Browse CVEs by Ecosystem and Severity

MPXJ: XXE Vulnerability in MerlinReader

PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

Prompty: Arbitrary file read via file reference expansion

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

jupyterlab-git extension: Stored XSS leading to RCE

Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS

ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

PraisonAI has an SSRF bypass

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

SimpleEval: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

D-Tale affected by Remote Code Execution through the /save-column-filter endpoint

Django has an SQL Injection issue

Django has an SQL Injection issue

picklescan missing detection by simple obfuscation of a `builtins.eval` call

AutoGPT is Vulnerable to RCE via Disabled Block Execution

Langflow affected by Remote Code Execution via validate_code() exec()

Fickling vulnerable to detection bypass due to "builtins" blindness

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling Blocklist Bypass: cProfile.run()

Fickling has a bypass via runpy.run_path() and runpy.run_module()

Langflow Missing Authentication on Critical API Endpoints

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef

Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef

Picklescan has Incomplete List of Disallowed Inputs

Picklescan does not block ctypes

Picklescan vulnerable to Arbitrary File Writing

Keras Directory Traversal Vulnerability

LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Django has a denial-of-service vulnerability in HttpResponseRedirect and HttpResponsePermanentRedirect on Windows

pg8000 SQL injection vulnerability via a specially crafted Python list input

Django is subject to SQL injection through its column aliases

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution

Pycel allows code injection via a crafted formula

Whoogle allows attackers to execute arbitrary code via supplying a crafted search query

Spacy-LLM Server-Side Template Injection (SSTI) vulnerability

pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution