Browse CVEs by Ecosystem and Severity

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

Ghost: Remote Code Execution via Bookmark Card Images

Payload: SQL injection in SQLite/Postgres

Payload: Bypassed sanitization of user uploaded SVGs

Backstage: Improper validation of TechDocs MkDocs configuration

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

Backstage: Scaffolder action input authorization bypass

Payload Ecommerce has an order confirmation validation issue

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

Vendure has stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

SVGO: removeScripts allows executable links through namespace and control-character bypasses

CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass

@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys

@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript

9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS

Nx: Zip-Slip in the self-hosted remote cache

Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history

Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass