Browse CVEs by Ecosystem and Severity

golang.org/x/crypto vulnerable to infinite loop on large channel writes

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

golang.org/x/crypto doesn't enforce invoking key constraints

Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise

i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string

i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names

OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints

OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Budibase has nonymous NoSQL operator injection via published-app query templates

Gogs has Path Traversal in organization name that results in RCE through Git hooks

Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym

Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge

expr-eval vulnerable to Code Execution

Budibase has arbitrary file read by workspace-builder via PWA-zip symlink upload

scimPatch vulnerable to prototype pollution via unfiltered keys in patch

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

OpenAM has pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)

xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro

Canonical ADSys Uses a Less Trusted Source

Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)

Paymenter vulnerable to Remote Code Execution via public file uploads

OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs

CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation

Tilt: Missing authentication on the network-exposed Tilt HUD server

Network-AI: Improper Neutralization of Special Elements used in an OS Command

Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

@acastellon/auth: Authentication bypass via spoofable headers in validateToken()

netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

python-statemachine SCXML <data expr> Eval Injection

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

npm PraisonAI MCPServer exposes unauthenticated HTTP tools/call

npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool

npm PraisonAI codeMode sandbox escape via Function constructor

PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints