FLAT-W3H8C (CVE-2026-100723)
Out-of-bounds read In vm2
2.5
Low
Ecosystem: Npm
Component: vm2
FLAT-SXRRB (CVE-2026-103921)
Insecure digital certificates In @graphql-tools/executor-legacy-ws
6.9
Medium
Ecosystem: Npm
Component: @graphql-tools/executor-legacy-ws
FLAT-569G5 (CVE-2026-104852)
Prototype Pollution In @graphql-tools/utils
4.6
Medium
Ecosystem: Npm
Component: @graphql-tools/utils
FLAT-K3E72 (CVE-2026-86597)
Sensitive information stored in logs In github.com/snowflakedb/gosnowflake/v2
3.5
Low
Ecosystem: Go
Component: github.com/snowflakedb/gosnowflake/v2
FLAT-SAQS9 (GHSA-6f2x-v7q7-m7m5)
Asymmetric denial of service In hickory-resolver
2.7
Low
Ecosystem: Cargo
Component: hickory-resolver
FLAT-TJZ89 (GHSA-6w6g-hm98-mhgm)
Asymmetric denial of service In hickory-resolver
6.6
Medium
Ecosystem: Cargo
Component: hickory-resolver
FLAT-9AKY0 (GHSA-5j98-2g5x-46v6)
Insufficient data authenticity validation In hickory-resolver
2.3
Low
Ecosystem: Cargo
Component: hickory-resolver
FLAT-IOQ9G (CVE-2026-104844)
Improper resource allocation In postcss-selector-parser
4.6
Medium
Ecosystem: Npm
Component: postcss-selector-parser
FLAT-KZKYM (CVE-2026-104871)
Lack of data validation - Path Traversal In @angular/ssr
1.7
Low
Ecosystem: Npm
Component: @angular/ssr
FLAT-FA4ZW (CVE-2026-104851)
Server side template injection In fsspec
6.3
Medium
Ecosystem: PyPI
Component: fsspec
FLAT-6AC2T (CVE-2026-103922)
Missing subresource integrity check In com.capacitorjs:core
5.7
Medium
Ecosystem: Maven
Component: com.capacitorjs:core
FLAT-CUNHH (CVE-2026-104872)
Sensitive information stored in logs In @opentelemetry/instrumentation-mysql2
2.7
Low
Ecosystem: Npm
Component: @opentelemetry/instrumentation-mysql2
FLAT-GB0Z9 (GHSA-jggr-w7fw-pc2j)
Improper resource allocation In fast-copy
1.7
Low
Ecosystem: Npm
Component: fast-copy
FLAT-THIKY (GHSA-g2v6-rqmx-r4w6)
Server side cross-site scripting In @vue/server-renderer
1.7
Low
Ecosystem: Npm
Component: @vue/server-renderer
FLAT-7F6UA (CVE-2026-104848)
Prototype Pollution In tinypool
8.4
High
Ecosystem: Npm
Component: tinypool
FLAT-K4OYA (CVE-2026-104849)
Prototype Pollution In tinypool
8.4
High
Ecosystem: Npm
Component: tinypool
FLAT-5HUOA (GHSA-v853-p72q-4cfw)
Sensitive information stored in logs In quart
6.6
Medium
Ecosystem: PyPI
Component: quart
FLAT-56NQ1 (CVE-2026-104873)
Improper authorization control for web services In langgraph-sdk
4.9
Medium
Ecosystem: PyPI
Component: langgraph-sdk
FLAT-3KG59 (CVE-2026-104182)
Improper resource allocation In stream-json
4.6
Medium
Ecosystem: Npm
Component: stream-json
FLAT-OH80A (CVE-2026-104183)
Prototype Pollution In stream-json
1.9
Low
Ecosystem: Npm
Component: stream-json
FLAT-X4Y8C (CVE-2026-92959)
Security controls bypass or absence In vm2
5.0
Medium
Ecosystem: Npm
Component: vm2
FLAT-P2HDA (CVE-2026-92955)
Improper authorization control for web services In vm2
9.1
Critical
Ecosystem: Npm
Component: vm2
FLAT-LEKGH (CVE-2026-92954)
Lack of isolation methods In vm2
7.7
High
Ecosystem: Npm
Component: vm2
FLAT-96B91 (CVE-2026-92953)
Prototype Pollution In vm2
7.9
High
Ecosystem: Npm
Component: vm2
FLAT-DPN66 (CVE-2026-92934)
Security controls bypass or absence In vm2
8.4
High
Ecosystem: Npm
Component: vm2
FLAT-AS0US (CVE-2026-92933)
Security controls bypass or absence In vm2
2.7
Low
Ecosystem: Npm
Component: vm2
FLAT-TPC7X (CVE-2026-104847)
Reflected cross-site scripting (XSS) In prosemirror-view
6.0
Medium
Ecosystem: Npm
Component: prosemirror-view
FLAT-V2LSE (CVE-2026-92936)
Technical information leak In vm2
2.7
Low
Ecosystem: Npm
Component: vm2
FLAT-EWEXL (CVE-2026-92942)
Improper resource allocation In vm2
4.6
Medium
Ecosystem: Npm
Component: vm2
FLAT-LA85P (CVE-2026-92946)
Improper authorization control for web services In vm2
8.4
High
Ecosystem: Npm
Component: vm2
FLAT-M6ZGB (CVE-2026-92947)
Sensitive information sent insecurely In vm2
8.3
High
Ecosystem: Npm
Component: vm2
FLAT-B4H19 (CVE-2026-92956)
Security controls bypass or absence In vm2
5.9
Medium
Ecosystem: Npm
Component: vm2
FLAT-TVBS5 (CVE-2026-105751)
Lack of data validation - Path Traversal In docling
4.6
Medium
Ecosystem: PyPI
Component: docling
FLAT-V6HQW (CVE-2026-74866)
Lack of data validation In @fastify/busboy
2.7
Low
Ecosystem: Npm
Component: @fastify/busboy
FLAT-02OXZ (CVE-2026-9205)
Weak credential policy In langflow
6.9
Medium
Ecosystem: PyPI
Component: langflow
FLAT-GITG6 (CVE-2026-8505)
Authentication mechanism absence or evasion In langflow
7.2
High
Ecosystem: PyPI
Component: langflow
FLAT-F3SNT (CVE-2026-51886)
Remote command execution In langflow
6.3
Medium
Ecosystem: PyPI
Component: langflow
FLAT-N4MBX (CVE-2026-7700)
Lack of data validation In langflow
5.2
Medium
Ecosystem: PyPI
Component: langflow
FLAT-9CCZM (MAL-2026-17628)
Use of software with malware In erc7730-hackathon
5.2
Medium
Ecosystem: PyPI
Component: erc7730-hackathon
FLAT-71SUA (CVE-2026-94201)
Asymmetric denial of service In ash
4.6
Medium
Ecosystem: Hex
Component: ash
FLAT-BQBNH (GHSA-4wwp-f6gw-6qm5)
Local file inclusion In github.com/siyuan-note/siyuan/kernel
7.7
High
Ecosystem: Go
Component: github.com/siyuan-note/siyuan/kernel
FLAT-UA5NM (CVE-2026-85175)
Local file inclusion In github.com/siyuan-note/siyuan/kernel
7.8
High
Ecosystem: Go
Component: github.com/siyuan-note/siyuan/kernel
FLAT-PZUY4 (GHSA-3cm4-ccvw-6xr6)
Improper authorization control for web services In github.com/siyuan-note/siyuan/kernel
2.1
Low
Ecosystem: Go
Component: github.com/siyuan-note/siyuan/kernel
FLAT-NPMPI (CVE-2026-82651)
Improper authorization control for web services In github.com/siyuan-note/siyuan/kernel
2.1
Low
Ecosystem: Go
Component: github.com/siyuan-note/siyuan/kernel
FLAT-K51QN (CVE-2026-103918)
Prototype Pollution In @orpc/zod
1.7
Low
Ecosystem: Npm
Component: @orpc/zod
FLAT-I3WT9 (MAL-2026-17627)
Use of software with malware In serpacksven2
5.2
Medium
Ecosystem: Npm
Component: serpacksven2
FLAT-TG8FT (MAL-2026-17626)
Use of software with malware In serpacksven1
5.2
Medium
Ecosystem: Npm
Component: serpacksven1
FLAT-7Z8AR (MAL-2026-17625)
Use of software with malware In serpacksven
5.2
Medium
Ecosystem: Npm
Component: serpacksven
FLAT-IHYF1 (MAL-2026-17624)
Use of software with malware In documenclient
5.2
Medium
Ecosystem: Npm
Component: documenclient
FLAT-60SG2 (MAL-2026-17576)
Use of software with malware In css-nrmgzn-polyfill
5.2
Medium
Ecosystem: Npm
Component: css-nrmgzn-polyfill
FLAT-546VV (MAL-2026-17572)
Use of software with malware In checkmate-remediation-assistant
5.2
Medium
Ecosystem: Npm
Component: checkmate-remediation-assistant
FLAT-AF45R (MAL-2026-17579)
Use of software with malware In with-cte
5.2
Medium
Ecosystem: Npm
Component: with-cte
FLAT-JQ0OU (MAL-2026-17573)
Use of software with malware In css-eqxcdx-polyfill
5.2
Medium
Ecosystem: Npm
Component: css-eqxcdx-polyfill
FLAT-EEIMV (MAL-2026-17575)
Use of software with malware In css-kfvwax-polyfill
5.2
Medium
Ecosystem: Npm
Component: css-kfvwax-polyfill
FLAT-B9VUF (MAL-2026-17574)
Use of software with malware In css-gwqyid-polyfill
5.2
Medium
Ecosystem: Npm
Component: css-gwqyid-polyfill
FLAT-H57ZC (MAL-2026-17578)
Use of software with malware In css-yhpodl-polyfill
5.2
Medium
Ecosystem: Npm
Component: css-yhpodl-polyfill
FLAT-YIIMV (MAL-2026-17577)
Use of software with malware In css-vvgsze-polyfill
5.2
Medium
Ecosystem: Npm
Component: css-vvgsze-polyfill
FLAT-6KRUI (MAL-2026-17597)
Use of software with malware In eth-address-utils
5.2
Medium
Ecosystem: RubyGems
Component: eth-address-utils
FLAT-U1OUC (MAL-2026-17612)
Use of software with malware In tx-broadcast-utils
5.2
Medium
Ecosystem: RubyGems
Component: tx-broadcast-utils
FLAT-L8PEA (MAL-2026-17598)
Use of software with malware In eth-keystore-utils
5.2
Medium
Ecosystem: RubyGems
Component: eth-keystore-utils
FLAT-PV1V8 (MAL-2026-17602)
Use of software with malware In hdkey-derive-helper
5.2
Medium
Ecosystem: RubyGems
Component: hdkey-derive-helper
FLAT-2NQV4 (MAL-2026-17614)
Use of software with malware In wallet-backup-tool
5.2
Medium
Ecosystem: RubyGems
Component: wallet-backup-tool
FLAT-ZUHFS (MAL-2026-17588)
Use of software with malware In blockchain-sync-utils
5.2
Medium
Ecosystem: RubyGems
Component: blockchain-sync-utils
FLAT-6RH60 (MAL-2026-17581)
Use of software with malware In bip39-wordlist-utils
5.2
Medium
Ecosystem: RubyGems
Component: bip39-wordlist-utils
FLAT-UHKAP (MAL-2026-17608)
Use of software with malware In lightning-invoice-utils
5.2
Medium
Ecosystem: RubyGems
Component: lightning-invoice-utils
FLAT-J2RL6 (MAL-2026-17580)
Use of software with malware In base58-check-helper
5.2
Medium
Ecosystem: RubyGems
Component: base58-check-helper
FLAT-JY0IB (MAL-2026-17594)
Use of software with malware In crypto-key-utils
5.2
Medium
Ecosystem: RubyGems
Component: crypto-key-utils
FLAT-3PNBO (MAL-2026-17590)
Use of software with malware In coinmarket-utils
5.2
Medium
Ecosystem: RubyGems
Component: coinmarket-utils
FLAT-PYLHZ (MAL-2026-17609)
Use of software with malware In merkle-proof-lite
5.2
Medium
Ecosystem: RubyGems
Component: merkle-proof-lite
FLAT-Z47AA (MAL-2026-17617)
Use of software with malware In web3-sign-helper
5.2
Medium
Ecosystem: RubyGems
Component: web3-sign-helper
FLAT-5J93J (MAL-2026-17613)
Use of software with malware In utxo-set-utils
5.2
Medium
Ecosystem: RubyGems
Component: utxo-set-utils
FLAT-WK7H4 (MAL-2026-17584)
Use of software with malware In bitcion-ruby
5.2
Medium
Ecosystem: RubyGems
Component: bitcion-ruby
FLAT-DB89B (MAL-2026-17582)
Use of software with malware In bitciin
5.2
Medium
Ecosystem: RubyGems
Component: bitciin
FLAT-HKW4Y (MAL-2026-17601)
Use of software with malware In ethereum-tx-helper
5.2
Medium
Ecosystem: RubyGems
Component: ethereum-tx-helper
FLAT-G8KSP (MAL-2026-17596)
Use of software with malware In electrum-protocol-lite
5.2
Medium
Ecosystem: RubyGems
Component: electrum-protocol-lite
