Feeds

Review required

Wmux v3.37.2 Security relevant · 15h

Auth

Eight‑character web pairing codes

Open

Upgrade now

Yopass 14.7.0 Security relevant · 15h

Auth RCE / SSRF

Remote memory exhaustion fix

Open

Upgrade now

AlysisAi/sylliptor v0.11.2 Security relevant · 19h

Breaking upgrade

CVE-2026-14257 fix

Open

Upgrade now

nesquikm/mcp-rubber-duck v1.20.2 Security relevant · 21h

Dependencies

CVE clearances

Open

Upgrade now

Pimcore v12.3.12 Security relevant · 21h

Auth RCE / SSRF

Custom report security hardening

Open

Upgrade now

KurrentDB v26.1.1 Security relevant · 22h

Auth RBAC RCE / SSRF

Arbitrary file read / SSRF fix

Open

Upgrade now

Saleor 3.23.22 Security relevant · 23h

Auth RBAC

CVE fixes

Open

Upgrade now

Saleor 3.22.63 Security relevant · 23h

Auth RBAC

Critical security fixes

Open

Upgrade now

Saleor 3.21.67 Security relevant · 23h

Auth RBAC

Critical security fixes

Open

Upgrade now

chatwoot v4.16.2 Security relevant · 1d

Security hardening

Open

No immediate action

Claudescope v0.14.1 Security relevant · 1d

Dependency security bump

Open

Upgrade now

bentopdf v2.8.7 Security relevant · 1d

CVE fixes

Open

Upgrade now

Fredy 23.2.1 Security relevant · 1d

Auth

scrypt password hashing

Open

Upgrade now

tumf/mcp-shell-server v1.1.3 Security relevant · 1d

RCE / SSRF

Reject sed/GNU find/AWK exec

Open

Review required

I4cTime/quantum_ring v0.13.1 Security relevant · 1d

RCE / SSRF

SSRF IPv6-mapped blocking

Open

Upgrade now

ludwig v0.17.8 Security relevant · 1d

RCE / SSRF

Path traversal fix

Open

Upgrade now

langroid 0.65.14 Security relevant · 1d

Auth Breaking upgrade

Blocks write SELECT statements

Open

Upgrade now

ideon v0.9.6 Security relevant · 1d

RCE / SSRF

SSRF bypass fix

Open

Upgrade now

crewAI 1.15.7 Security relevant · 1d

Dependencies

CVE-2026-16796 fix

Open

Upgrade now

Weechat v4.9.5 Security relevant · 1d

RCE / SSRF

Security fixes

Open

Config change

dozzle v10.6.12 Security relevant · 1d

Auth RBAC

Auth requirement + command palette + password fix

Open

Upgrade now

cleanslate v4.26.0 Security relevant · 1d

Dependencies

Next.js security update

Open

Upgrade now

Algernon v1.17.11 Security relevant · 1d

RCE / SSRF

Path injection fix

Open

Review required

GlobaLeaks v5.0.99 Security relevant · 2d

Auth RBAC

OTP cooldowns + usage alerts

Open

Config change

freema/openclaw-mcp 1.7.0 Security relevant · 2d

Auth RBAC

CORS disabled + task scoping

Open

Config change

ViperJuice/mcp-gateway v1.20.0 Security relevant · 2d

Auth

Fail-closed audit profile + typed audit

Open

Upgrade now

kdlbs/kandev v0.82.0 Security relevant · 2d

Dependencies

Unsigned installers

Open

Review required

freescout 1.8.231 Security relevant · 3d

Auth RBAC

Customer visibility check

Open

Upgrade now

LIA v1.25.20 Security relevant · 3d

Dependencies

Advisories closed + security controls

Open

Upgrade now

richdocuments v8.4.16 Security relevant · 3d

Auth

Post‑message origin verification fix

Open

No immediate action

NPMplus 2026-07-24-r1 Security relevant · 3d

CVE fix

Open

Upgrade now

Pullrun v0.7.2 Security · 3d

Dependencies

quinn-proto update

Open

Upgrade now

Pullrun v0.7.1 Security relevant · 3d

Auth RBAC Dependencies +1 more

Security patches grpc-go + quinn-proto

Open

Upgrade now

MistServer 3.11.2 Security relevant · 3d

Dependencies

libsrt update

Open

Review required

Andurel v1.5.5 Security relevant · 3d

Dependencies

GO-2026-5970 remediation

Open

Upgrade now

Mailu 2024.06.56 Security relevant · 4d

Auth

Roundcube security fix

Open

Upgrade now

Loomio v3.1.2 Security relevant · 4d

Auth RBAC

Privacy fixes

Open

Upgrade now

melandlabs/openloomi](https: v0.8.8 Security relevant · 4d

Auth

Missing authorization IDOR

Open

Upgrade now

egroupware 23.1.20260724 Security relevant · 4d

Auth

Security fixes + EOL notice

Open

Upgrade now

loki v3.7.4 Security relevant · 4d

Dependencies

Security patches + deps bump

Open

Upgrade now

loki v3.6.13 Security relevant · 4d

Dependencies

Security fixes + bug fixes

Open

Upgrade now

egroupware 26.7.20260724 Security relevant · 4d

Security fixes Admin/Auth/ImportExport

Open

No immediate action

NPMplus 2026-07-23-r1 Security relevant · 4d

CVE fix

Open

Upgrade now

Open-Web-Analytics 1.8.3 Security relevant · 4d

Auth

REST auth fix

Open

Upgrade now

wiredoor v1.7.3 Security relevant · 4d

Auth RCE / SSRF

Credential fix + nginx injection

Open

Upgrade now

redis 8.8.1 Security relevant · 4d

RCE / SSRF

RedisBloom/tdigest RCE vulnerability

Open

Upgrade now

redis 8.6.5 Security relevant · 4d

RCE / SSRF

Remote code execution via crafted payload

Open

Upgrade now

redis 8.4.5 Security relevant · 4d

RCE / SSRF

Remote code execution security fixes

Open

Upgrade now

redis 8.2.8 Security relevant · 4d

RCE / SSRF

RCE security fixes

Open

Upgrade now

goklab/guardvibe v3.31.0 Security relevant · 4d

Auth RCE / SSRF Dependencies

Auth.js + Next.js fixes

Open