Browse CVEs by Ecosystem and Severity

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)

Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping

Style Dictionary - Prototype Pollution in convertTokenData utility function

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Budibase: Privilege escalation via public role assignment API missing app-level authorization

react-server-dom: Denial of Service in Server Functions

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

n8n: Authenticated code execution in the n8n Git node

n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login

n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner

n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution

n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`

n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

SVGO removeScripts plugin leaves some executable scripts intact

Directus: Authorization-dependent response served from unsegmented cache key

Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader

Prompty: Arbitrary file read via file reference expansion

@andrea9293/mcp-documentation-server: Web UI API binds to all interfaces without authentication by default

systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

electerm has Command Injection in File System Operations (rmrf, mv, cp)

OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks

OpenClaw: Telegram interactive callbacks could skip commands.allowFrom

OpenClaw: Matrix allowFrom could bind to mutable display names

OpenClaw: Combined POSIX shell options could confuse exec revalidation

OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows

OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing

OpenClaw: Scoped chat.send route inheritance could bypass admin command scope gates

OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

OpenClaw: Shell wrapper argv could change between approval and execution

repomix Vulnerable to Command Injection (RCE) via `--remote-branch` Argument Injection

@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials

jupyterlab-git extension: Stored XSS leading to RCE

Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat

npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining