Aigent.ly

Threat Intelligence

Live CVE feed

299 threats tracked across 7 launch stacks — sourced from NVD, GHSA, CISA KEV, OSV, npm Audit, and EPSS.

Stack exposure — click to filter✕ Clear stack filter
Next.js
3crit/40high
Express / Node.js
6crit/15high
FastAPI / Python
2crit/8high
NestJS
0crit/15high
Nuxt
2crit/18high
React SPA
0crit/28high
AI / LLM Apps
31crit/60high
AllCritical + HighCriticalHighMediumLow
All familiesWeb (OWASP)AI/LLM (OWASP LLM)
Sort:NewestSeverityExploit Risk
2threats · FastAPI / Python · Critical
Get guardrails →
CriticalOSVCVE-2024-33663
2 rules

python-jose algorithm confusion with OpenSSH ECDSA keys

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

OWASP A02OWASP Web
Get guardrail →
CriticalOSVCVE-2025-3248
2 rules

FastAPI unauthenticated RCE via code eval endpoint (Langflow)

FastAPI app executed arbitrary Python via /api/v1/validate/code without authentication. Actively exploited in wild.

OWASP A03OWASP A07OWASP Web
Get guardrail →

Showing 1–2 of 2 threats