Browse CVEs by Ecosystem and Severity

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration

Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

Prompty: Arbitrary file read via file reference expansion

Snowflake Connector for Python improperly verifies TLS hostnames

GPT Researcher MCP STDIO configuration allows remote command execution

DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

Ajenti has an authorization bypass during custom package installation

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

Cognee allows non-superusers to overwrite global LLM configuration

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Open WebUI allows limited stored XSS vila uploaded html file

PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

Langroid Allows XXE Injection via XMLToolMessage

Frappe vulnerable to information disclosure leading to account takeover

Access control vulnerable to user data deletion by anonynmous users

Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

Ankitects Anki arbitrary script execution vulnerability

ebookmeta XML External Entity vulnerability

LoLLMS Path Traversal vulnerability

Apache Airflow allows code execution through unsafe serialized DAG deserialization

LoLLMS Command Injection vulnerability

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls