Browse CVEs by Ecosystem and Severity

Facebook React has a Denial of Service Vulnerability in React Server Components

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor

Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click

node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js

vm2 has a Sandbox Escape via Promise Constructor Unhandled Rejection (Process Crash DoS)

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods

Clerk has an authorization bypass when combining organization, billing, or reverification checks

n8n Vulnerable to XSS via MCP OAuth client

n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay

simple-git is vulnerable to Remote Code Execution

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

Actual has Privilege Escalation via 'change-password' Endpoint on OpenID-Migrated Servers

Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

OpenClaw: busybox and toybox applet execution weakened exec approval binding

OpenClaw: Sandboxed agents could escape exec routing via host=node override

OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins

OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows

OpenClaw: Exec environment denylist missed high-risk interpreter startup variables

Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR)

Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution

OAuth 2.1 Provider: Unprivileged users can register OAuth clients

Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server

Flowise: resetPassword Authentication Bypass Vulnerability

Flowise: Cypher Injection in GraphCypherQAChain

Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMS

Path traversal in vite-plus/binding downloadPackageManager() writes outside VP_HOME

mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes

React Server Components have a Denial of Service Vulnerability

Directus: Missing Cross-Origin Opener Policy

Budibase: Path traversal in plugin file upload enables arbitrary directory deletion and file write

Budibase: Command Injection in Bash Automation Step

OpenClaw: Unbound bootstrap setup codes allow privilege escalation during pairing

OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md

OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

Electron: Context Isolation bypass via contextBridge VideoFrame transfer

@payloadcms/next has Stored XSS in Admin Panel

OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides

OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals

MikroORM has Prototype Pollution in Utils.merge

OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers

Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code

OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface

OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper

n8n has SQL Injection in Data Table Node via orderByColumn Expression

n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition

jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction