CVEs published from research at Striga. The current list is kept at striga.ai/cves.
published (23)
| cve | product | severity | write-up |
|---|---|---|---|
| CVE-2026-103663 | Ollama | Critical 9.4 | |
| CVE-2026-56153 | Apache HTTP Server | High 7.5 | |
| CVE-2026-70609 | Electron | Medium 5.7 | |
| CVE-2026-9279 | Logseq | High 8.7 | |
| CVE-2026-47901 | Logseq | Medium 4.6 | |
| CVE-2026-47900 | Logseq | Medium 4.6 | |
| CVE-2026-47899 | Logseq | High 8.7 | |
| CVE-2026-44631 | Apache HTTP Server | Low | |
| CVE-2026-48589 | Apache Shiro | Medium 6.1 | |
| CVE-2026-23918 | Apache HTTP Server | High 8.8 | read |
| CVE-2026-28909 | Apple container | Medium 6.5 | |
| CVE-2026-42249 | Ollama | High 7.7 | read |
| CVE-2026-42248 | Ollama | High 7.7 | read |
| CVE-2026-40459 | pac4j | High 8.7 | |
| CVE-2026-40458 | pac4j | High 7.0 | |
| CVE-2026-34487 | Apache Tomcat | High 7.5 | |
| CVE-2026-34486 | Apache Tomcat | High 7.5 | read |
| CVE-2026-34483 | Apache Tomcat | High 7.5 | |
| CVE-2026-25639 | axios | High 7.5 | read |
| CVE-2026-27577 | n8n | Critical 9.4 | read |
| CVE-2026-1046 | Mattermost Desktop | High 7.6 | read |
| CVE-2026-25593 | OpenClaw | High 8.4 | |
| CVE-2025-68932 | FreshRSS | Critical 9.8 |
other findings
| finding: | libheif |
|---|---|
| product: | HEIF/AVIF library behind GIMP, ImageMagick, libvips and sharp |
| details: | 6 vulnerabilities fixed in v1.23.4, 3 rated high, including a decoder deadlock that years of OSS-Fuzz did not surface; CVEs pending. |