Browse CVEs by Ecosystem and Severity

npm PraisonAI AgentLoop onToolCall approval runs after tool execution

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

OpenClaw: Pairing-scoped device session could restore revoked node token authority

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

n8n: Credential Exfiltration via Permission Bypass

n8n: Python sandbox escape

@angular/platform-server: Missing `<noscript>` Raw-Text Serialization Escaping leads to Cross-Site Scripting (XSS) in Angular SSR

@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass

OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri

@hulumi/policies has a HULUMI-H5 bypass via decoy sibling resources targeting a different bucket

@hulumi/policies bypasses policy packs with a forged Pulumi-URN logical name

degit has a Command Injection issue

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

DbGate: Remote Code Execution via functionName injection in loadReader endpoint

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

NodeVM network builtin exclusions bypass via internal _http_client and _http_server

vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain

vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint

@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters

FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview

@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

ngrok is Vulnerable to Command Injection

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover

FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover

FlowiseAI: Vector Store No Permission Checks

n8n Has a Source Control Pull SQL Injection

Flowise has an MCP Security Bypass that Enables RCE

protobuf.js: Code injection in pbjs static output from crafted schema names

protobuf.js: Code injection through bytes field defaults in generated toObject code

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades