LOW3.3EPSS 0.01%pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
LOW3.7EPSS 0.04%Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in s…
LOW3.1Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
LOW3.5EPSS 0.01%Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)
LOW3.1dbt MCP Server Transmits All MCP Tool Arguments Including Raw SQL and --vars Credentials to dbt Labs Telemetry by Default Without Redaction
LOW2.5dbt MCP Server Logs Tool Arguments Including SQL Queries and Credentials in Plaintext Without Redaction When File Logging Is Enabled
LOW2.7EPSS 0.09%Synapse pagination Denial of Service
LOW3.3EPSS 0.01%OSGeo GDAL vulnerable to out-of-bounds read
LOW3.5EPSS 0.04%Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed
LOW3.4EPSS 0.00%Paramiko rsakey.py allows the SHA-1 algorithm
LOW3.0EPSS 0.01%ciguard: Container image runs as root (no USER directive)