Get a Demo

Endor Patches

Endor Patches are your shortcut to fixing security vulnerabilities—without the headache of upgrades. Patches are vetted, open-source security fixes that work as drop-in replacements for end-of-life projects or hard-to-upgrade libraries.

Filter By
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Package Name
Version
Ecosystem
CVEs Fixed
CVE ID
sorting
CVE Name
Severity
sorting
Patch Available
AI Model
Library
Downloads
sorting
Package Name
isatty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
isatty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
isatty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
isatty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
gfx-backend-empty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.ws.commons.axiom:xml-utils
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.wagon:wagon-ssh-external
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
wasmer-vnet
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
wasmer-vfs
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-storage
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
enum-map-derive
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
glutin_core_graphics
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.james:apache-mime4j-core
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.xbean:xbean-asm9-shaded
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
dylib
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
gl_common
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
crunchy
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.cxf:cxf-rt-databinding-jaxb
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
preset_env_base
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_users
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
gethostname
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
dlopen_derive
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
xml-rs
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
tw.edu.ntu.csie:libsvm
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.shared:maven-shared-utils
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
gdk
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
text_lines
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
isatty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
block-modes
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
gstreamer
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
jemallocator
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
takeable-option
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.commons:commons-dbcp2
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
dylib
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
encoding-index-simpchinese
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-iam
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
text_lines
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.doxia:doxia-module-docbook-simple
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-cloudkms
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.doxia:doxia-skin-model
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
takeable-option
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.cxf:cxf-rt-transports-http
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
javax.cache:test-domain
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
gethostname
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
line-wrap
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
diesel_migrations
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
gethostname
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
wasmer-vbus
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
derefable
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-storage
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
winrt_macros
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map-derive
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
wasmer-vfs
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
euclid_macros
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
diesel_migrations
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map-derive
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
gtk3-macros
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.cxf:cxf-rt-wsdl
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.doxia:doxia-skin-model
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-cloudkms
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
netif
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
isatty
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.lucene:lucene-spatial-extras
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
jemalloc-sys
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
wasmer-vfs
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
listenfd
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
jemalloc-sys
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
net.sf.saxon:Saxon-HE
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
wasmer-vfs
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
jemallocator
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-cloudresourcemanager
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
termion
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
mimalloc-rust-sys
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.reporting:maven-reporting-api
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.doxia:doxia-skin-model
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
glutin_core_foundation
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-storage
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.geronimo.components:geronimo-transaction
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
gethostname
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
net.sf.saxon:Saxon-HE
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
com.google.apis:google-api-services-cloudresourcemanager
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
redox_users
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
redox_syscall
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
enum-map
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
netif
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
mimalloc-rust
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
pad
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.maven.wagon:wagon-ssh-external
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
Package Name
diesel_migrations
Version
VERSION
Environment
cargo
VERSION
CVEs Fixed
No items found.
Package Name
org.apache.james:apache-mime4j-core
Version
VERSION
Environment
maven
VERSION
CVEs Fixed
No items found.
No results found
CVE ID
GHSA-9qxh-258v-666c
cve
CVE Name
owning_ref vulnerable to multiple soundness issues
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2009-2625
CVE-2009-2625
cve
CVE Name
Denial of service in Apache Xerces2
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2019-0231
CVE-2019-0231
cve
CVE Name
Cleartext Transmission of Sensitive Information in Apache MINA
Severity
High
High
Patch Avail
CVE ID
CVE-2020-7692
CVE-2020-7692
cve
CVE Name
Improper Authorization in Google OAuth Client
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2022-23302
CVE-2022-23302
cve
CVE Name
Deserialization of Untrusted Data in Log4j 1.x
Severity
High
High
Patch Avail
CVE ID
CVE-2023-20863
CVE-2023-20863
cve
CVE Name
Spring Framework vulnerable to denial of service
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2024-22259
CVE-2024-22259
cve
CVE Name
Spring Framework URL Parsing with Host Validation Vulnerability
Severity
High
High
Patch Avail
CVE ID
CVE-2021-39140
CVE-2021-39140
cve
CVE Name
XStream can cause a Denial of Service
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2021-27568
CVE-2021-27568
cve
CVE Name
Improper Check for Unusual or Exceptional Conditions in json-smart
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2012-6153
CVE-2012-6153
cve
CVE Name
Improper certificate validation in org.apache.httpcomponents:httpclient
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2020-14338
CVE-2020-14338
cve
CVE Name
Improper Input Validation in Xerces
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2011-1498
CVE-2011-1498
cve
CVE Name
Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-34462
CVE-2023-34462
cve
CVE Name
netty-handler SniHandler 16MB allocation
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2023-0081
cve
CVE Name
safemem is unmaintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2021-4104
CVE-2021-4104
cve
CVE Name
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
Severity
High
High
Patch Avail
CVE ID
CVE-2019-25010
CVE-2019-25010
cve
CVE Name
An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_type_id__ is overridden.
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2021-42392
CVE-2021-42392
cve
CVE Name
RCE in H2 Console
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2024-38808
CVE-2024-38808
cve
CVE Name
Spring Framework vulnerable to Denial of Service
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2022-23437
CVE-2022-23437
cve
CVE Name
Infinite Loop in Apache Xerces Java
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2022-22968
CVE-2022-22968
cve
CVE Name
Improper handling of case sensitivity in Spring Framework
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-20861
CVE-2023-20861
cve
CVE Name
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2022-23305
CVE-2022-23305
cve
CVE Name
SQL Injection in Log4j 1.2.x
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2023-37460
CVE-2023-37460
cve
CVE Name
Arbitrary File Creation in AbstractUnArchiver
Severity
High
High
Patch Avail
CVE ID
RUSTSEC-2020-0057
cve
CVE Name
crate has been renamed to `cipher`
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-15250
CVE-2020-15250
cve
CVE Name
TemporaryFolder on unix-like systems does not limit access to created files
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2022-45047
CVE-2022-45047
cve
CVE Name
Unsafe deserialization in Apache MINA SSHD
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2014-3577
CVE-2014-3577
cve
CVE Name
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2024-0412
cve
CVE Name
gtk-rs GTK3 bindings - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-26259
CVE-2020-26259
cve
CVE Name
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2021-33813
CVE-2021-33813
cve
CVE Name
XML External Entity (XXE) Injection in JDOM
Severity
High
High
Patch Avail
CVE ID
CVE-2024-22243
CVE-2024-22243
cve
CVE Name
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
Severity
High
High
Patch Avail
CVE ID
CVE-2025-23184
CVE-2025-23184
cve
CVE Name
Apache CXF: Denial of Service vulnerability with temporary files
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2024-29857
CVE-2024-29857
cve
CVE Name
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-26464
CVE-2023-26464
cve
CVE Name
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
Severity
High
High
Patch Avail
CVE ID
CVE-2024-22262
CVE-2024-22262
cve
CVE Name
Spring Framework URL Parsing with Host Validation
Severity
High
High
Patch Avail
CVE ID
CVE-2021-22060
CVE-2021-22060
cve
CVE Name
Log entry injection in Spring Framework
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-35897
CVE-2020-35897
cve
CVE Name
Data races in atom
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
GHSA-wq9x-qwcq-mmgf
cve
CVE Name
Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-5421
CVE-2020-5421
cve
CVE Name
Improper Input Validation in Spring Framework
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2024-30171
CVE-2024-30171
cve
CVE Name
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2024-0384
cve
CVE Name
`instant` is unmaintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2023-33201
CVE-2023-33201
cve
CVE Name
Bouncy Castle For Java LDAP injection vulnerability
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-26048
CVE-2023-26048
cve
CVE Name
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2019-17195
CVE-2019-17195
cve
CVE Name
Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT
Severity
Critical
Critical
Patch Avail
CVE ID
RUSTSEC-2024-0416
cve
CVE Name
gtk-rs GTK3 bindings - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-13956
CVE-2020-13956
cve
CVE Name
Cross-site scripting in Apache HttpClient
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2013-4002
CVE-2013-4002
cve
CVE Name
Missing XML Validation in Apache Xerces2
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2024-23944
CVE-2024-23944
cve
CVE Name
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Severity
Medium
Medium
Patch Avail
CVE ID
GHSA-wrw7-89jp-8q8g
cve
CVE Name
Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2018-1000632
CVE-2018-1000632
cve
CVE Name
Dom4j contains a XML Injection vulnerability
Severity
High
High
Patch Avail
CVE ID
CVE-2022-4244
CVE-2022-4244
cve
CVE Name
plexus-codehaus vulnerable to directory traversal
Severity
High
High
Patch Avail
CVE ID
CVE-2019-17573
CVE-2019-17573
cve
CVE Name
Reflected Cross-Site Scripting in Apache CXF
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2021-23463
CVE-2021-23463
cve
CVE Name
Improper Restriction of XML External Entity Reference in com.h2database:h2.
