CVE Program partner

seal

Seal Security

API
CVEs, 365 days78 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationSeal Security
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeVulnerabilities in Seal products or services and vulnerabilities discovered in open source libraries unless covered by the scope of another CNA.
Advisorieshttps://app.sealsecurity.io/repository

Latest CVEs · RSS

  • CVE-2026-77118 2026-08-20 · CVSS 8.4
    A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output p
  • CVE-2026-19693 2026-08-17 · CVSS 8.1
    extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive conta
  • CVE-2026-45819 2026-08-13 · CVSS 6.6
    baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate proces
  • CVE-2026-14257 2026-07-23 · CVSS 7.5
    brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (de
  • CVE-2026-45820 2026-07-22 · CVSS 6.6
    fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring comp
  • CVE-2026-13149 2026-06-30 · CVSS 7.7
    brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-ex
  • CVE-2026-45822 2026-06-30 · CVSS 6.6
    decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents()
  • CVE-2024-12905 2025-03-27 · CVSS 7.5
    An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulne

All CVE Program partners