Priority HIGH 77
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00729 · Published 2026-06-09 · Partial fix · 1.2.1, 2.0.2 CWE-835
Priority HIGH 72
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02222 · Published 2024-01-25 · Partial fix · 4.6.0, 4.6.0-6.el10_1.2 +16 CWE-122
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority HIGH 69
Axios is a promise based HTTP client for the browser and Node.js.
CVSS 3.1HIGH 7.7· Network · No auth · No interaction · EPSS 0.00854 · Published 2026-06-11 · Partial fix · 1.15.2, 0.31.1 CWE-1321
Priority HIGH 66
A flaw was found in rsync.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04646 · Published 2025-01-14 · Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22
Priority MEDIUM 55
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.10856 · Published 2026-05-22 · Partial fix · 37.0.1.1, R36 P5 +3 CWE-122
Priority MEDIUM 51
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.06537 · Published 2026-06-17 · Fixed in 1.31.2, 1.30.3 +2 CWE-122
Priority MEDIUM 46
A flaw was found in GLib.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0056 · Published 2026-06-30 · Partial fix · 2.89.0, 2.80.4-12.el10_2.14 +52 CWE-191
Priority MEDIUM 46
Immutable.js provides many Persistent Immutable data structures.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0099 · Published 2026-03-06 · Partial fix · 3.8.3, 4.3.7 +2 CWE-1321
Priority LOW 36
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00456 · Published 2020-03-31 · Fixed in v245-rc1 CWE-416
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
CVSS 3.1HIGH 7.7· Local · No auth · No interaction · EPSS 0.00346 · Published 2025-11-26 · Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190
THREATIST.IORead the docs