Vulnerabilities
Summary — last 7 days
New vulnerabilities5,493▲ 2,244 vs. last week
Critical / high2,825▲ 1,267 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)598▲ 390 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.8) | 0.24% | — | XlsxioAI | 10/14/2026 | 10/15/2026 | xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet Relationship lacking an… | |
| Modified | High (7.8) | 0.35% | — | Xlsxio Project Xlsxio | 6/16/2023 | 6/17/2026 | xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX file. |