LOW3.6CVE-2025-27145EPSS 0.30%copyparty renders unsanitized filenames as HTML when user uploads empty files
LOW2.6CVE-2025-25183EPSS 0.32%vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache
LOW3.7CVE-2025-22151EPSS 0.24%Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution
LOW2.2CVE-2024-53861EPSS 1.0%PyJWT Issuer field partial matches allowed
LOW3.4CVE-2024-6971EPSS 0.03%Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py
LOW3.7CVE-2024-47869EPSS 0.16%Gradio performs a non-constant-time comparison when comparing hashes
LOW2.7CVE-2024-7038EPSS 0.21%open-webui allows enumeration of file names and traversal of directories by observing the error messages
LOW2.9CVE-2024-47813EPSS 0.01%Race condition could lead to WebAssembly control-flow integrity and type safety violations
LOW3.7CVE-2024-45231EPSS 0.24%Django allows enumeration of user e-mail addresses
LOW3.5CVE-2024-9277EPSS 0.17%Inefficient Regular Expression Complexity in langflow