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2016-5007
CVE-2016-5007
cve
CVE Name
Spring Security and Spring Framework may not recognize certain paths that should be protected
Severity
High
High
Patch Avail
CVE ID
CVE-2023-26049
CVE-2023-26049
cve
CVE Name
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
Severity
Low
Low
Patch Avail
CVE ID
CVE-2024-30172
CVE-2024-30172
cve
CVE Name
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2012-0881
CVE-2012-0881
cve
CVE Name
Denial of service in Apache Xerces2
Severity
High
High
Patch Avail
CVE ID
CVE-2024-12224
CVE-2024-12224
cve
CVE Name
`idna` accepts Punycode labels that do not produce any non-ASCII when decoded
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2022-22970
CVE-2022-22970
cve
CVE Name
Denial of service in Spring Framework
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2024-21742
CVE-2024-21742
cve
CVE Name
Apache James MIME4J improper input validation vulnerability
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2022-4245
CVE-2022-4245
cve
CVE Name
codehaus-plexus vulnerable to XML injection
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2022-24823
CVE-2022-24823
cve
CVE Name
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2024-0413
cve
CVE Name
gtk-rs GTK3 bindings - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-15522
CVE-2020-15522
cve
CVE Name
Timing based private key exposure in Bouncy Castle
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2017-1000487
CVE-2017-1000487
cve
CVE Name
OS Command Injection in Plexus-utils
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2022-34169
CVE-2022-34169
cve
CVE Name
Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets
Severity
High
High
Patch Avail
CVE ID
CVE-2018-10237
CVE-2018-10237
cve
CVE Name
Denial of Service in Google Guava
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2024-0414
cve
CVE Name
gtk-rs GTK3 bindings - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-8908
CVE-2020-8908
cve
CVE Name
Information Disclosure in Guava
Severity
Low
Low
Patch Avail
CVE ID
CVE-2022-23307
CVE-2022-23307
cve
CVE Name
Deserialization of Untrusted Data in Apache Log4j
Severity
High
High
Patch Avail
CVE ID
RUSTSEC-2024-0419
cve
CVE Name
gtk-rs GTK3 bindings - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2020-26939
CVE-2020-26939
cve
CVE Name
Observable Differences in Behavior to Error Inputs in Bouncy Castle
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2025-0057
cve
CVE Name
fxhash - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2015-5262
CVE-2015-5262
cve
CVE Name
Denial of service vulnerability in org.apache.httpcomponents:httpclient
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2018-11039
CVE-2018-11039
cve
CVE Name
Spring Framework Cross Site Tracing (XST)
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2019-12406
CVE-2019-12406
cve
CVE Name
Potential DOS attack due to unrestricted attachment count in messages
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-2976
CVE-2023-2976
cve
CVE Name
Guava vulnerable to insecure use of temporary directory
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2018-1199
CVE-2018-1199
cve
CVE Name
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2022-23221
CVE-2022-23221
cve
CVE Name
Arbitrary code execution in H2 Console
Severity
Critical
Critical
Patch Avail
CVE ID
RUSTSEC-2024-0418
cve
CVE Name
gtk-rs GTK3 bindings - no longer maintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2022-22950
CVE-2022-22950
cve
CVE Name
Allocation of Resources Without Limits or Throttling in Spring Framework
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-33202
CVE-2023-33202
cve
CVE Name
Bouncy Castle Denial of Service (DoS)
Severity
Medium
Medium
Patch Avail
CVE ID
RUSTSEC-2023-0051
cve
CVE Name
`dlopen_derive` is unmaintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2018-1002200
CVE-2018-1002200
cve
CVE Name
Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2020-13954
CVE-2020-13954
cve
CVE Name
Cross-site scripting in Apache CXF
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2023-34453
CVE-2023-34453
cve
CVE Name
snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2021-29425
CVE-2021-29425
cve
CVE Name
Path Traversal and Improper Input Validation in Apache Commons IO
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
RUSTSEC-2024-0370
cve
CVE Name
proc-macro-error is unmaintained
Severity
Unspecified
Unspecified
Patch Avail
CVE ID
CVE-2021-34428
CVE-2021-34428
cve
CVE Name
SessionListener can prevent a session from being invalidated breaking logout
Severity
Low
Low
Patch Avail
CVE ID
CVE-2023-34454
CVE-2023-34454
cve
CVE Name
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Severity
Medium
Medium
Patch Avail
CVE ID
CVE-2019-13272
CVE-2019-13272
cve
CVE Name
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtai...
Severity
High
High
Patch Avail
CVE ID
CVE-2025-62615
CVE-2025-62615
cve
CVE Name
AutoGPT has SSRF vulnerability in ReadRSSFeedBlock
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2024-43367
CVE-2024-43367
cve
CVE Name
Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`
Severity
High
High
Patch Avail
CVE ID
CVE-2026-25512
CVE-2026-25512
cve
CVE Name
Group-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2021-30045
CVE-2021-30045
cve
CVE Name
SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function.
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2025-62616
CVE-2025-62616
cve
CVE Name
AutoGPT has SSRF vulnerability in SendDiscordFileBlock
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2026-25526
CVE-2026-25526
cve
CVE Name
JinJava Bypass through ForTag leads to Arbitrary Java Execution
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2021-22555
CVE-2021-22555
cve
CVE Name
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.
Severity
High
High
Patch Avail
CVE ID
GHSA-ggxw-g3cp-mgf8
cve
CVE Name
FUXA Unauthenticated Remote Arbitrary Device Tag Write
Severity
Critical
Critical
Patch Avail
CVE ID
CVE-2023-43632
CVE-2023-43632
cve
CVE Name
EVE Freely Allocates Buffer on The Stack With Data From Socket in github.com/lf-edge/eve
