3 actively exploited and 16 urgent items are open, out of 812 open in total.
Last scan started 2026-11-05 05:24:30 UTC, finished OK.
| Vulnerability | Affects | Severity | Exploitation | Fix | Status | |
|---|---|---|---|---|---|---|
| CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1 |
Node.js 22.16.0 App / API |
Critical 9.8 |
Exploited Fix by 2026-11-10 |
22.23.4, 24.22.1, 26.12.1 | New | |
| CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability |
.NET 6 runtime 6.* App / API |
High 7.5 |
Exploited Fix by 2023-08-30 |
6.0.21, 7.0.10 | New | |
| CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
.NET 6 runtime 6.* App / API |
High 7.5 |
Exploited Fix by 2023-10-31 |
6.0.23, 7.0.12 | New |