FLAT-8LWWA (MAL-2026-17586)
Use of software with malware In bitcoin-address-utils
5.2
Medium
Ecosystem: RubyGems
Component: bitcoin-address-utils
FLAT-8H1YO (MAL-2026-17583)
Use of software with malware In bitcion
5.2
Medium
Ecosystem: RubyGems
Component: bitcion
FLAT-PARCV (MAL-2026-17593)
Use of software with malware In crypti-toolbox
5.2
Medium
Ecosystem: RubyGems
Component: crypti-toolbox
FLAT-OMS19 (MAL-2026-17605)
Use of software with malware In ligbtning-invoice
5.2
Medium
Ecosystem: RubyGems
Component: ligbtning-invoice
FLAT-8QOIL (MAL-2026-17585)
Use of software with malware In bitcoij-ruby
5.2
Medium
Ecosystem: RubyGems
Component: bitcoij-ruby
FLAT-MSO7N (MAL-2026-17607)
Use of software with malware In lightinng-invoice
5.2
Medium
Ecosystem: RubyGems
Component: lightinng-invoice
FLAT-LT2CM (MAL-2026-17599)
Use of software with malware In etherdum.rb
5.2
Medium
Ecosystem: RubyGems
Component: etherdum.rb
FLAT-8MP5A (MAL-2026-17591)
Use of software with malware In crylto-toolbox
5.2
Medium
Ecosystem: RubyGems
Component: crylto-toolbox
FLAT-141L5 (MAL-2026-17592)
Use of software with malware In cryoto-toolbox
5.2
Medium
Ecosystem: RubyGems
Component: cryoto-toolbox
FLAT-2Y2D1 (MAL-2026-17611)
Use of software with malware In tron-rb
5.2
Medium
Ecosystem: RubyGems
Component: tron-rb
FLAT-SH27K (MAL-2026-17600)
Use of software with malware In etheremu.rb
5.2
Medium
Ecosystem: RubyGems
Component: etheremu.rb
FLAT-SE9AY (MAL-2026-17606)
Use of software with malware In lighthing-invoice
5.2
Medium
Ecosystem: RubyGems
Component: lighthing-invoice
FLAT-7PG0O (MAL-2026-17603)
Use of software with malware In kecack
5.2
Medium
Ecosystem: RubyGems
Component: kecack
FLAT-H06K0 (MAL-2026-17604)
Use of software with malware In keccka
5.2
Medium
Ecosystem: RubyGems
Component: keccka
FLAT-WY8XF (MAL-2026-17610)
Use of software with malware In solaan-ruby
5.2
Medium
Ecosystem: RubyGems
Component: solaan-ruby
FLAT-AI3ZP (MAL-2026-17589)
Use of software with malware In btc-wallet-tools
5.2
Medium
Ecosystem: RubyGems
Component: btc-wallet-tools
FLAT-STAW1 (MAL-2026-17616)
Use of software with malware In web3-eth-utils
5.2
Medium
Ecosystem: RubyGems
Component: web3-eth-utils
FLAT-LBICA (MAL-2026-17587)
Use of software with malware In bitcoin-rpc-lite
5.2
Medium
Ecosystem: RubyGems
Component: bitcoin-rpc-lite
FLAT-D2KJT (MAL-2026-17595)
Use of software with malware In crypto-mnemonic-tools
5.2
Medium
Ecosystem: RubyGems
Component: crypto-mnemonic-tools
FLAT-4LT6K (MAL-2026-17615)
Use of software with malware In wallet-crypto-utils
5.2
Medium
Ecosystem: RubyGems
Component: wallet-crypto-utils
FLAT-KS6IF (MAL-2026-17619)
Use of software with malware In dzyclutch
5.2
Medium
Ecosystem: Npm
Component: dzyclutch
FLAT-1S8F1 (MAL-2026-17618)
Use of software with malware In @diezyclutch/baileys
5.2
Medium
Ecosystem: Npm
Component: @diezyclutch/baileys
FLAT-7Q9WE (MAL-2026-17622)
Use of software with malware In dzyhaxz-baileys
5.2
Medium
Ecosystem: Npm
Component: dzyhaxz-baileys
FLAT-6QWV1 (MAL-2026-17621)
Use of software with malware In dzyclutch-libsignal-node
5.2
Medium
Ecosystem: Npm
Component: dzyclutch-libsignal-node
FLAT-9X2JP (MAL-2026-17623)
Use of software with malware In dzyhaxz-libsignal
5.2
Medium
Ecosystem: Npm
Component: dzyhaxz-libsignal