Vulnerabilities
Summary — last 7 days
New vulnerabilities5,317▲ 2,075 vs. last week
Critical / high2,672▲ 1,106 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)757▲ 707 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 2.7% | — | Pull IT Project Pull IT | 3/27/2023 | 6/17/2026 | The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name. |