Severity
Critical
Critical
Patch Avail
CVE ID
ai-forever/mGPT
ai-model
CVE Name
transformers
CVE Name
5815
CVE ID
tals/albert-xlarge-vitaminc-mnli
ai-model
CVE Name
transformers
CVE Name
5825
CVE ID
Helsinki-NLP/opus-mt-ur-en
ai-model
CVE Name
transformers
CVE Name
5815
CVE ID
dicta-il/dictabert-joint
ai-model
CVE Name
transformers
CVE Name
5823
CVE ID
nvidia/segformer-b1-finetuned-cityscapes-1024-1024
ai-model
CVE Name
transformers
CVE Name
5908
CVE ID
SanctumAI/Mistral-Nemo-Instruct-2407-GGUF
ai-model
CVE Name
CVE Name
5901
CVE ID
MoritzLaurer/multilingual-MiniLMv2-L6-mnli-xnli
ai-model
CVE Name
transformers
CVE Name
5914
CVE ID
nm-testing/tinyllama-oneshot-w8a8-channel-dynamic-token-v2
ai-model
CVE Name
transformers
CVE Name
5845
CVE ID
lmsys/vicuna-7b-v1.5-16k
ai-model
CVE Name
transformers
CVE Name
5898
CVE ID
yanolja/EEVE-Korean-10.8B-v1.0
ai-model
CVE Name
transformers
CVE Name
5941
CVE ID
legraphista/openchat-3.6-8b-20240522-IMat-GGUF
ai-model
CVE Name
gguf
CVE Name
5864
CVE ID
Helsinki-NLP/opus-mt-en-he
ai-model
CVE Name
transformers
CVE Name
5865
CVE ID
legraphista/Qwen2-0.5B-IMat-GGUF
ai-model
CVE Name
gguf
CVE Name
5824
CVE ID
timm/convnextv2_tiny.fcmae_ft_in1k
ai-model
CVE Name
timm
CVE Name
5898
CVE ID
ByteDance-Seed/UI-TARS-7B-DPO
ai-model
CVE Name
transformers
CVE Name
5927
CVE ID
meta-llama/CodeLlama-7b-Instruct-hf
ai-model
CVE Name
transformers
CVE Name
5942
CVE ID
microsoft/BiomedVLP-BioViL-T
ai-model
CVE Name
transformers
CVE Name
5849
CVE ID
nvidia/parakeet-tdt_ctc-110m
ai-model
CVE Name
nemo
CVE Name
5872
CVE ID
Qwen/Qwen2-VL-7B
ai-model
CVE Name
transformers
CVE Name
5941
CVE ID
google/vit-base-patch32-224-in21k
ai-model
CVE Name
transformers
CVE Name
5956
CVE ID
timm/swin_large_patch4_window7_224.ms_in22k_ft_in1k
ai-model
CVE Name
timm
CVE Name
5955
CVE ID
facebook/mbart-large-cc25
ai-model
CVE Name
transformers
CVE Name
5918
CVE ID
JujoHotaru/lora
ai-model
CVE Name
diffusers
CVE Name
5981
CVE ID
LanguageBind/LanguageBind_Video_FT
ai-model
CVE Name
transformers
CVE Name
5982
CVE ID
timm/pit_b_224.in1k
ai-model
CVE Name
timm
CVE Name
5937
CVE ID
tiiuae/Falcon3-7B-Base
ai-model
CVE Name
transformers
CVE Name
6003
CVE ID
rwh/hugeone
ai-model
CVE Name
CVE Name
5845
CVE ID
hugging-quants/Meta-Llama-3.1-8B-Instruct-GPTQ-INT4
ai-model
CVE Name
transformers
CVE Name
5957
CVE ID
laion/CLIP-convnext_large_d.laion2B-s26B-b102K-augreg
ai-model
CVE Name
open_clip
CVE Name
6030
CVE ID
NousResearch/Meta-Llama-3-8B
ai-model
CVE Name
transformers
CVE Name
6031
CVE ID
GritLM/GritLM-7B
ai-model
CVE Name
transformers
CVE Name
5975
CVE ID
mlc-ai/Llama-3.2-1B-Instruct-q4f32_1-MLC
ai-model
CVE Name
mlc-llm
CVE Name
6019
CVE ID
AnnaWegmann/Style-Embedding
ai-model
CVE Name
sentence-transformers
CVE Name
5995
CVE ID
Qwen/Qwen2-1.5B-Instruct-GGUF
ai-model
CVE Name
CVE Name
5957
CVE ID
jxm/vec2text__openai_ada002__msmarco__msl128__corrector
ai-model
CVE Name
transformers
CVE Name
6002
CVE ID
urchade/gliner_small-v2.1
ai-model
CVE Name
gliner
CVE Name
5977
CVE ID
kuelumbus/polyBERT
ai-model
CVE Name
sentence-transformers
CVE Name
5967
CVE ID
hyunwoongko/ctrlsum-cnndm
ai-model
CVE Name
transformers
CVE Name
5968
CVE ID
dmargutierrez/distilbert-base-multilingual-cased-mapa_coarse-ner
ai-model
CVE Name
transformers
CVE Name
5965
CVE ID
nm-testing/tinyllama-oneshot-w4a16-channel-v2
ai-model
CVE Name
transformers
CVE Name
5963
CVE ID
istupakov/parakeet-tdt-0.6b-v3-onnx
ai-model
CVE Name
CVE Name
56591
CVE ID
microsoft/bitnet-b1.58-2B-4T
ai-model
CVE Name
transformers
CVE Name
6159
CVE ID
PixArt-alpha/PixArt-LCM-XL-2-1024-MS
ai-model
CVE Name
diffusers
CVE Name
24931
CVE ID
hf-internal-testing/tiny-sd3-pipe
ai-model
CVE Name
diffusers
CVE Name
9580
CVE ID
MoritzLaurer/ModernBERT-large-zeroshot-v2.0
ai-model
CVE Name
transformers
CVE Name
9621
CVE ID
studio-ousia/luke-large-finetuned-conll-2003
ai-model
CVE Name
transformers
CVE Name
9167
CVE ID
yiyanghkust/finbert-tone-chinese
ai-model
CVE Name
transformers
CVE Name
19811
CVE ID
TheBloke/Wizard-Vicuna-30B-Uncensored-GPTQ
ai-model
CVE Name
transformers
CVE Name
40880
CVE ID
Qwen/QwQ-32B-AWQ
ai-model
CVE Name
CVE Name
97572
CVE ID
dphn/Dolphin3.0-Llama3.1-8B
ai-model
CVE Name
CVE Name
7435
CVE ID
shi-labs/oneformer_cityscapes_swin_large
ai-model
CVE Name
transformers
CVE Name
16358
CVE ID
TheBloke/Nous-Hermes-2-Yi-34B-AWQ
ai-model
CVE Name
transformers
CVE Name
7704
CVE ID
facebook/xmod-base
ai-model
CVE Name
transformers
CVE Name
8118
CVE ID
climatebert/distilroberta-base-climate-f
ai-model
CVE Name
transformers
CVE Name
27625
CVE ID
SanjiWatsuki/Kunoichi-DPO-v2-7B
ai-model
CVE Name
transformers
CVE Name
12704
CVE ID
Lin-Chen/ShareGPT4V-7B
ai-model
CVE Name
transformers
CVE Name
7573
CVE ID
EvolutionaryScale/esm3-sm-open-v1
ai-model
CVE Name
transformers
CVE Name
10992
CVE ID
timm/fastvit_t12.apple_in1k
ai-model
CVE Name
timm
CVE Name
9495
CVE ID
deepmind/language-perceiver
ai-model
CVE Name
transformers
CVE Name
17647
CVE ID
timm/resnet34.tv_in1k
ai-model
CVE Name
timm
CVE Name
9273
CVE ID
weiweishi/roc-bert-base-zh
ai-model
CVE Name
transformers
CVE Name
18724
CVE ID
facebook/sam2.1-hiera-base-plus
ai-model
CVE Name
transformers
CVE Name
6702
CVE ID
microsoft/Phi-3-medium-128k-instruct
ai-model
CVE Name
transformers
CVE Name
11535
CVE ID
susnato/clvp_dev
ai-model
CVE Name
transformers
CVE Name
18833
CVE ID
flaviagiammarino/pubmed-clip-vit-base-patch32
ai-model
CVE Name
transformers
CVE Name
8626
CVE ID
Helsinki-NLP/opus-mt-en-sv
ai-model
CVE Name
transformers
CVE Name
8375
CVE ID
Helsinki-NLP/opus-mt-vi-en
ai-model
CVE Name
transformers
CVE Name
13350
CVE ID
stabilityai/stablelm-2-zephyr-1_6b
ai-model
CVE Name
transformers
CVE Name
7340
CVE ID
timm/efficientnet_b1.ft_in1k
ai-model
CVE Name
timm
CVE Name
7104
CVE ID
FacebookAI/xlm-roberta-large-finetuned-conll03-german
ai-model
CVE Name
transformers
CVE Name
7081
CVE ID
microsoft/prophetnet-large-uncased
ai-model
CVE Name
transformers
CVE Name
18635
CVE ID
zhiqiulin/clip-flant5-xxl
ai-model
CVE Name
transformers
CVE Name
8717
CVE ID
BAAI/bge-large-zh
ai-model
CVE Name
transformers
CVE Name
20493
CVE ID
