HOL LogoGuard

Explore HOL

  • HOL home
  • AI agent registry
  • AI plugins
  • Open standards
  • HOL members
  • Sponsor HOL
  • Advertise with HOL

Guard product

  • Guard overviewLocal security and control for AI agents and the tools they use.
  • FeaturesRuntime protection, policy routing, review, and evidence.
  • CIGARPoint your coding agent at the right lines and cut its token bill by about a third.

Explore Guard

  • Product previewWalk through Guard surfaces in read-only demo mode.
  • ComparisonCompare Guard with native controls and AI security vendors.

AI tools

  • All AI toolsEvery supported AI tool and how Guard applies policy to it.
  • Codex
  • Claude Code
  • Cursor
  • Antigravity CLI
  • OpenCode
  • Hermes
  • OpenClaw
  • GitHub Copilot CLI
  • Antigravity
  • Kimi
  • Grok
  • Pi / Oh My Pi
  • Zcode

Extensions

  • All extensionsBrowse command and MCP coverage with owners and stated limits.
  • Command coverageShell command protection across clouds, databases, backups, and packages.
  • MCP server coverageSee how Guard maps risk state across MCP tools and servers.
  • Core safetyThe safety floor listings that ship with Guard.
  • Data and resilienceBackup and storage command protection.
  • Cloud and infrastructureAWS, Azure, GCP, Kubernetes, and more.

Security

  • AI security hubSecurity research, advisories, and agent safety coverage.
  • AI tool securitySecurity profiles for each supported coding agent.
  • Safe labsHands-on attack simulations with safe boundaries.
  • Redacted warningsReal blocked actions with sensitive details removed.
  • AdvisoriesCoordinated disclosure reports for AI tooling.
  • Active CVEsSearch active CVEs affecting AI tooling.

Learn

  • Security guidesPractical guides for securing AI agent workflows.
  • DocsInstall, configure, and operate Guard with confidence.
  • ResearchPublished security research, benchmarks, and methodology.
  • Gauntlet benchmarkGuard tested with real coding agents: safe work runs, risky actions stop.

Community

  • ReleasesVersion history, shipped changes and upgrade notes.
  • ContributorsThe people and contributions behind HOL Guard.
  • AffiliatesShare Guard with your audience and earn from referrals.
  • SponsorFund agreed research, implementation and shared testing through the HOL Partner Program.
  • AdvertiseCompare README logo placements, previews and monthly prices, or promote a plugin or extension.
PricingEnterpriseOpen AppInstall Guard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • OWASP MCP mapping
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard

Get HOL Guard for your computer

HOL Guard is a free desktop app that watches what coding agents such as Claude Code, Codex and Cursor run, read and install, and asks you before anything risky happens.

  • Download for macOS
  • Windows download
  • Linux download

Free. macOS 13+ on Apple silicon, Windows x64, Linux AppImage. Other ways to install

Runs on
macOS 13 or later on Apple silicon, Windows x64 and Linux x86_64.
Price
Free. Paid plans add Guard Cloud for teams. See pricing
Where your data stays
On your computer. Guard Cloud is optional.
Token savings
33% to 38% lower spend across three coding agents in our CIGAR benchmark.

HOL

HOL builds open infrastructure for AI agents: HOL Guard, a directory of AI plugins and MCP servers, an AI agent registry and the open HCS standards.

  • GitHub (opens in a new tab)
  • X (Twitter) (opens in a new tab)
  • YouTube (opens in a new tab)
  • Telegram (opens in a new tab)

HOL Guard

  • What is HOL Guard
  • Features
  • Cut coding agent token costs (CIGAR)
  • Install Guard
  • Download the desktop app
  • Pricing
  • Guard for teams
  • Compare Guard
  • Release notes

Guard for your AI tool

  • Guard for Claude Code
  • Guard for Codex
  • Guard for Cursor
  • Guard for GitHub Copilot CLI
  • Guard for OpenCode
  • Guard for Pi and Oh My Pi
  • Guard for Hermes
  • Guard for OpenClaw
  • All supported AI tools

Research and security

  • Gauntlet: Guard tested with real agents
  • CIGAR token benchmark
  • Research
  • AI security hub
  • Security advisories
  • Active CVEs in AI tools
  • AI agent security guides
  • Extensions and coverage

Plugins and MCP servers

  • Browse AI plugins
  • New plugin launches
  • Best Claude Plugins
  • Best Codex Plugins
  • Best Grok Plugins
  • Best Kimi Plugins
  • Best DeepSeek Plugins
  • Best Antigravity Plugins
  • Best MCP Servers
  • Best Cursor Plugins
  • Best OpenCode Plugins

AI agent registry

  • Best AI agents
  • Best ERC-8004 agents
  • Best Virtuals agents
  • Best A2A agents
  • Best x402 payable agents
  • Submit an ERC-8004 contract
  • Feature your agent

Developers

  • Guard docs
  • Documentation index
  • Developer hub
  • Registry API reference
  • OpenAPI spec
  • Registry OpenAPI spec
  • Run in Postman (opens in a new tab)
  • HCS standards

Company

  • About HOL
  • Blog
  • Contribute to HOL
  • Guard contributors
  • Sponsor
  • Advertise
  • Affiliate program
  • Contact

Copyright © 2026 HOL DAO LLC. All rights reserved.

  • Privacy
  • Terms of Service

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Nov 8, 2026, 6:59 AM 52,076 active 372 known exploited

Catalog summary

52,076

Active CVEs

27,238

Critical + high

372

Known exploited

21

Ecosystems

Search and filter active CVEs

Filters & sort
Severity

Showing 101–150 of 52,076 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-123539Medium
    OpenAM before 16.1.4 Stored XSS via OAuth 2.0 Consent Page Display Name
    CVSS 4.8
    OpenIdentityPlatform/OpenAMgeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  2. CVE-2026-123538High
    OpenAM before 16.1.4 SAML 1.x Signature Verification Issuer Impersonation
    CVSS 7.5
    OpenIdentityPlatform/OpenAMgeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  3. CVE-2026-123537Medium
    OpenAM before 16.1.4 SSRF via UMA Scope Description URLs
    CVSS 5.3
    OpenIdentityPlatform/OpenAMgeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  4. CVE-2026-123536Medium
    OpenAM before 16.1.4 SSRF via Federation Configuration Wizard Metadata URLs
    CVSS 5.1
    OpenIdentityPlatform/OpenAMgeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  5. CVE-2026-123535Low
    Tornado before 6.6 Cookie Attribute Injection via set_cookie max_age
    CVSS 2.3
    tornadoweb/tornadogeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  6. CVE-2026-123534High
    Tornado before 6.6 Path Traversal via static_url() Version Hashing
    CVSS 8.3
    tornadoweb/tornadogeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  7. CVE-2026-123533Medium
    Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
    CVSS 6.8
    GitoxideLabs/gitoxidegeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  8. CVE-2026-123532High
    gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe
    CVSS 7.1
    GitoxideLabs/gitoxidegeneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  9. CVE-2026-123531High
    Vikunja 1.0.0 before 2.7.1 Pagination Limit Bypass via page=0 Parameter
    CVSS 8.7
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  10. CVE-2026-123530Medium
    Vikunja before 2.7.1 Missing Step-Up Authentication via TOTP Enrollment Endpoints
    CVSS 6.0
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  11. CVE-2026-123529Medium
    Vikunja before 2.7.1 Stored CSS Injection via TipTap Table Cell data-background-color
    CVSS 5.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  12. CVE-2026-123528High
    Vikunja before 2.7.1 Insufficient Session Expiration via HTTP Token Middleware
    CVSS 7.6
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  13. CVE-2026-123527Medium
    Vikunja 2.4.0 before 2.7.1 API Token Scope Collision Authorization Bypass
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  14. CVE-2026-123526Medium
    Vikunja before 2.7.1 Mass Assignment via Team external_id Field
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  15. CVE-2026-123525High
    Vikunja before 2.7.1 Memory Exhaustion DoS via Trello, Todoist and Microsoft To Do Migrations
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  16. CVE-2026-123524Medium
    Vikunja 0.23.0 before 2.7.1 Information Disclosure via Webhook related_tasks Payload
    CVSS 6.9
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  17. CVE-2026-123523High
    Vikunja before 2.7.1 Memory Exhaustion via Unbounded Avatar Size Cache
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  18. CVE-2026-123522High
    Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  19. CVE-2026-123521Medium
    Vikunja before 2.7.1 Password Brute-Force via TOTP Disable Endpoint
    CVSS 6.0
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  20. CVE-2026-123520High
    Vikunja 0.18.0 before 2.7.1 Privilege Escalation via Account Deletion
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  21. CVE-2026-123519High
    Vikunja before 2.7.1 Memory Exhaustion DoS via WeKan and Vikunja-File Imports
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  22. CVE-2026-123518Medium
    Vikunja before 2.7.1 Missing Authorization in Kanban Task-Bucket Move
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  23. CVE-2026-123517High
    Vikunja before 2.7.1 Information Disclosure via Team Self-Removal Endpoint
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  24. CVE-2026-123516High
    Vikunja before 2.7.1 Resource Exhaustion via Vikunja-File ZIP Import
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  25. CVE-2026-123515Medium
    Vikunja before 2.7.1 Client-Side Request Forgery via Stored Rich-Text Images
    CVSS 5.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  26. CVE-2026-123514Medium
    Vikunja before 2.7.1 Orphaned Export Archives Enable Disk Exhaustion
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  27. CVE-2026-123513High
    Vikunja before 2.7.1 Auth Token Leak via API URL Change
    CVSS 7.6
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  28. CVE-2026-123512High
    Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs
    CVSS 8.4
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  29. CVE-2026-123511Medium
    Vikunja before 2.7.1 Resource Exhaustion via CalDAV VTODO RELATED-TO Entries
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  30. CVE-2026-123510Low
    Vikunja before 2.7.1 Plugin and Log Directories Not Anchored to Rootpath
    CVSS 1.0
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  31. CVE-2026-123509Medium
    Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  32. CVE-2026-123508Low
    Vikunja before 2.7.1 Supply Chain Risk via Unpinned xgo Release Toolchain
    CVSS 2.0
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  33. CVE-2026-123507Medium
    Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter
    CVSS 5.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  34. CVE-2026-123506Medium
    Vikunja 2.2.0 before 2.7.1 Token Scope Bypass via Project Webhook Endpoints
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  35. CVE-2026-123505Medium
    Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database
    CVSS 6.8
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  36. CVE-2026-123504Medium
    Vikunja 0.22.0 before 2.7.1 Webhook URL Credential Exposure to Read-Only Members
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  37. CVE-2026-123503Medium
    Vikunja before 2.7.1 Improper Authorization in Kanban Bucket Deletion
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  38. CVE-2026-123502Medium
    Vikunja before 2.7.1 Link-Share Hash Exposure via Request Path Logging
    CVSS 6.9
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  39. CVE-2026-123501High
    Vikunja before 2.7.1 Memory Exhaustion DoS via Unbounded Image Decodes
    CVSS 7.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  40. CVE-2026-123500Medium
    Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump
    CVSS 6.9
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  41. CVE-2026-123499Medium
    Vikunja veans before 2.7.1 Credential Leak via Repo-Controlled .veans.yml Server
    CVSS 6.0
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  42. CVE-2026-123498Low
    Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata
    CVSS 2.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  43. CVE-2026-123497High
    Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery
    CVSS 7.6
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  44. CVE-2026-123496Medium
    Vikunja veans before 2.7.1 Symlink Following in veans init
    CVSS 4.8
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  45. CVE-2026-123495Medium
    Vikunja 2.0.0 before 2.7.1 Login CSRF via /api/v2 Login and OIDC Callback
    CVSS 5.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  46. CVE-2026-123494Medium
    Vikunja before 2.7.1 Login CSRF via Migration OAuth Callbacks
    CVSS 5.1
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  47. CVE-2026-123493Medium
    Vikunja from 2.4.0 before 2.7.1 Authentication Bypass via Bot API Tokens
    CVSS 5.3
    go-vikunja/vikunjageneric
    PublishedNov 8, 2026First seen at HOL Nov 8, 2026Updated Nov 8, 2026 Fix availableView HOL analysis
  48. CVE-2026-120531High
    Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter
    CVSS 7.2
    wedevs/Subscribe2 – Form, Email Subscribers & Newslettersgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
  49. CVE-2026-99284Unknown severity
    net: skbuff: propagate shared-frag marker in skb_zerocopy()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026 Fix availableView HOL analysis
  50. CVE-2026-124060Critical
    TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow
    CVSS 9.4
    TOTOLINK/CA300-PoEgeneric
    PublishedNov 7, 2026First seen at HOL Nov 7, 2026Updated Nov 7, 2026View HOL analysis
Page 3 of 1,042
Previous12345Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard