Browse CVEs by Ecosystem and Severity

NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

MCP-for-Stata: Command injection via log_file_name parameter in Stata command wrapper

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

OpenMed vulnerable to remote code injection through privacy-filter model loading path

praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members

Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

Langroid has Prompt to SQL Injection, Leading to RCE

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

BoxLite: Permission Bypass Allows Modification of Read-Only Files

Apache Fory PyFory Deserialization of Untrusted Data

APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

Malicious code in guardrails-ai 0.10.1 (supply chain compromise)

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

ChromaDB Python project has a pre-authentication code injection vulnerability

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub

Ludwig framework is vulnerable to insecure deserialization through its predict() method.

Ludwig framework is vulnerable to insecure deserialization in its model serving component

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

PySyft server-side arbitrary Python execution after code approval

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Open WebUI has an LDAP Empty Password Authentication Bypass

dash-uploader has a directory traversal vulnerability

Compromise of PyTorch Lightning PyPi Package Versions

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API