https://github.com/ethereum/go-ethereum 5 https://github.com/sebhildebrandt/systeminformation 5 https://github.com/faisalman/ua-parser-js 5 https://github.com/axios/axios 5 https://github.com/thorsten/phpMyFAQ 5 https://github.com/opencart/opencart 5 https://github.com/hpcng/singularity 5 https://github.com/statamic/cms 5 https://github.com/forkcms/forkcms 5