HOL LogoGuard

Explore HOL

  • HOL home
  • AI agent registry
  • AI plugins
  • Open standards
  • HOL members
  • Sponsor HOL
  • Advertise with HOL

Guard product

  • Guard overviewLocal security and control for AI agents and the tools they use.
  • FeaturesRuntime protection, policy routing, review, and evidence.
  • CIGARPoint your coding agent at the right lines and cut its token bill by about a third.

Explore Guard

  • Product previewWalk through Guard surfaces in read-only demo mode.
  • ComparisonCompare Guard with native controls and AI security vendors.

AI tools

  • All AI toolsEvery supported AI tool and how Guard applies policy to it.
  • Codex
  • Claude Code
  • Cursor
  • Antigravity CLI
  • OpenCode
  • Hermes
  • OpenClaw
  • GitHub Copilot CLI
  • Antigravity
  • Kimi
  • Grok
  • Pi / Oh My Pi
  • Zcode

Extensions

  • All extensionsBrowse command and MCP coverage with owners and stated limits.
  • Command coverageShell command protection across clouds, databases, backups, and packages.
  • MCP server coverageSee how Guard maps risk state across MCP tools and servers.
  • Core safetyThe safety floor listings that ship with Guard.
  • Data and resilienceBackup and storage command protection.
  • Cloud and infrastructureAWS, Azure, GCP, Kubernetes, and more.

Security

  • AI security hubSecurity research, advisories, and agent safety coverage.
  • AI tool securitySecurity profiles for each supported coding agent.
  • Safe labsHands-on attack simulations with safe boundaries.
  • Redacted warningsReal blocked actions with sensitive details removed.
  • AdvisoriesCoordinated disclosure reports for AI tooling.
  • Active CVEsSearch active CVEs affecting AI tooling.

Learn

  • Security guidesPractical guides for securing AI agent workflows.
  • DocsInstall, configure, and operate Guard with confidence.
  • ResearchPublished security research, benchmarks, and methodology.
  • Gauntlet benchmarkGuard tested with real coding agents: safe work runs, risky actions stop.

Community

  • ReleasesVersion history, shipped changes and upgrade notes.
  • ContributorsThe people and contributions behind HOL Guard.
  • AffiliatesShare Guard with your audience and earn from referrals.
  • SponsorFund agreed research, implementation and shared testing through the HOL Partner Program.
  • AdvertiseCompare README logo placements, previews and monthly prices, or promote a plugin or extension.
PricingEnterpriseOpen AppInstall Guard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • OWASP MCP mapping
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard

Get HOL Guard for your computer

HOL Guard is a free desktop app that watches what coding agents such as Claude Code, Codex and Cursor run, read and install, and asks you before anything risky happens.

  • Download for macOS
  • Windows download
  • Linux download

Free. macOS 13+ on Apple silicon, Windows x64, Linux AppImage. Other ways to install

Runs on
macOS 13 or later on Apple silicon, Windows x64 and Linux x86_64.
Price
Free. Paid plans add Guard Cloud for teams. See pricing
Where your data stays
On your computer. Guard Cloud is optional.
Token savings
33% to 38% lower spend across three coding agents in our CIGAR benchmark.

HOL

HOL builds open infrastructure for AI agents: HOL Guard, a directory of AI plugins and MCP servers, an AI agent registry and the open HCS standards.

  • GitHub (opens in a new tab)
  • X (Twitter) (opens in a new tab)
  • YouTube (opens in a new tab)
  • Telegram (opens in a new tab)

HOL Guard

  • What is HOL Guard
  • Features
  • Cut coding agent token costs (CIGAR)
  • Install Guard
  • Download the desktop app
  • Pricing
  • Guard for teams
  • Compare Guard
  • Release notes

Guard for your AI tool

  • Guard for Claude Code
  • Guard for Codex
  • Guard for Cursor
  • Guard for GitHub Copilot CLI
  • Guard for OpenCode
  • Guard for Pi and Oh My Pi
  • Guard for Hermes
  • Guard for OpenClaw
  • All supported AI tools

Research and security

  • Gauntlet: Guard tested with real agents
  • CIGAR token benchmark
  • Research
  • AI security hub
  • Security advisories
  • Active CVEs in AI tools
  • AI agent security guides
  • Extensions and coverage

Plugins and MCP servers

  • Browse AI plugins
  • New plugin launches
  • Best Claude Plugins
  • Best Codex Plugins
  • Best Grok Plugins
  • Best Kimi Plugins
  • Best DeepSeek Plugins
  • Best Antigravity Plugins
  • Best MCP Servers
  • Best Cursor Plugins
  • Best OpenCode Plugins

AI agent registry

  • Best AI agents
  • Best ERC-8004 agents
  • Best Virtuals agents
  • Best A2A agents
  • Best x402 payable agents
  • Submit an ERC-8004 contract
  • Feature your agent

Developers

  • Guard docs
  • Documentation index
  • Developer hub
  • Registry API reference
  • OpenAPI spec
  • Registry OpenAPI spec
  • Run in Postman (opens in a new tab)
  • HCS standards

Company

  • About HOL
  • Blog
  • Contribute to HOL
  • Guard contributors
  • Sponsor
  • Advertise
  • Affiliate program
  • Contact

Copyright © 2026 HOL DAO LLC. All rights reserved.

  • Privacy
  • Terms of Service

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Nov 8, 2026, 8:50 AM 52,078 active 372 known exploited

Catalog summary

52,078

Active CVEs

27,238

Critical + high

372

Known exploited

21

Ecosystems

Search and filter active CVEs

Filters & sort
Severity

Showing 1,151–1,200 of 52,078 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-54140High
    OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization
    CVSS 8.3
    tinyhumansai/openhumangeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  2. CVE-2026-102739High
    ESPectre: Unsafe Deserialization on .npz dataset leads to Code Execution
    CVSS 7.8
    francescopace/espectregeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  3. CVE-2026-123151High
    Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
    CVSS 7.5
    Red Hat/gdbgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  4. CVE-2026-121997High
    Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch
    CVSS 8.1
    Red Hat/gcc-toolset-14-gdb, Red Hat/gcc-toolset-15-gdb +1generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  5. CVE-2026-121996High
    Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length
    CVSS 8.2
    Red Hat/gcc-toolset-14-gdb, Red Hat/gcc-toolset-15-gdb +1generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  6. CVE-2026-121995High
    Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail
    CVSS 7.5
    Red Hat/gcc-toolset-14-gdb, Red Hat/gcc-toolset-15-gdb +1generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  7. CVE-2026-121994High
    Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length
    CVSS 8.8
    Red Hat/gcc-toolset-14-gdb, Red Hat/gcc-toolset-15-gdb +1generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  8. CVE-2026-97371Medium
    ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets
    CVSS 5.3
    ntop/ntopnggeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  9. CVE-2026-114232High
    Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access
    CVSS 8.1
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  10. CVE-2026-112208High
    Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first login
    CVSS 8.1
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  11. CVE-2026-110932High
    Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache
    CVSS 7.5
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  12. CVE-2026-110931High
    Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop
    CVSS 7.5
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  13. CVE-2026-107602High
    Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop
    CVSS 7.5
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  14. CVE-2026-103112High
    Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path
    CVSS 7.5
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  15. CVE-2026-107123High
    Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing
    CVSS 7.5
    Red Hat/keycloak-services, Red Hat/rhbk/keycloak-rhel9generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026View HOL analysis
  16. CVE-2026-82413High
    ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)
    CVSS 8.8
    ntop/ntopnggeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  17. CVE-2026-85287Medium
    HomeBox: Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Service
    CVSS 6.5
    sysadminsmedia/homeboxgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  18. CVE-2026-75599Medium
    HomeBox: Stored XSS via `javascript:` URI in Custom Entity Fields
    CVSS 5.4
    sysadminsmedia/homeboxgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  19. CVE-2026-85286Low
    HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay
    CVSS 3.7
    sysadminsmedia/homeboxgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  20. CVE-2026-119344Critical
    Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks
    CVSS 9.1
    ultravioletrs/cocosgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  21. CVE-2026-123125Medium
    Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass
    CVSS 6.3
    sensiolabs/symfony/validatorgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  22. CVE-2026-119345High
    Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
    CVSS 7.2
    ultravioletrs/cocosgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  23. CVE-2026-104269High
    ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)
    CVSS 8.6
    owasp-modsecurity/ModSecuritygeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  24. CVE-2026-73856High
    ModSecurity: Response Body Inspection Bypass
    CVSS 8.6
    owasp-modsecurity/ModSecuritygeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  25. CVE-2026-61813Low
    ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::download
    CVSS 3.7
    owasp-modsecurity/ModSecuritygeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  26. CVE-2026-103932Medium
    ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match
    CVSS 5.8
    owasp-modsecurity/ModSecuritygeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  27. CVE-2026-119751Medium
    Content Egg WordPress Plugin < 12.1.0 Unauthenticated Information Disclosure via render-blocks
    CVSS 6.9
    keywordrush/Content Egg – Affiliate Product Importer & Price Comparisongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  28. CVE-2026-102615High
    HeyForm: Uploaded HTML files are served as text/html on the app origin with no CSP — stored XSS
    CVSS 7.6
    heyform/heyformgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  29. CVE-2026-102523High
    MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION
    CVSS 8.0
    MariaDB/servergeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  30. CVE-2026-70660Medium
    stable-diffusion.cpp: Out-of-bounds read in safetensors loader: unvalidated data_offsets allow a tensor's byte range to extend past the end of the file
    CVSS 6.9
    leejet/stable-diffusion.cppgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  31. CVE-2026-70659High
    stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name
    CVSS 7.8
    leejet/stable-diffusion.cppgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  32. CVE-2026-121139High
    Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication
    CVSS 7.3
    Rapid7/Metasploit Frameworkgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  33. CVE-2026-123096High
    anacrolix/torrent through 1.61.0 Memory Exhaustion via Unbounded HTTP Tracker Response
    CVSS 7.1
    anacrolix/torrentgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  34. CVE-2026-123095High
    mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines
    CVSS 7.7
    mpv-player/mpvgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  35. CVE-2026-123094Medium
    Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name
    CVSS 5.1
    huginn/huginngeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  36. CVE-2026-122330Medium
    Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()
    CVSS 6.8
    Blosc/c-blosc2generic
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  37. CVE-2026-122329High
    SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder
    CVSS 8.5
    libsdl-org/SDL_mixergeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  38. CVE-2026-122328High
    SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder
    CVSS 8.5
    libsdl-org/SDL_mixergeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  39. CVE-2026-122327Medium
    Meelo through 3.13.1 Missing Authorization on Song, Track and Video Endpoints
    CVSS 5.3
    Arthi-chaud/Meelogeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  40. CVE-2026-122326Medium
    Chevereto before 4.5.8 Private Album Image Disclosure via get-album-contents
    CVSS 6.9
    Chevereto/Cheveretogeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  41. CVE-2026-122325Low
    eventyay-exhibition through commit f68888e Cross-Event Attendee Data Disclosure via Lead Creation API
    CVSS 2.3
    fossasia/eventyay-exhibitiongeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  42. CVE-2026-122324Low
    SplitPro through 2.1.6 Authorization Bypass via expense.getExpenseDetails
    CVSS 2.3
    oss-apps/SplitProgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  43. CVE-2026-122317Medium
    SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query
    CVSS 5.3
    oss-apps/SplitProgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  44. CVE-2026-119744High
    Cendio ThinLinc Improper Authentication via Web Access
    CVSS 7.7
    Cendio/ThinLincgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-123032Medium
    OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication
    CVSS 6.9
    OpenBMB/Internet of Agentsgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 5, 2026View HOL analysis
  46. CVE-2026-66903Medium
    Apache OFBiz: Authenticated Path Traversal in Catalog Image Management
    CVSS 6.5
    Apache Software Foundation/Apache OFBizgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  47. CVE-2026-71901High
    Apache OFBiz: Dispatch arbitrary internal services on SFA component
    CVSS 8.1
    Apache Software Foundation/Apache OFBizgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  48. CVE-2026-68524Unknown severity
    Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading
    Not scoredSource severity not reported
    Apache Software Foundation/Apache OFBizgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
  49. CVE-2026-64860Medium
    espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression
    CVSS 6.5
    espressif/esp-protocolsgeneric
    PublishedNov 5, 2026First seen at HOL Oct 30, 2026Updated Nov 5, 2026 Fix availableView HOL analysis
  50. CVE-2026-73577Unknown severity
    Apache OFBiz: Unauthenticated path-suffix view authorization bypass
    Not scoredSource severity not reported
    Apache Software Foundation/Apache OFBizgeneric
    PublishedNov 5, 2026First seen at HOL Nov 5, 2026Updated Nov 6, 2026 Fix availableView HOL analysis
Page 24 of 1,042
Previous2223242526Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard