Browse CVEs by Ecosystem and Severity

Traefik: ForwardAuth identity spoofing via dot-form header alias

Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port

Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion

kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

kumactl connects to control plane without verifying TLS certificate when no CA is configured

Gogs's Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName

containerd: CRI checkpoint import allows local image tag poisoning

Canonical MicroCeph: path traversal issue in the remote-import AP

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL

Fleet vulnerable to SQL Injection in MDM bootstrap package by authenticated team or global admin

OpenFGA has an Authorization Bypass through cached keys

SiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS

SiYuan has a SVG Sanitizer Bypass via `<animate>` Element — Unauthenticated XSS

Kata Container to Guest micro VM privilege escalation

OpenFGA Improper Policy Enforcement

Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability

listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

OpenFGA Improper Policy Enforcement

DragonFly vulnerable to arbitrary file read and write on a peer machine

OpenFGA Authorization Bypass

Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs

OpenFGA Authorization Bypass

Insufficient input sanitization in ejson2env

OpenFGA Authorization Bypass

OpenFGA Authorization Bypass

OpenFGA Authorization Bypass

OpenShift Controller Manager Improper Privilege Management

OpenShift Builder has a path traversal, allows command injection in privileged BuildContainer

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

pubnub Insufficient Entropy vulnerability

HTTP/2 Stream Cancellation Attack

Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers