Vulnerabilities
Summary — last 7 days
New vulnerabilities5,213▲ 2,470 vs. last week
Critical / high2,931▲ 1,605 vs. last week
New active exploitation (KEV)11▲ 7 vs. last week
Unscored (no CVSS)217▲ 43 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 1.8% | — | Enmaso Node ConvertAI | 10/8/2026 | 10/8/2026 | @enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by child_process.exec() to… |