Vulnerabilities
Summary — last 7 days
New vulnerabilities4,571▼ 837 vs. last week
Critical / high1,797▼ 1,318 vs. last week
New active exploitation (KEV)6▼ 3 vs. last week
Unscored (no CVSS)739▲ 636 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.3) | 0.33% | — | LancetAI | 10/13/2026 | 10/13/2026 | Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal IPv4, to reach… | |
| Modified | High (8.8) | 0.85% | — | Lancet Project Lancet | 11/17/2022 | 6/17/2026 | Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue when using the fileutil package to unzip files. This issue has been addressed and a fix will be included in versions 2.1.10 and 1.3.4. Users are advised to upgrade. There are no known workarounds for… | |
| Modified | High (7.2) | 6.5% | Exploit | Freelancetoindia Paytm-pay | 8/23/2021 | 6/17/2026 | The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue |