HOL LogoGuard

Explore HOL

  • HOL home
  • AI agent registry
  • AI plugins
  • Open standards
  • HOL members
  • Sponsor HOL
  • Advertise with HOL

Guard product

  • Guard overviewLocal security and control for AI agents and the tools they use.
  • FeaturesRuntime protection, policy routing, review, and evidence.
  • CIGARPoint your coding agent at the right lines and cut its token bill by about a third.

Explore Guard

  • Product previewWalk through Guard surfaces in read-only demo mode.
  • ComparisonCompare Guard with native controls and AI security vendors.

AI tools

  • All AI toolsEvery supported AI tool and how Guard applies policy to it.
  • Codex
  • Claude Code
  • Cursor
  • Antigravity CLI
  • OpenCode
  • Hermes
  • OpenClaw
  • GitHub Copilot CLI
  • Antigravity
  • Kimi
  • Grok
  • Pi / Oh My Pi
  • Zcode

Extensions

  • All extensionsBrowse command and MCP coverage with owners and stated limits.
  • Command coverageShell command protection across clouds, databases, backups, and packages.
  • MCP server coverageSee how Guard maps risk state across MCP tools and servers.
  • Core safetyThe safety floor listings that ship with Guard.
  • Data and resilienceBackup and storage command protection.
  • Cloud and infrastructureAWS, Azure, GCP, Kubernetes, and more.

Security

  • AI security hubSecurity research, advisories, and agent safety coverage.
  • AI tool securitySecurity profiles for each supported coding agent.
  • Safe labsHands-on attack simulations with safe boundaries.
  • Redacted warningsReal blocked actions with sensitive details removed.
  • AdvisoriesCoordinated disclosure reports for AI tooling.
  • Active CVEsSearch active CVEs affecting AI tooling.

Learn

  • Security guidesPractical guides for securing AI agent workflows.
  • DocsInstall, configure, and operate Guard with confidence.
  • ResearchPublished security research, benchmarks, and methodology.
  • Gauntlet benchmarkGuard tested with real coding agents: safe work runs, risky actions stop.

Community

  • ReleasesVersion history, shipped changes and upgrade notes.
  • ContributorsThe people and contributions behind HOL Guard.
  • AffiliatesShare Guard with your audience and earn from referrals.
  • SponsorFund agreed research, implementation and shared testing through the HOL Partner Program.
  • AdvertiseCompare README logo placements, previews and monthly prices, or promote a plugin or extension.
PricingEnterpriseOpen AppInstall Guard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • OWASP MCP mapping
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard

Get HOL Guard for your computer

HOL Guard is a free desktop app that watches what coding agents such as Claude Code, Codex and Cursor run, read and install, and asks you before anything risky happens.

  • Download for macOS
  • Windows download
  • Linux download

Free. macOS 13+ on Apple silicon, Windows x64, Linux AppImage. Other ways to install

Runs on
macOS 13 or later on Apple silicon, Windows x64 and Linux x86_64.
Price
Free. Paid plans add Guard Cloud for teams. See pricing
Where your data stays
On your computer. Guard Cloud is optional.
Token savings
33% to 38% lower spend across three coding agents in our CIGAR benchmark.

HOL

HOL builds open infrastructure for AI agents: HOL Guard, a directory of AI plugins and MCP servers, an AI agent registry and the open HCS standards.

  • GitHub (opens in a new tab)
  • X (Twitter) (opens in a new tab)
  • YouTube (opens in a new tab)
  • Telegram (opens in a new tab)

HOL Guard

  • What is HOL Guard
  • Features
  • Cut coding agent token costs (CIGAR)
  • Install Guard
  • Download the desktop app
  • Pricing
  • Guard for teams
  • Compare Guard
  • Release notes

Guard for your AI tool

  • Guard for Claude Code
  • Guard for Codex
  • Guard for Cursor
  • Guard for GitHub Copilot CLI
  • Guard for OpenCode
  • Guard for Pi and Oh My Pi
  • Guard for Hermes
  • Guard for OpenClaw
  • All supported AI tools

Research and security

  • Gauntlet: Guard tested with real agents
  • CIGAR token benchmark
  • Research
  • AI security hub
  • Security advisories
  • Active CVEs in AI tools
  • AI agent security guides
  • Extensions and coverage

Plugins and MCP servers

  • Browse AI plugins
  • New plugin launches
  • Best Claude Plugins
  • Best Codex Plugins
  • Best Grok Plugins
  • Best Kimi Plugins
  • Best DeepSeek Plugins
  • Best Antigravity Plugins
  • Best MCP Servers
  • Best Cursor Plugins
  • Best OpenCode Plugins

AI agent registry

  • Best AI agents
  • Best ERC-8004 agents
  • Best Virtuals agents
  • Best A2A agents
  • Best x402 payable agents
  • Submit an ERC-8004 contract
  • Feature your agent

Developers

  • Guard docs
  • Documentation index
  • Developer hub
  • Registry API reference
  • OpenAPI spec
  • Registry OpenAPI spec
  • Run in Postman (opens in a new tab)
  • HCS standards

Company

  • About HOL
  • Blog
  • Contribute to HOL
  • Guard contributors
  • Sponsor
  • Advertise
  • Affiliate program
  • Contact

Copyright © 2026 HOL DAO LLC. All rights reserved.

  • Privacy
  • Terms of Service

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Nov 8, 2026, 8:27 AM 52,076 active 372 known exploited

Catalog summary

52,076

Active CVEs

27,238

Critical + high

372

Known exploited

21

Ecosystems

Search and filter active CVEs

Filters & sort
Severity

Showing 951–1,000 of 52,076 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-89142Medium
    Out-of-bounds Write in Wi-Fi NPU
    CVSS 6.3
    Airoha Technology Corp./EN7529, AN7552, AN7581, AN7583, Airoha Technology Corp./EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware) +1generic
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  2. CVE-2026-77299High
    Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression
    CVSS 7.5
    dlclark/regexp2generic
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  3. CVE-2025-71458High
    FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo
    CVSS 8.7
    cern-fts/fts-monitoringgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  4. CVE-2026-63774Critical
    Subnet Solutions PowerSYSTEM Center SQL Injection
    CVSS 9.4
    Subnet Solutions/PowerSYSTEM Center 2024, Subnet Solutions/PowerSYSTEM Center 2026generic
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  5. CVE-2026-63017Critical
    Subnet Solutions PowerSYSTEM Center Incorrect Authorization
    CVSS 9.4
    Subnet Solutions/PowerSYSTEM Center 2020, Subnet Solutions/PowerSYSTEM Center 2024 +1generic
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  6. CVE-2026-123269Medium
    libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds
    CVSS 4.8
    libyal/libvmdkgeneric
    PublishedNov 6, 2026First seen at HOL Nov 6, 2026Updated Nov 6, 2026View HOL analysis
  7. CVE-2026-123268Medium
    libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption
    CVSS 5.1
    libyal/libvmdkgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  8. CVE-2026-85068Low
    NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg
    CVSS 2.4
    networkupstools/nutgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  9. CVE-2026-113663High
    AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution
    CVSS 8.8
    ag2ai/ag2, ag2ai/autogengeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  10. CVE-2026-102943Medium
    Dagu MCP DAG specification read bypasses path containment and workspace isolation
    CVSS 6.5
    dagucloud/dagugeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  11. CVE-2026-68509Medium
    FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory
    CVSS 6.3
    M66B/FairEmailgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  12. CVE-2026-92698High
    FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds read
    CVSS 8.2
    pavel-odintsov/fastnetmongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  13. CVE-2026-92697High
    FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read
    CVSS 7.5
    pavel-odintsov/fastnetmongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  14. CVE-2026-110390Medium
    FlexNet Beacon Missing Authentication Vulnerability
    CVSS 6.9
    Flexera/FlexNet Beacon, Flexera/FlexNet Manager Suitegeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  15. CVE-2026-92693High
    FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser
    CVSS 8.2
    pavel-odintsov/fastnetmongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  16. CVE-2026-93424High
    FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments
    CVSS 7.5
    pavel-odintsov/fastnetmongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  17. CVE-2026-92695High
    FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames
    CVSS 8.2
    pavel-odintsov/fastnetmongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  18. CVE-2026-92694Medium
    FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts
    CVSS 5.9
    pavel-odintsov/fastnetmongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  19. CVE-2026-88982Medium
    Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
    CVSS 5.4
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  20. CVE-2026-77596Critical
    Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
    CVSS 9.6
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  21. CVE-2026-88981High
    Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
    CVSS 8.6
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  22. CVE-2026-88980High
    Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
    CVSS 8.6
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  23. CVE-2026-88979Medium
    Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy
    CVSS 5.8
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  24. CVE-2026-88984High
    Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines
    CVSS 7.2
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  25. CVE-2026-88986Medium
    Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses
    CVSS 6.1
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  26. CVE-2026-88985Medium
    Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
    CVSS 6.5
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  27. CVE-2026-111495Medium
    API keys, credentials, and configuration parameters embedded in the MatchPoint APK
    CVSS 5.1
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  28. CVE-2026-88983Medium
    Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation
    CVSS 5.0
    kubeflow/pipelinesgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  29. CVE-2026-111494Critical
    Incorrect validation of TLS certificates in the MatchPoint Android app
    CVSS 9.1
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  30. CVE-2026-58273High
    Rucio: Authorisation Bypass on REST API endpoint for signing URLs
    CVSS 8.1
    rucio, rucio/ruciogeneric · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 28, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  31. CVE-2026-111493High
    Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint
    CVSS 8.7
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  32. CVE-2026-112908Medium
    filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
    CVSS 5.3
    filelock, tox-dev/filelockgeneric · pip
    PublishedNov 5, 2026First seen at HOL Oct 28, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  33. CVE-2026-111492High
    SQL injection in the push notification handler of the MatchPoint Android app
    CVSS 8.6
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  34. CVE-2026-111491Medium
    Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences
    CVSS 6.9
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  35. CVE-2026-112938Medium
    filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses
    CVSS 5.8
    filelock, tox-dev/filelockgeneric · pip
    PublishedNov 5, 2026First seen at HOL Oct 28, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  36. CVE-2026-112907Low
    filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
    CVSS 2.5
    filelock, tox-dev/filelockgeneric · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 23, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  37. CVE-2026-111490Critical
    Insecure direct object reference (IDOR) vulnerability in the MatchPoint API
    CVSS 9.9
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  38. CVE-2026-112913Low
    filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
    CVSS 3.3
    filelock, tox-dev/filelockgeneric · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 23, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  39. CVE-2026-111489Critical
    A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform
    CVSS 9.9
    TPC Software/Matchpointgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  40. CVE-2026-112910Medium
    filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL
    CVSS 5.3
    filelock, tox-dev/filelockgeneric · pip
    PublishedNov 5, 2026First seen at HOL Oct 28, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  41. CVE-2026-100395Medium
    LXC: lxc-copy host-context hostname update follows symlink
    CVSS 6.8
    lxc/lxcgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  42. CVE-2026-119757Critical
    BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure
    CVSS 9.3
    BTCPay Server/BTCPay Servergeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  43. CVE-2026-33944High
    Dolibarr: SQL Injection in societe/class/societe.class.php via localtax1_value parameter
    CVSS 8.8
    Dolibarr/dolibarr, dolibarr/dolibarrcomposer · generic · packagist
    PublishedNov 5, 2026First seen at HOL Oct 27, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  44. CVE-2026-111770High
    Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
    CVSS 7.7
    @modelcontextprotocol/server, modelcontextprotocol/typescript-sdkgeneric · npm
    PublishedNov 5, 2026First seen at HOL Oct 20, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-111768High
    Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
    CVSS 7.5
    @modelcontextprotocol/sdk, @modelcontextprotocol/server +1generic · npm
    PublishedNov 5, 2026First seen at HOL Oct 20, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  46. CVE-2026-111769Medium
    Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
    CVSS 6.5
    @modelcontextprotocol/client, @modelcontextprotocol/sdk +1generic · npm
    PublishedNov 5, 2026First seen at HOL Oct 20, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  47. CVE-2026-111771Medium
    Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service
    CVSS 6.8
    @modelcontextprotocol/express, @modelcontextprotocol/sdk +3generic · npm
    PublishedNov 5, 2026First seen at HOL Oct 20, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  48. CVE-2026-49272High
    OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow
    CVSS 8.5
    oauthlib, oauthlib/oauthlibgeneric · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 27, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  49. CVE-2026-77463Medium
    Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment
    CVSS 6.5
    umputun/remark42generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-77622High
    Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder
    CVSS 8.2
    BishopFox/sliver, github.com/BishopFox/slivergeneric · go
    PublishedNov 5, 2026First seen at HOL Oct 15, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
Page 20 of 1,042
Previous1819202122Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard