Browse CVEs by Ecosystem and Severity

WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)

Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution

Apache ActiveMQ has an Incorrect Default Permissions vulnerability

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue

Spatie Laravel Media Library contains a file upload restriction bypass

authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user

CC-Tweaked has an SSRF Protection Bypass with NAT64

russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

NodeVM network builtin exclusions bypass via internal _http_client and _http_server

vm2's Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain

vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

Gotenberg has path traversal in zip entry name via Windows-style separators in upload filename

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path

Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcement

HaxCMS has a stored Cross-Site Scripting (XSS) bypass in its saveNode endpoint

Calico Inserts Sensitive Information into Log File

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

Symfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

Deno's TLS retry copies stale upgrade hook, risking plaintext traffic

Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling

Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

Symfony Vulnerable to Identity Spoofing via Unanchored DN Regex in X509Authenticator

Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem

@hapi/content header parser has a parameter smuggling issue that allows upload-filter bypass via duplicate parameters

Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration

Kirby CMS has pre-authentication path traversal and PHP file inclusion during user lookup

Kirby CMS has an Arbitrary Method Call via REST API Search and Collection Query Endpoints

FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection

yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation

Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview

Mattermost doesn't enforce request body size limits on plugin HTTP endpoints

Mattermost doesn't properly validate msgpack-encoded WebSocket frames before memory allocation

Arcane: Missing admin authorization on global variables endpoint

Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification

@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

containerd user ID handling bypass allows runAsNonRoot evasion

Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation

Twig: Sandbox property and method bypass via object-destructuring assignment

Russh: Unchecked CryptoVec allocation and growth handling is reachable

MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement

Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss

Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives