Updated 6 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list

36added in the last 30 days

544new WordPress flaws this week

391,181entries in the database

442 results · page 5 of 9

Aug 8, 2021An issue was discovered in the bunch crate through 2020-11-12 for Rust.CVE-2020-36450 · Other software · Bunch Project · reported by MITREHigh 8.1
An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch<T>.
Product
Bunch
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the kekbit crate before 0.3.4 for Rust.CVE-2020-36449 · Other software · Kekbit Project · reported by MITREHigh 8.1
An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter<H>, Send is implemented without requiring H: Send.
Product
Kekbit
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the cache crate through 2020-11-24 for Rust.CVE-2020-36448 · Other software · Cache Project · reported by MITREHigh 8.1
An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache<K>.
Product
Cache
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the v9 crate through 2020-12-18 for Rust.CVE-2020-36447 · Other software · V9 Project · reported by MITREHigh 8.1
An issue was discovered in the v9 crate through 2020-12-18 for Rust. There is an unconditional implementation of Sync for SyncRef<T>.
Product
V9
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the signal-simple crate through 2020-11-15 for Rust.CVE-2020-36446 · Other software · Signal-simple Project · reported by MITREHigh 8.1
An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel<T>.
Product
Signal-simple
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the convec crate through 2020-11-24 for Rust.CVE-2020-36445 · Other software · Project · reported by MITREHigh 8.1
An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec<T>.
Product
Convec
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the async-coap crate through 2020-12-08 for Rust.CVE-2020-36444 · Other software · Async-coap Project · reported by MITREHigh 8.1
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC.
Product
Async-coap
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust.CVE-2020-36443 · Other software · Libp2p · reported by MITRECritical 9.8
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.
Product
Libp2p-deflate
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the beef crate before 0.5.0 for Rust.CVE-2020-36442 · Other software · Beef Project · reported by MITREHigh 8.1
An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait.
Product
Beef
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the abox crate before 0.4.1 for Rust.CVE-2020-36441 · Other software · Abox Project · reported by MITREHigh 8.1
An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no requirement for T: Send and T: Sync.
Product
Abox
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the libsbc crate before 0.1.5 for Rust.CVE-2020-36440 · Other software · Libsbc Project · reported by MITREHigh 8.1
An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder<R>, it implements Send for any R: Read.
Product
Libsbc
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust.CVE-2020-36439 · Other software · Ticketed Lock Project · reported by MITREHigh 8.1
An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> and WriteTicket<T>.
Product
Ticketed Lock
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the tiny_future crate before 0.4.0 for Rust.CVE-2020-36438 · Other software · Tiny Future Project · reported by MITREHigh 8.1
An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.
Product
Tiny Future
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the conqueue crate before 0.4.0 for Rust.CVE-2020-36437 · Other software · Conqueue Project · reported by MITREHigh 8.1
An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSender<T>.
Product
Conqueue
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the unicycle crate before 0.7.1 for Rust.CVE-2020-36436 · Other software · Unicycle Project · reported by MITREHigh 8.1
An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds on their Send and Sync traits.
Product
Unicycle
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust.CVE-2020-36435 · Other software · Ruspiro-singleton Project · reported by MITREHigh 8.1
An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks.
Product
Ruspiro-singleton
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the sys-info crate before 0.8.0 for Rust.CVE-2020-36434 · Other software · Sys-info Project · reported by MITRECritical 9.8
An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free.
Product
Sys-info
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the chunky crate through 2020-08-25 for Rust.CVE-2020-36433 · Other software · Aeplay · reported by MITREHigh 7.5
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement.
Product
Chunky
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
Aug 8, 2021An issue was discovered in the alg_ds crate through 2020-08-25 for Rust.CVE-2020-36432 · Other software · ALG DS Project · reported by MITRECritical 9.8
An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new().
Product
ALG DS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record raw.githubusercontent.com rustsec.org
May 3, 2021An issue was discovered in the algorithmica crate through 2021-03-07 for Rust.CVE-2021-31996 · Other software · Algorithmica Project · reported by MITREHigh 7.5
An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().
Product
Algorithmica
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 29, 2021An issue was discovered in the rkyv crate before 0.6.0 for Rust.CVE-2021-31919 · Other software · Rkyv Project · reported by MITREHigh 7.5
An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
Product
Rkyv
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 7, 2021An issue was discovered in the id-map crate through 2021-02-26 for Rust.CVE-2021-30457 · Other software · Id-map Project · reported by MITRECritical 9.8
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in remove_set upon a panic in a Drop impl.
Product
Id-map
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 7, 2021An issue was discovered in the id-map crate through 2021-02-26 for Rust.CVE-2021-30456 · Other software · Id-map Project · reported by MITRECritical 9.8
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in get_or_insert upon a panic of a user-provided f function.
Product
Id-map
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 7, 2021An issue was discovered in the id-map crate through 2021-02-26 for Rust.CVE-2021-30455 · Other software · Id-map Project · reported by MITRECritical 9.8
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from upon a .clone panic.
Product
Id-map
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 7, 2021An issue was discovered in the outer_cgi crate before 0.2.1 for Rust.CVE-2021-30454 · Other software · Outer CGI Project · reported by MITRECritical 9.8
An issue was discovered in the outer_cgi crate before 0.2.1 for Rust. A user-provided Read instance receives an uninitialized memory buffer from KeyValueReader.
Product
Outer CGI
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the reorder crate through 2021-02-24 for Rust.CVE-2021-29942 · Other software · Reorder Project · reported by MITREHigh 7.3
An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index can return uninitialized values if an iterator returns a len() that is too large.
Product
Reorder
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the reorder crate through 2021-02-24 for Rust.CVE-2021-29941 · Other software · Reorder Project · reported by MITREHigh 7.3
An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index has an out-of-bounds write if an iterator returns a len() that is too small.
Product
Reorder
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the through crate through 2021-02-18 for Rust.CVE-2021-29940 · Other software · Through Project · reported by MITRECritical 9.8
An issue was discovered in the through crate through 2021-02-18 for Rust. There is a double free (in through and through_and) upon a panic of the map function.
Product
Through
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the stackvector crate through 2021-02-19 for Rust.CVE-2021-29939 · Other software · Stackvector Project · reported by MITREHigh 7.3
An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data.
Product
Stackvector
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the slice-deque crate through 2021-02-19 for Rust.CVE-2021-29938 · Other software · Slice-deque Project · reported by MITREHigh 7.5
An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter upon a panic in a predicate function.
Product
Slice-deque
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the telemetry crate through 2021-02-17 for Rust.CVE-2021-29937 · Other software · Telemetry Project · reported by MITRECritical 9.8
An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size().
Product
Telemetry
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the adtensor crate through 2021-01-11 for Rust.CVE-2021-29936 · Other software · Adtensor Project · reported by MITRECritical 9.8
An issue was discovered in the adtensor crate through 2021-01-11 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix.
Product
Adtensor
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the rocket crate before 0.4.7 for Rust.CVE-2021-29935 · Other software · Rocket · reported by MITREHigh 7.3
An issue was discovered in the rocket crate before 0.4.7 for Rust. uri::Formatter can have a use-after-free if a user-provided function panics.
Product
Rocket
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust.CVE-2021-29934 · Other software · UU OD Project · reported by MITREHigh 7.3
An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.
Product
UU OD
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the insert_many crate through 2021-01-26 for Rust.CVE-2021-29933 · Other software · Insert Many Project · reported by MITREHigh 7.5
An issue was discovered in the insert_many crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next() method panics.
Product
Insert Many
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the parse_duration crate through 2021-03-18 for Rust.CVE-2021-29932 · Other software · Parse Duration Project · reported by MITREHigh 7.5
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.
Product
Parse Duration
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the arenavec crate through 2021-01-12 for Rust.CVE-2021-29931 · Other software · Arenavec Project · reported by MITREHigh 7.5
An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop().
Product
Arenavec
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the arenavec crate through 2021-01-12 for Rust.CVE-2021-29930 · Other software · Arenavec Project · reported by MITREHigh 7.5
An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A drop of uninitialized memory can sometimes occur upon a panic in T::default().
Product
Arenavec
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Apr 1, 2021An issue was discovered in the endian_trait crate through 2021-01-04 for Rust.CVE-2021-29929 · Other software · Endian Trait Project · reported by MITREHigh 7.5
An issue was discovered in the endian_trait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics.
Product
Endian Trait
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 12, 2021An issue was discovered in the fltk crate before 0.15.3 for Rust.CVE-2021-28308 · Other software · Fltk Project · reported by MITRECritical 9.1
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.
Product
Fltk
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 12, 2021An issue was discovered in the fltk crate before 0.15.3 for Rust.CVE-2021-28307 · Other software · Fltk Project · reported by MITREHigh 7.5
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.
Product
Fltk
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 12, 2021An issue was discovered in the fltk crate before 0.15.3 for Rust.CVE-2021-28306 · Other software · Fltk Project · reported by MITREHigh 7.5
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.
Product
Fltk
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 12, 2021An issue was discovered in the diesel crate before 1.4.6 for Rust.CVE-2021-28305 · Other software · Diesel · reported by MITRECritical 9.8
An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.
Product
Diesel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the internment crate before 0.4.2 for Rust.CVE-2021-28037 · Other software · Internment Project · reported by MITRECritical 9.8
An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern<T>.
Product
Internment
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the quinn crate before 0.7.0 for Rust.CVE-2021-28036 · Other software · Quinn Project · reported by MITREHigh 7.5
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Product
Quinn
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the stack_dst crate before 0.6.1 for Rust.CVE-2021-28035 · Other software · Stack DST Project · reported by MITRECritical 9.8
An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of uninitialized memory can occur upon a val.clone() panic.
Product
Stack DST
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the stack_dst crate before 0.6.1 for Rust.CVE-2021-28034 · Other software · Stack DST Project · reported by MITRECritical 9.8
An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic.
Product
Stack DST
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the byte_struct crate before 0.6.1 for Rust.CVE-2021-28033 · Other software · Byte Struct Project · reported by MITRECritical 9.8
An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.
Product
Byte Struct
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the nano_arena crate before 0.5.2 for Rust.CVE-2021-28032 · Other software · Nano Arena Project · reported by MITRECritical 9.8
An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at because two mutable references can exist for the same element, if Borrow<Idx> behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free.
Product
Nano Arena
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org
Mar 5, 2021An issue was discovered in the scratchpad crate before 1.3.1 for Rust.CVE-2021-28031 · Other software · Scratchpad Project · reported by MITRECritical 9.8
An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function.
Product
Scratchpad
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record rustsec.org rustsec.org

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.