HOL LogoGuard

Explore HOL

  • HOL home
  • AI agent registry
  • AI plugins
  • Open standards
  • HOL members
  • Sponsor HOL
  • Advertise with HOL

Guard product

  • Guard overviewLocal security and control for AI agents and the tools they use.
  • FeaturesRuntime protection, policy routing, review, and evidence.
  • CIGARPoint your coding agent at the right lines and cut its token bill by about a third.

Explore Guard

  • Product previewWalk through Guard surfaces in read-only demo mode.
  • ComparisonCompare Guard with native controls and AI security vendors.

AI tools

  • All AI toolsEvery supported AI tool and how Guard applies policy to it.
  • Codex
  • Claude Code
  • Cursor
  • Antigravity CLI
  • OpenCode
  • Hermes
  • OpenClaw
  • GitHub Copilot CLI
  • Antigravity
  • Kimi
  • Grok
  • Pi / Oh My Pi
  • Zcode

Extensions

  • All extensionsBrowse command and MCP coverage with owners and stated limits.
  • Command coverageShell command protection across clouds, databases, backups, and packages.
  • MCP server coverageSee how Guard maps risk state across MCP tools and servers.
  • Core safetyThe safety floor listings that ship with Guard.
  • Data and resilienceBackup and storage command protection.
  • Cloud and infrastructureAWS, Azure, GCP, Kubernetes, and more.

Security

  • AI security hubSecurity research, advisories, and agent safety coverage.
  • AI tool securitySecurity profiles for each supported coding agent.
  • Safe labsHands-on attack simulations with safe boundaries.
  • Redacted warningsReal blocked actions with sensitive details removed.
  • AdvisoriesCoordinated disclosure reports for AI tooling.
  • Active CVEsSearch active CVEs affecting AI tooling.

Learn

  • Security guidesPractical guides for securing AI agent workflows.
  • DocsInstall, configure, and operate Guard with confidence.
  • ResearchPublished security research, benchmarks, and methodology.
  • Gauntlet benchmarkGuard tested with real coding agents: safe work runs, risky actions stop.

Community

  • ReleasesVersion history, shipped changes and upgrade notes.
  • ContributorsThe people and contributions behind HOL Guard.
  • AffiliatesShare Guard with your audience and earn from referrals.
  • SponsorFund agreed research, implementation and shared testing through the HOL Partner Program.
  • AdvertiseCompare README logo placements, previews and monthly prices, or promote a plugin or extension.
PricingEnterpriseOpen AppInstall Guard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • OWASP MCP mapping
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard

Get HOL Guard for your computer

HOL Guard is a free desktop app that watches what coding agents such as Claude Code, Codex and Cursor run, read and install, and asks you before anything risky happens.

  • Download for macOS
  • Windows download
  • Linux download

Free. macOS 13+ on Apple silicon, Windows x64, Linux AppImage. Other ways to install

Runs on
macOS 13 or later on Apple silicon, Windows x64 and Linux x86_64.
Price
Free. Paid plans add Guard Cloud for teams. See pricing
Where your data stays
On your computer. Guard Cloud is optional.
Token savings
33% to 38% lower spend across three coding agents in our CIGAR benchmark.

HOL

HOL builds open infrastructure for AI agents: HOL Guard, a directory of AI plugins and MCP servers, an AI agent registry and the open HCS standards.

  • GitHub (opens in a new tab)
  • X (Twitter) (opens in a new tab)
  • YouTube (opens in a new tab)
  • Telegram (opens in a new tab)

HOL Guard

  • What is HOL Guard
  • Features
  • Cut coding agent token costs (CIGAR)
  • Install Guard
  • Download the desktop app
  • Pricing
  • Guard for teams
  • Compare Guard
  • Release notes

Guard for your AI tool

  • Guard for Claude Code
  • Guard for Codex
  • Guard for Cursor
  • Guard for GitHub Copilot CLI
  • Guard for OpenCode
  • Guard for Pi and Oh My Pi
  • Guard for Hermes
  • Guard for OpenClaw
  • All supported AI tools

Research and security

  • Gauntlet: Guard tested with real agents
  • CIGAR token benchmark
  • Research
  • AI security hub
  • Security advisories
  • Active CVEs in AI tools
  • AI agent security guides
  • Extensions and coverage

Plugins and MCP servers

  • Browse AI plugins
  • New plugin launches
  • Best Claude Plugins
  • Best Codex Plugins
  • Best Grok Plugins
  • Best Kimi Plugins
  • Best DeepSeek Plugins
  • Best Antigravity Plugins
  • Best MCP Servers
  • Best Cursor Plugins
  • Best OpenCode Plugins

AI agent registry

  • Best AI agents
  • Best ERC-8004 agents
  • Best Virtuals agents
  • Best A2A agents
  • Best x402 payable agents
  • Submit an ERC-8004 contract
  • Feature your agent

Developers

  • Guard docs
  • Documentation index
  • Developer hub
  • Registry API reference
  • OpenAPI spec
  • Registry OpenAPI spec
  • Run in Postman (opens in a new tab)
  • HCS standards

Company

  • About HOL
  • Blog
  • Contribute to HOL
  • Guard contributors
  • Sponsor
  • Advertise
  • Affiliate program
  • Contact

Copyright © 2026 HOL DAO LLC. All rights reserved.

  • Privacy
  • Terms of Service

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Nov 8, 2026, 7:44 AM 52,076 active 372 known exploited

Catalog summary

52,076

Active CVEs

27,238

Critical + high

372

Known exploited

21

Ecosystems

Search and filter active CVEs

Filters & sort
Severity

Showing 601–650 of 52,076 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-121515Medium
    FV Flowplayer Video Player <= 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Content
    CVSS 5.4
    foliovision/FV Flowplayer Video Playergeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  2. CVE-2026-104913High
    Interactive Real Estate <= 2.6.0- Authenticated (Subscriber+) Arbitrary File Upload via Project Import ZIP with Crafted image_map.json
    CVSS 8.8
    esaia/Interactive Real Estate – Floor Plan & Building Visualizergeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  3. CVE-2026-118067Medium
    Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via disabled_fields Parameter
    CVSS 5.4
    10web/Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Buildergeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  4. CVE-2026-119165Medium
    WPBakery Page Builder <= 9.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Post Author Display Name
    CVSS 6.4
    wpbakery/WPBakery Page Buildergeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  5. CVE-2026-119152Medium
    Appointment Booking Plugin <= 5.7.6 - Unauthenticated Stored Cross-Site Scripting via Customer Email Field
    CVSS 5.4
    latepoint/Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPressgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  6. CVE-2026-119213Low
    Fluent Support <= 2.4.7 — Unauthenticated Limited Modification of Linked Customer Profile Fields via Fluent Forms Feed
    CVSS 3.7
    wpmanageninja/Fluent Support – Helpdesk & Customer Support Ticket Systemgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  7. CVE-2026-119098Medium
    LifterLMS <= 10.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Content Question Answer
    CVSS 6.4
    lifterlms/LifterLMS – WP LMS for eLearning, Online Courses, & Quizzesgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  8. CVE-2026-120555Medium
    Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter
    CVSS 5.3
    artbees/Jupiter X Coregeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  9. CVE-2026-119616Medium
    Noptin <= 4.4.3 - Unauthenticated Local File Inclusion via 'the_template_path' Merge-Tag Attribute via Stored Subscriber first_name
    CVSS 5.9
    picocodes/Noptin – Newsletter, New Post Notifications & Email Automationgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  10. CVE-2026-121519Medium
    Social Slider Feed <= 2.3.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter
    CVSS 6.4
    themeisle/Social Slider Feed – Social Media Feed & Gallery Widgetsgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  11. CVE-2026-120737Medium
    Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter
    CVSS 5.9
    artbees/Jupiter X Coregeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  12. CVE-2026-120082High
    GeoDirectory <= 2.8.200 - Unauthenticated Stored Cross-Site Scripting via Nested '[gd_dynamic_content]' Shortcode in post_content
    CVSS 7.2
    paoltaia/GeoDirectory – WP Business Directory Plugin and Classified Listings Directorygeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  13. CVE-2026-120520Medium
    Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter
    CVSS 5.3
    wpsoul/Greenshift – animation and page builder blocksgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  14. CVE-2026-119219Medium
    Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta
    CVSS 5.4
    artbees/Jupiter X Coregeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  15. CVE-2026-118046Medium
    JS Help Desk <= 5.0.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'jsticket_message' Ticket Field via VenoBox data-title
    CVSS 6.4
    rabilal/JS Help Desk – AI-Powered Support & Ticketing Systemgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  16. CVE-2026-119070High
    Optimole <= 4.2.17 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Backslash-Escaped Unicode in URL Replacer
    CVSS 7.2
    optimole/Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimizationgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  17. CVE-2026-118054Medium
    LearnPress <= 4.2.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'review_title' Parameter
    CVSS 6.4
    thimpress/LearnPress – Course Reviewgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  18. CVE-2026-116562Medium
    Motors <= 1.4.128 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Taxonomy Term Name via 'stm_f_s' Parameter
    CVSS 6.4
    stylemix/Motors – Car Dealership & Classified Listings Plugingeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  19. CVE-2026-93754Critical
    payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution
    CVSS 9.8
    payever/payever Checkout – Composable Payment Gatewaygeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  20. CVE-2026-120512High
    Form Maker by 10Web <= 1.15.50 - Unauthenticated Stored Cross-Site Scripting via Hidden Input Field Value
    CVSS 7.2
    10web/Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Buildergeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  21. CVE-2026-71881Medium
    Cross-site scripting in Integrated Publishing Toolkit
    CVSS 4.8
    GBIF/Integrated Publishing Toolkitgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 7, 2026 Fix availableView HOL analysis
  22. CVE-2026-118786Medium
    NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions
    CVSS 6.8
    NXP/MCUXpresso SDKgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  23. CVE-2026-118785Medium
    NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions
    CVSS 6.7
    NXP/MCUXpresso SDKgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  24. CVE-2026-27356Medium
    WordPress MC4WP plugin <= 4.14.1 - Broken Access Control vulnerability
    CVSS 5.3
    ibericode/mailchimp-for-wpgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 7, 2026View HOL analysis
  25. CVE-2026-120845Medium
    WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability
    CVSS 6.5
    WPMU DEV/wp-smushitgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 7, 2026View HOL analysis
  26. CVE-2026-123471Medium
    WordPress myCred plugin <= 4.0.2 - Content Injection vulnerability
    CVSS 4.3
    myCred/mycredgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  27. CVE-2026-120851Medium
    WordPress PublishPress Revisions plugin <= 4.2.0 - Broken Access Control vulnerability
    CVSS 4.3
    PublishPress/revisionarygeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 7, 2026View HOL analysis
  28. CVE-2026-119519Medium
    WordPress Royal Elementor Addons plugin <= 1.7.1068 - Broken Access Control vulnerability
    CVSS 4.3
    WProyal/royal-elementor-addonsgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 7, 2026View HOL analysis
  29. CVE-2026-122670Medium
    WordPress Polylang plugin <= 3.9 - Broken Access Control vulnerability
    CVSS 5.4
    WP SYNTEX/polylanggeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 7, 2026View HOL analysis
  30. CVE-2026-50240High
    Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount
    CVSS 8.8
    Red Hat/devspaces/udi-rhel9, Red Hat/openshift-builds/openshift-builds-rhel9-operator +22generic
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  31. CVE-2026-123791Medium
    OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection
    CVSS 6.9
    OpenBMB/Internet of Agentsgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  32. CVE-2026-59104Critical
    UgCS server HCI authentication bypass with empty credentials
    CVSS 9.3
    SPH Engineering/UgCSgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  33. CVE-2026-103022Medium
    Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS)
    CVSS 5.3
    urwid/urwidgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  34. CVE-2026-94619Medium
    FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files
    CVSS 5.9
    filegator/filegatorgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  35. CVE-2026-94618Medium
    FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive
    CVSS 5.4
    filegator/filegatorgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  36. CVE-2026-119800Medium
    Ryot: Cross-tenant collection read via `collectionContents`
    CVSS 4.3
    IgnisDa/ryotgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  37. CVE-2026-77442Medium
    Ryot: `createOrUpdateUserIntegration` trusts a client-supplied `integrationId` with no ownership check, letting any user hijack/overwrite another user's integration (cross-tenant IDOR)
    CVSS 5.9
    IgnisDa/ryotgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  38. CVE-2026-104267Medium
    Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters
    CVSS 4.1
    randombit/botangeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  39. CVE-2026-48057Low
    Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn
    CVSS 2.1
    randombit/botangeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  40. CVE-2026-47738Medium
    liboqs: Uninitialized function-pointer dereference in OQS_KEM_encaps_derand for NTRU KEMs
    CVSS 5.3
    open-quantum-safe/liboqsgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  41. CVE-2026-44519Medium
    liboqs: Missing value barrier in FO implicit rejection path (FrodoKEM, NTRU, and others)
    CVSS 5.1
    open-quantum-safe/liboqsgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  42. CVE-2026-104254Medium
    liboqs: Heap out-of-bounds read in LMS/HSS signature verification via unvalidated signature length (hss_verify_inc.c:215)
    CVSS 5.3
    open-quantum-safe/liboqsgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  43. CVE-2026-69128Medium
    Chartbrew: AI orchestrator run_query SQL blocklist bypass enables arbitrary file read on connected PostgreSQL (quoted-identifier + pg_stat_file/pg_ls_* sibling gap)
    CVSS 4.6
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  44. CVE-2026-68935Critical
    Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections
    CVSS 9.1
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  45. CVE-2026-123788Medium
    chenyme grok2api STT Billing voice_ws_handler.go behavioral workflow
    CVSS 5.3
    chenyme/grok2apigeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  46. CVE-2026-68933High
    Chartbrew: Unauthenticated Brute Force of Password-Protected Dashboards Due to Missing Rate Limit and Plaintext Password Storage
    CVSS 7.5
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  47. CVE-2026-86005Critical
    Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew
    CVSS 9.3
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  48. CVE-2026-85736High
    Chartbrew: Arbitrary file deletion as root via data connection SSL/SSH paths
    CVSS 8.1
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  49. CVE-2026-85726High
    Chartbrew: Blind NoSQL injection via date variable in embedded chart
    CVSS 7.5
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  50. CVE-2026-85712High
    Chartbrew: Cross-tenant project takeover via body.team_id in /project routes
    CVSS 8.8
    chartbrew/chartbrewgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
Page 13 of 1,042
Previous1112131415Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard