Vulnerabilities
Summary — last 7 days
New vulnerabilities4,982▲ 190 vs. last week
Critical / high1,880▼ 868 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)1,013▲ 950 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.5) | 1.1% | — | BuildebooksAI | 10/14/2026 | 10/15/2026 | buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to kindlegen via child_process.exec. Attackers can craft a book project with a malicious front-matter filename or project folder name and… |