Vulnerabilities
Summary — last 7 days
New vulnerabilities5,380▲ 2,536 vs. last week
Critical / high2,999▲ 1,644 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.3) | 1.5% | — | Ppt2pngAI | 10/8/2026 | 10/14/2026 | ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands… |