Browse CVEs by Ecosystem and Severity

Hazelcast allows arbitrary member memory access by low-privileged client

Hazelcast has an authorization bypass in IMap Predicates API

AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

http4s-scala-xml has an XML External Entity (XXE) processing issue

Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ: XXE Vulnerability in MerlinReader

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata

Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)

Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

Apache FreeMarker template loading mechanism vulnerable to path traversal

GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

MapFish Print has XXE that allows reading arbitrary files of certain types

Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

Spring Framework Server Sent Event stream corruption while rendering fragments

Spring Framework Improper Path Limitation in XsltView

Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability

Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability

Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability

Sakai Conversations has a Stored XSS Issue

Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes

Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

Keycloak: Unauthenticated account takeover via reset-credentials flow bypass

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

Kestra vulnerable to stored XSS via custom Markdown [[link]] attribute injection

http4k: `DigestAuthProvider.verify` did not bind to request URI

Apache Ranger has a Command Injection vulnerability

Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard

Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI

Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities

OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass

fastjson has a remote code execution (RCE) vulnerability

Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js