Browse CVEs by Ecosystem and Severity

esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route

Vijkunja has Weak Password Policy Combined with Persistent Sessions After Password Change

OliveTin: OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

Caddy: Unicode case-folding length expansion causes incorrect split_path index in FastCGI transport

Caddy: mTLS client authentication silently fails open when CA certificate file is missing or malformed

Kata Container to Guest micro VM privilege escalation

Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints

opa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in input.parsed_path

Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

FrankenPHP's unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FrankenPHP

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

Antrea has invalid enforcement order for network policy rules caused by integer overflow

Gogs Vulnerable to 2FA Bypass via Recovery Code

Gogs's update .git/config file allows remote command execution

OpenFGA Improper Policy Enforcement

OpenCloud Reva has a Public Link Exploit

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage

Alist vulnerable to Path Traversal in multiple file operation handlers

Alist has Insecure TLS Config

ingress-nginx's `nginx.ingress.kubernetes.io/auth-method` Ingress annotation can be used to inject configuration into nginx

ingress-nginx's `rules.http.paths.path` Ingress field can be used to inject configuration into nginx

Navidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints

OpenList vulnerable to Path Traversal in file copy and remove handlers

Rancher CLI skips TLS verification on Rancher CLI login command

SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE

Kyverno Cross-Namespace Privilege Escalation via Policy apiCall

Free5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value

Incus container image templating arbitrary host file read and write

Incus container environment configuration newline injection

Dragonfly Manager Job API Unauthenticated Access

Soft Serve Affected by an Authentication Bypass

Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment

Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

Skipper is vulnerable to arbitrary code execution through lua filters

Arcane Has a Command Injection in Arcane Updater Lifecycle Labels That Enables RCE

Envoy Extension Policy lua scripts injection causes arbitrary command execution

WeKnora has Command Injection in MCP stdio test

OpenFlagr contains an authentication bypass vulnerability in the HTTP middleware

Bypassing Kyverno Policies via Double Policy Exceptions

Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer

listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover

Ollama Platform has missing authentication enabling attackers to perform model management operations

openshift-apiserver: SSRF via Missing IP/Network-Range Validation in User-Supplied Image References

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

Misconfigured Internal Proxy in runtimes-inventory-rhel8-operator Grants Standard Users Full Cluster Administrator Access

OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources

NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)

Gogs vulnerable to a bypass of CVE-2024-55947