Browse CVEs by Ecosystem and Severity

Ludwig framework is vulnerable to insecure deserialization in its model serving component

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism

Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page

PySyft server-side arbitrary Python execution after code approval

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

Open WebUI has an LDAP Empty Password Authentication Bypass

dash-uploader has a directory traversal vulnerability

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

Compromise of PyTorch Lightning PyPi Package Versions

misp-modules has nsafe remote resource fetching in expansion

PraisonAI has an SSRF bypass

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

django-s3file is vulnerable to relative path traversal

Langflow Knowledge Bases API is Vulnerable to Path Traversal

FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft

Codechecker has an authentication bypass for certain API calls

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`

ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

Sentry's improper authentication on SAML SSO process allows user identity linking

NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system

LiteLLM has SQL Injection in Proxy API key verification

Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection

OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes

Sentry: Improper authentication on SAML SSO process allows user identity linking

UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen

UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable

Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

excel-mcp-server has a Path Traversal issue

Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability

aws-mcp has a Command Injection Remote Code Execution Vulnerability

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

PraisonAI has critical RCE via `type: job` workflow YAML

PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`

PraisonAI Vulnerable Untrusted Remote Template Code Execution

parisneo/lollms vulnerable to stored XSS in the social feature

PraisonAI Vulnerable to OS Command Injection

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass