Known Vulnerabilities for Endpoint by Elastic
Listed below are 1 of the newest known vulnerabilities associated with "Endpoint" by "Elastic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40036 json | Unfurl before 2026.04 contains an unbounded zlib decompression vulnerability in parse_compressed.py that allows remote attac... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-39901 json | monetr is a budgeting application focused on planning for recurring expenses. Prior to 1.12.3, a transaction integrity flaw a... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-39890 json | PraisonAI is a multi-agent teams system. Prior to 4.5.115, the AgentService.loadAgentFromFile method uses the js-yaml library... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-39882 json | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) re... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-39397 json | @delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder. Prior to 0.6.23, all /api/puck/... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-39381 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.8.0-alpha.... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-39374 json | Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member (... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-39341 json | ChurchCRM is an open-source church management system. Prior to 7.1.0, The application is vulnerable to time-based SQL injecti... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-39334 json | ChurchCRM is an open-source church management system. Prior to 7.1.0, an SQL injection vulnerability was found in the endpoin... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-39333 json | ChurchCRM is an open-source church management system. Prior to 7.1.0, he FindFundRaiser.php endpoint reflects user-supplied i... | Not Provided | 2026-04-07 | 2026-04-07 |