Browse CVEs by Ecosystem and Severity

Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

@xhmikosr/decompress: Path traversal via symlink chain

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

SunEditor: Critical XSS vulnerability - sanitizer bypass

deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

Vendure has stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions

@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

yayson: Prototype pollution in Store/LegacyStore deserialization

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

SVGO: removeScripts allows executable links through namespace and control-character bypasses

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API

SWC HTML minifier may allow script element breakout when minifying embedded JSON

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

Orval: Import-time RCE via schema default -> zod module-level template literal

Orval: Import-time RCE via array-items default -> zod module-level template literal

Orval: Import-time RCE via header-parameter default -> zod module-level template literal