Vulnerabilities
Summary — last 7 days
New vulnerabilities2,965▲ 27 vs. last week
Critical / high1,456▲ 193 vs. last week
New active exploitation (KEV)5▼ 3 vs. last week
Unscored (no CVSS)272▼ 254 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.5) | 0.46% | — | AltchaAIAltcha-libAIAltcha RubygemAIAltcha PIPAI+4 | 12/16/2025 | 6/17/2026 | ALTCHA is privacy-first software for captcha and bot protection. A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid… |