Developer, data & AI tools
20 flaws exploited in the last 90 days, 2 of them new or urgent. Each links to a plain-English page: who's affected and exactly what to update.
See it on the live board RSS feed Deadline calendar
- Atlassian Multiple ProductsAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- Brotli / Node.jsA bug in a common compression library puts Node.js apps at risk
- Strapi StrapiStrapi Cleartext Storage of Sensitive Information Vulnerability
- Apache StrutsApache Struts Command Injection Vulnerability
- WSO2 Multiple ProductsWSO2 Multiple Products Path Traversal Vulnerability
- GitLab Community Edition and Enterprise EditionGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
- JFrog ArtifactoryJFrog Artifactory Improper Authentication Vulnerability
- JFrog ArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability
- JFrog ArtifactoryJFrog Artifactory Improper Authentication Vulnerability
- BerriAI LiteLLMBerriAI LiteLLM Improper Authentication Vulnerability
- Kestra Kestra OSSKestra OSS OS Command Injection Vulnerability
- Kludex StarletteKludex Starlette HTTP Request/Response Smuggling Vulnerability
- JFrog ArtifactoryJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
- Ajax.NET Professional Ajax.NET ProfessionalAjax.NET Professional Deserialization of Untrusted Data Vulnerability
- Gitea GiteaGitea Code Injection Vulnerability
- MLflow MLflowMLflow Server-Side Request Forgery Vulnerability
- Ray-Project RayRay-Project Ray Code Injection Vulnerability
- Metabase MetabaseMetabase SQL Injection Vulnerability
- JetBrains TeamCityJetBrains TeamCity Deserialization of Untrusted Data Vulnerability
- IBM LangflowIBM Langflow Code Injection Vulnerability