Browse CVEs by Ecosystem and Severity

sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration

Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

Snowflake Connector for Python improperly verifies TLS hostnames

GPT Researcher MCP STDIO configuration allows remote command execution

DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

Ajenti has an authorization bypass during custom package installation

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

Cognee allows non-superusers to overwrite global LLM configuration

PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

Langroid Allows XXE Injection via XMLToolMessage

Frappe vulnerable to information disclosure leading to account takeover

Access control vulnerable to user data deletion by anonynmous users

Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

Ankitects Anki arbitrary script execution vulnerability

ebookmeta XML External Entity vulnerability

LoLLMS Path Traversal vulnerability

Apache Airflow allows code execution through unsafe serialized DAG deserialization

LoLLMS Command Injection vulnerability

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

Remote unauthenticated attackers able to upload files in Onionshare

wolfSSL Python module vulnerable to Improper Authentication

mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

Apache Airflow: JWT token still valid after logout

PraisonAI Has Authentication Bypass via OAuthManager.validate_token()