HOL LogoGuard

Explore HOL

  • HOL home
  • AI agent registry
  • AI plugins
  • Open standards
  • HOL members
  • Sponsor HOL
  • Advertise with HOL

Guard product

  • Guard overviewLocal security and control for AI agents and the tools they use.
  • FeaturesRuntime protection, policy routing, review, and evidence.
  • CIGARPoint your coding agent at the right lines and cut its token bill by about a third.

Explore Guard

  • Product previewWalk through Guard surfaces in read-only demo mode.
  • ComparisonCompare Guard with native controls and AI security vendors.

AI tools

  • All AI toolsEvery supported AI tool and how Guard applies policy to it.
  • Codex
  • Claude Code
  • Cursor
  • Antigravity CLI
  • OpenCode
  • Hermes
  • OpenClaw
  • GitHub Copilot CLI
  • Antigravity
  • Kimi
  • Grok
  • Pi / Oh My Pi
  • Zcode

Extensions

  • All extensionsBrowse command and MCP coverage with owners and stated limits.
  • Command coverageShell command protection across clouds, databases, backups, and packages.
  • MCP server coverageSee how Guard maps risk state across MCP tools and servers.
  • Core safetyThe safety floor listings that ship with Guard.
  • Data and resilienceBackup and storage command protection.
  • Cloud and infrastructureAWS, Azure, GCP, Kubernetes, and more.

Security

  • AI security hubSecurity research, advisories, and agent safety coverage.
  • AI tool securitySecurity profiles for each supported coding agent.
  • Safe labsHands-on attack simulations with safe boundaries.
  • Redacted warningsReal blocked actions with sensitive details removed.
  • AdvisoriesCoordinated disclosure reports for AI tooling.
  • Active CVEsSearch active CVEs affecting AI tooling.

Learn

  • Security guidesPractical guides for securing AI agent workflows.
  • DocsInstall, configure, and operate Guard with confidence.
  • ResearchPublished security research, benchmarks, and methodology.
  • Gauntlet benchmarkGuard tested with real coding agents: safe work runs, risky actions stop.

Community

  • ReleasesVersion history, shipped changes and upgrade notes.
  • ContributorsThe people and contributions behind HOL Guard.
  • AffiliatesShare Guard with your audience and earn from referrals.
  • SponsorFund agreed research, implementation and shared testing through the HOL Partner Program.
  • AdvertiseCompare README logo placements, previews and monthly prices, or promote a plugin or extension.
PricingEnterpriseOpen AppInstall Guard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • OWASP MCP mapping
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard

Get HOL Guard for your computer

HOL Guard is a free desktop app that watches what coding agents such as Claude Code, Codex and Cursor run, read and install, and asks you before anything risky happens.

  • Download for macOS
  • Windows download
  • Linux download

Free. macOS 13+ on Apple silicon, Windows x64, Linux AppImage. Other ways to install

Runs on
macOS 13 or later on Apple silicon, Windows x64 and Linux x86_64.
Price
Free. Paid plans add Guard Cloud for teams. See pricing
Where your data stays
On your computer. Guard Cloud is optional.
Token savings
33% to 38% lower spend across three coding agents in our CIGAR benchmark.

HOL

HOL builds open infrastructure for AI agents: HOL Guard, a directory of AI plugins and MCP servers, an AI agent registry and the open HCS standards.

  • GitHub (opens in a new tab)
  • X (Twitter) (opens in a new tab)
  • YouTube (opens in a new tab)
  • Telegram (opens in a new tab)

HOL Guard

  • What is HOL Guard
  • Features
  • Cut coding agent token costs (CIGAR)
  • Install Guard
  • Download the desktop app
  • Pricing
  • Guard for teams
  • Compare Guard
  • Release notes

Guard for your AI tool

  • Guard for Claude Code
  • Guard for Codex
  • Guard for Cursor
  • Guard for GitHub Copilot CLI
  • Guard for OpenCode
  • Guard for Pi and Oh My Pi
  • Guard for Hermes
  • Guard for OpenClaw
  • All supported AI tools

Research and security

  • Gauntlet: Guard tested with real agents
  • CIGAR token benchmark
  • Research
  • AI security hub
  • Security advisories
  • Active CVEs in AI tools
  • AI agent security guides
  • Extensions and coverage

Plugins and MCP servers

  • Browse AI plugins
  • New plugin launches
  • Best Claude Plugins
  • Best Codex Plugins
  • Best Grok Plugins
  • Best Kimi Plugins
  • Best DeepSeek Plugins
  • Best Antigravity Plugins
  • Best MCP Servers
  • Best Cursor Plugins
  • Best OpenCode Plugins

AI agent registry

  • Best AI agents
  • Best ERC-8004 agents
  • Best Virtuals agents
  • Best A2A agents
  • Best x402 payable agents
  • Submit an ERC-8004 contract
  • Feature your agent

Developers

  • Guard docs
  • Documentation index
  • Developer hub
  • Registry API reference
  • OpenAPI spec
  • Registry OpenAPI spec
  • Run in Postman (opens in a new tab)
  • HCS standards

Company

  • About HOL
  • Blog
  • Contribute to HOL
  • Guard contributors
  • Sponsor
  • Advertise
  • Affiliate program
  • Contact

Copyright © 2026 HOL DAO LLC. All rights reserved.

  • Privacy
  • Terms of Service

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Nov 8, 2026, 8:27 AM 52,076 active 372 known exploited

Catalog summary

52,076

Active CVEs

27,238

Critical + high

372

Known exploited

21

Ecosystems

Search and filter active CVEs

Filters & sort
Severity

Showing 1,001–1,050 of 52,076 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-81190Medium
    KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF
    CVSS 6.9
    kurrent-io/KurrentDBgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  2. CVE-2026-111062Low
    A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
    CVSS 2.3
    Eugeny/russh, russhcrates.io · generic · rust
    PublishedNov 5, 2026First seen at HOL Oct 19, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  3. CVE-2026-48705Critical
    MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
    CVSS 9.3
    Project-MONAI/MONAI, monaigeneric · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 27, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  4. CVE-2026-110802Medium
    Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
    CVSS 6.1
    altair-graphql/altair, altair-graphql/altair-express-middleware +3generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  5. CVE-2026-112902High
    Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
    CVSS 8.3
    Pillow, pillow +1generic · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 21, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  6. CVE-2026-114604High
    GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments
    CVSS 8.4
    @graphql-tools/utils, ardatan/graphql-toolsgeneric · npm
    PublishedNov 5, 2026First seen at HOL Oct 22, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  7. CVE-2026-112899Medium
    Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
    CVSS 6.3
    Pillow, pillow +1generic · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 20, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  8. CVE-2026-54442Medium
    NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF
    CVSS 4.8
    NationalSecurityAgency/emissary, gov.nsa.emissary:emissarygeneric · maven
    PublishedNov 5, 2026First seen at HOL Oct 30, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  9. CVE-2026-62268Medium
    borg extract might modify out-of-tree files when extracting maliciously crafted archives
    CVSS 5.3
    borgbackup, borgbackup/borggeneric · pip · pypi
    PublishedNov 5, 2026First seen at HOL Oct 15, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  10. CVE-2026-85076Critical
    Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)
    CVSS 9.0
    jhuckaby/Croniclegeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  11. CVE-2026-34157High
    Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
    CVSS 7.6
    github.com/wailsapp/wails/v2, wailsapp/wailsgeneric · go
    PublishedNov 5, 2026First seen at HOL Oct 27, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  12. CVE-2026-111753Medium
    Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
    CVSS 5.9
    @angular/common, angular/angulargeneric · npm
    PublishedNov 5, 2026First seen at HOL Oct 20, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  13. CVE-2026-114134High
    Black: GitHub Action installs unvalidated required-version from pyproject.toml
    CVSS 8.7
    black, psf/blackgeneric · pip
    PublishedNov 5, 2026First seen at HOL Oct 22, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  14. CVE-2026-46350Critical
    dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS
    CVSS 9.1
    dcmjs, dcmjs-org/dcmjsgeneric · npm
    PublishedNov 5, 2026First seen at HOL Oct 27, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  15. CVE-2026-119434Medium
    Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer
    CVSS 6.9
    silviucpp/ezstd, silviucpp/silviucpp/ezstdgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  16. CVE-2026-55458Low
    Caddy: RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
    CVSS 2.9
    caddyserver/caddy, github.com/caddyserver/caddy/v2generic · go
    PublishedNov 5, 2026First seen at HOL Oct 28, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  17. CVE-2026-87008High
    Code Graph RAG structural tools follow out-of-root symlinks
    CVSS 7.1
    vitali87/code-graph-raggeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  18. CVE-2026-77604High
    Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read
    CVSS 7.5
    vitali87/code-graph-raggeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  19. CVE-2026-102940Critical
    OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment
    CVSS 9.6
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  20. CVE-2026-103021Medium
    OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading
    CVSS 5.3
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  21. CVE-2026-103020Medium
    OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions
    CVSS 5.3
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  22. CVE-2026-103019Medium
    OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint
    CVSS 4.3
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  23. CVE-2026-104134Medium
    OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)
    CVSS 6.5
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  24. CVE-2026-103939Medium
    OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory
    CVSS 5.4
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  25. CVE-2026-104138Medium
    OpenEMR: Missing authorization on QRDA Category I/III download endpoints
    CVSS 6.5
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  26. CVE-2026-115573High
    OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration
    CVSS 8.1
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  27. CVE-2026-104133High
    OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
    CVSS 7.1
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  28. CVE-2026-103935High
    OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute
    CVSS 8.1
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  29. CVE-2026-104135Medium
    OpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth
    CVSS 6.5
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  30. CVE-2026-104136High
    OpenEMR: Arbitrary Patient Recall and Contact Detail Read
    CVSS 7.1
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  31. CVE-2026-76181Medium
    Heap buffer overflow in dBASE index import
    CVSS 5.4
    The Document Foundation/LibreOfficegeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  32. CVE-2026-103938High
    OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations
    CVSS 7.1
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  33. CVE-2026-104137High
    OpenEMR: Patient Data Search Without Sufficient ACL
    CVSS 7.1
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  34. CVE-2026-104139Medium
    OpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI
    CVSS 6.5
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  35. CVE-2026-65983High
    OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroot
    CVSS 7.5
    openemr/openemrgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  36. CVE-2026-116782High
    FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
    CVSS 7.5
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  37. CVE-2026-116783High
    FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
    CVSS 8.2
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  38. CVE-2026-116790Critical
    FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY
    CVSS 9.1
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  39. CVE-2026-116788High
    FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
    CVSS 8.2
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  40. CVE-2026-116780Low
    FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing
    CVSS 2.7
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  41. CVE-2026-116784High
    FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing
    CVSS 7.5
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  42. CVE-2026-116779Critical
    FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
    CVSS 9.8
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 7, 2026 Fix availableView HOL analysis
  43. CVE-2026-116789High
    FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
    CVSS 7.4
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  44. CVE-2026-116781Medium
    FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing
    CVSS 5.3
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-116785Critical
    FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
    CVSS 9.1
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  46. CVE-2026-116786High
    FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
    CVSS 8.8
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  47. CVE-2026-116787High
    FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
    CVSS 7.5
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  48. CVE-2026-116567High
    FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
    CVSS 7.5
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  49. CVE-2026-116571Medium
    FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction
    CVSS 5.9
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-116570High
    FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
    CVSS 7.5
    signalwire/freeswitchgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
Page 21 of 1,042
Previous1920212223Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard