Vulnerabilities
Summary — last 7 days
New vulnerabilities5,475▲ 2,684 vs. last week
Critical / high3,055▲ 1,729 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)168▼ 38 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.5) | 0.97% | — | Getlaminas Laminas-diactorosGuzzlephp Psr-7Fedoraproject Fedora | 4/24/2023 | 6/17/2026 | Laminas Diactoros provides PSR HTTP Message implementations. In versions 2.18.0 and prior, 2.19.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, and 2.25.0, users who create HTTP requests or responses using laminas/laminas-diactoros, when providing a newline at the start or end of a header key or value, can cause an invalid… | |
| Modified | Medium (6.1) | 0.77% | — | Getlaminas Laminas-diactoros | 8/1/2022 | 6/17/2026 | laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can potentially have the host, protocol, and/or port of a… | |
| Modified | Medium (6.1) | 0.91% | — | Zend Diactoros | 8/25/2017 | 6/17/2026 | Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks. |