Vulnerabilities
Summary — last 7 days
New vulnerabilities4,625▼ 633 vs. last week
Critical / high1,827▼ 1,130 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (5.1) | 0.46% | — | MarkyAI | 1/16/2026 | 7/15/2026 | Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling remote code execution. | |
| Deferred | High (7.1) | 0.29% | — | Markyis Cool OliviaAI | 1/2/2025 | 6/17/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markyis Cool Olivia allows Reflected XSS.This issue affects Olivia: from n/a through 0.9.5. | |
| Modified | Critical (9.8) | 2.0% | — | Marky Project Marky | 3/27/2022 | 6/17/2026 | Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload. |