llm-jp/llm-jp-3-3.7b-instruct
ai-model
CVE Name
transformers
CVE Name
1425063
CVE ID
HuggingFaceTB/SmolLM-360M-Instruct
ai-model
CVE Name
transformers
CVE Name
7784
CVE ID
michelleli99/emotion_text_classifier
ai-model
CVE Name
transformers
CVE Name
212828
CVE ID
reazon-research/reazonspeech-nemo-v2
ai-model
CVE Name
nemo
CVE Name
7146
CVE ID
navteca/ms-marco-MiniLM-L-6-v2
ai-model
CVE Name
sentence-transformers
CVE Name
7262
CVE ID
jhgan/ko-sbert-multitask
ai-model
CVE Name
sentence-transformers
CVE Name
11994
CVE ID
mzwing/NSFW_13B_sft-GGUF
ai-model
CVE Name
CVE Name
7053
CVE ID
yujiepan/llama-2-tiny-random
ai-model
CVE Name
transformers
CVE Name
10663
CVE ID
microsoft/speecht5_asr
ai-model
CVE Name
transformers
CVE Name
18609
CVE ID
google/bert_uncased_L-2_H-512_A-8
ai-model
CVE Name
transformers
CVE Name
80598
CVE ID
deepset/deberta-v3-large-squad2
ai-model
CVE Name
transformers
CVE Name
12882
CVE ID
microsoft/trocr-small-stage1
ai-model
CVE Name
transformers
CVE Name
7398
CVE ID
Helsinki-NLP/opus-mt-uk-en
ai-model
CVE Name
transformers
CVE Name
7272
CVE ID
davebulaval/MeaningBERT
ai-model
CVE Name
transformers
CVE Name
68888
CVE ID
funnel-transformer/small
ai-model
CVE Name
transformers
CVE Name
18718
CVE ID
unsloth/Meta-Llama-3.1-70B-Instruct-bnb-4bit
ai-model
CVE Name
transformers
CVE Name
7506
CVE ID
deepseek-ai/DeepSeek-V2.5
ai-model
CVE Name
transformers
CVE Name
7866
CVE ID
michelleli99/NSFW_text_classifier
ai-model
CVE Name
transformers
CVE Name
35235
CVE ID
sentence-transformers/sentence-t5-large
ai-model
CVE Name
sentence-transformers
CVE Name
7555
CVE ID
MingZhong/unieval-sum
ai-model
CVE Name
transformers
CVE Name
19432
CVE ID
kyutai/moshika-pytorch-bf16
ai-model
CVE Name
moshi
CVE Name
42512
CVE ID
bartowski/Hermes-3-Llama-3.1-405B-GGUF
ai-model
CVE Name
CVE Name
9117
CVE ID
TencentARC/PhotoMaker
ai-model
CVE Name
diffusers
CVE Name
6789
CVE ID
mlsa-iai-msu-lab/sci-rus-tiny
ai-model
CVE Name
sentence-transformers
CVE Name
10294
CVE ID
anferico/bert-for-patents
ai-model
CVE Name
transformers
CVE Name
8337
CVE ID
Helsinki-NLP/opus-mt-en-uk
ai-model
CVE Name
transformers
CVE Name
6785
CVE ID
OpenPipe/mistral-ft-optimized-1227
ai-model
CVE Name
transformers
CVE Name
6972

AppSec for the Software Development Revolution

Endor Labs builds a complete graph of your software estate, so teams can pinpoint and fix critical risks in complex, dependency-rich code—whether it was written by humans or AI.

Welcome to the resistance
Oops! Something went wrong, please try again.
Gradient
ProductUse casesLearnCompanyRisk explorer
Login
© 2025 Endor Labs. All rights reserved.
Legal and PrivacyTrust and Security

All names, logos, and brands of third parties listed on our site are trademarks of their respective owners. Endor Labs and its products and services are not endorsed by, sponsored by, or affiliated with these third parties. Our use of these names, logos, and brands is for identification purposes only, and does not imply any such endorsement, sponsorship, or affiliation.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.