Browse CVEs by Ecosystem and Severity

PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

Turbo: Unexpected local code execution during Yarn Berry detection

9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass

HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack

HAXcms: Private Key Disclosure via Broken HMAC Implementation

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

ngrok is Vulnerable to Command Injection

Budibase: Builder-to-Admin Privilege Escalation via onboardUsers Endpoint Without SMTP Configuration

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

vm2 Has a Sandbox Breakout Using Async Generator

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover

FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover

FlowiseAI: Vector Store No Permission Checks

n8n Has a Source Control Pull SQL Injection

n8n Has an XML Node Prototype Pollution Patch Bypass

n8n Has an Arbitrary File Read via Git Node

n8n: HTTP Request Node Pagination Prototype Pollution to RCE

FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape

Flowise has an MCP Security Bypass that Enables RCE

Strapi may leak sensitive data via relational filtering due to lack of query sanitization

Strapi Vulnerable to SQL Injection in Content Type Builder

SillyTavern has a Path Traversal issue

SillyTavern has Authentication Bypass via SSO Header Injection

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

protobuf.js: Code injection in pbjs static output from crafted schema names

protobuf.js: Code injection through bytes field defaults in generated toObject code

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

SandboxJS has a sandbox escape via Function.caller leakage of internal call op

WebdriverIO BrowserStack Service has a Command Injection issue

Angular Expressions - Remote Code Execution using filters

Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades

Facebook React has a Denial of Service Vulnerability in React Server Components

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability

Electerm users can run dangrous code through link or command line

Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor

Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click

Electerm runWidget has a path traversal that leads to arbitrary code execution

vm2 has Sandbox Breakout Through Null Proto Exception

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`