VulnScope — package-centric CVE lookup- HIGH8.8CVE-2026-11645⚠ KEVGoogle Chromium V8 Out-of-Bounds Read and Write Vulnerability
- CRITICAL9.8⚠ KEVEPSS 7.7%Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
- CRITICAL9.6⚠ KEVEPSS 17.1%Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
- HIGH8.8⚠ KEVEPSS 4.1%LiteLLM: Authenticated command execution via MCP stdio test endpoints
- CRITICAL9.8⚠ KEVEPSS 56.9%LiteLLM has SQL Injection in Proxy API key verification
- HIGH7.8⚠ KEVEPSS 2.2%Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CRITICAL9.8⚠ KEVEPSS 80.7%Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
- HIGH8.8⚠ KEVEPSS 83.5%Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
- HIGH8.8⚠ KEVEPSS 0.65%Google Dawn Use-After-Free Vulnerability
- CRITICAL9.8⚠ KEVEPSS 24.0%Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
- HIGH8.8⚠ KEVEPSS 3.2%Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
- HIGH8.8⚠ KEVEPSS 0.45%chromium - security update
- HIGH8.8⚠ KEVEPSS 23.1%Google Chromium CSS Use-After-Free Vulnerability
- CRITICAL9.8⚠ KEVEPSS 91.5%inetutils - security update
- CRITICAL9.9⚠ KEVEPSS 65.8%n8n Vulnerable to Remote Code Execution via Expression Injection
- HIGH7.5⚠ KEVEPSS 62.8%Zlib compressed protocol header length confusion may allow memory read
- MEDIUM6.1⚠ KEVEPSS 6.9%RoundCube Webmail Cross-site Scripting Vulnerability
- HIGH8.8⚠ KEVEPSS 0.16%Apple Multiple Products Use-After-Free WebKit Vulnerability
- HIGH8.8⚠ KEVEPSS 0.30%webkit2gtk - security update
- HIGH8.8⚠ KEVEPSS 32.7%Langflow CORS misconfiguration enables Account Takeover and RCE
- CRITICAL10.0⚠ KEVEPSS 84.5%React Server Components are Vulnerable to RCE
- HIGH8.2⚠ KEVEPSS 81.4%GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
- HIGH8.8⚠ KEVEPSS 2.8%chromium - security update
- HIGH8.8⚠ KEVEPSS 0.05%Apple Multiple products Use-After-Free Vulnerability
- CRITICAL9.8⚠ KEVEPSS 27.9%@react-native-community/cli has arbitrary OS command injection